Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          xwQbAFPvOhkiPq7pBdJEdbFplJisL2DF3HPn7+23p8k=
Subject key identifier:   FD:BE:D3:96:C5:16:54:DA:51:EB:09:96:14:A2:06:B0:F2:F6:A5:D9
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       726FEAD616B8CF23BA4C1301F9C6F4C3DC8FE0C9
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 29 Apr 2025 20:15:01 +0000
ROA not before:           Tue 29 Apr 2025 20:10:01 +0000
ROA not after:            Tue 28 Apr 2026 20:15:01 +0000
asID:                     267797
IP address blocks:        165.98.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6f:ea:d6:16:b8:cf:23:ba:4c:13:01:f9:c6:f4:c3:dc:8f:e0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:10:01 2025 GMT
            Not After : Apr 28 20:15:01 2026 GMT
        Subject: CN=FDBED396C51654DA51EB099614A206B0F2F6A5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:21:38:03:1a:11:42:c8:a5:65:f6:4d:81:
                    1d:fe:50:91:81:a5:46:d5:f8:af:b3:41:78:30:02:
                    cb:7e:fd:58:4c:9f:5d:23:14:d8:61:84:79:bb:85:
                    28:f6:a1:64:6a:8f:23:80:c6:e6:8a:60:f9:4f:ce:
                    92:7b:e3:64:5a:9b:23:77:37:a0:19:c3:8e:14:6a:
                    54:8d:b6:5f:5c:3a:2f:05:b7:25:52:5a:82:dc:46:
                    17:d6:85:a3:bf:d2:1f:69:10:47:15:c5:bb:13:3e:
                    89:75:eb:97:76:62:22:bb:12:50:af:f5:5b:c3:79:
                    c3:06:6b:45:6e:b9:d6:25:ca:7b:bf:2c:24:09:0e:
                    37:c0:ad:ea:b4:0d:1a:16:75:13:9d:c5:9e:a0:b6:
                    ac:e7:fa:8c:9f:27:7f:51:84:bb:43:81:d2:d4:3f:
                    a0:fc:c0:e8:ab:a8:7a:b1:23:50:84:65:24:b9:4e:
                    2d:70:6c:d6:88:0a:f2:33:ba:49:2b:f9:2e:00:d2:
                    d3:e3:f8:0d:d3:33:c7:8f:ea:87:ba:cf:cd:ef:97:
                    f1:3e:1f:d3:eb:71:4a:bb:6d:25:c8:f9:aa:01:47:
                    1f:74:ea:9e:81:66:74:95:46:44:28:2d:a6:bf:e2:
                    69:01:6f:6f:08:b9:e8:20:88:3d:43:da:f4:12:10:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BE:D3:96:C5:16:54:DA:51:EB:09:96:14:A2:06:B0:F2:F6:A5:D9
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:e0:f7:e0:3c:e7:39:cd:b0:d6:d9:dc:6d:56:65:45:e4:
         86:12:33:1b:4f:fc:c9:49:9d:a9:5c:53:f5:31:56:ef:be:c7:
         85:e1:83:1a:f0:4a:3f:93:40:ab:37:1b:88:81:4d:5c:a6:89:
         79:68:62:be:5d:0b:02:33:88:cb:be:a7:fc:da:8b:38:e0:5c:
         81:1e:d1:3f:64:b7:76:ab:a3:5e:54:cd:75:f4:02:71:55:4d:
         9c:e6:84:cf:78:21:6a:71:b5:0f:f3:ba:ec:24:7b:11:c2:07:
         09:9f:46:47:40:12:64:5b:51:b5:45:69:9f:3e:f9:32:15:9e:
         27:47:ef:95:ee:a6:31:97:f6:61:f6:5d:d4:dd:06:29:d7:81:
         b8:01:7b:39:2f:3b:bc:53:e4:1f:c2:66:42:04:2f:19:4f:c3:
         75:b5:c4:ce:17:f0:c2:29:b5:ac:a5:95:19:fc:19:48:66:a8:
         d3:79:fd:8c:b0:50:75:f6:9a:ee:8d:bd:f8:d8:3a:ae:b8:f0:
         76:fa:a9:7e:fe:20:15:6a:be:1c:73:91:85:29:dd:17:d7:20:
         e9:f3:64:63:15:b4:17:30:77:1a:99:cc:2e:46:c6:e2:1b:80:
         2e:dd:f7:23:ee:25:bc:75:61:55:70:7b:c5:27:78:5a:3a:60:
         26:60:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:49:33 2025 by rpki-client