Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e3132322e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          v7mhdsvzKProEs8IEKvj2xpKUAjChTixYcf1yBCVuH8=
Subject key identifier:   57:C5:84:29:39:79:C5:27:50:08:31:CB:87:22:34:7B:09:AB:C9:D4
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       09824765CC51E5B05EC164E56527EAFFFD8612BF
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa
Signing time:             Sat 06 Jun 2026 02:46:49 +0000
ROA not before:           Sat 06 Jun 2026 02:41:49 +0000
ROA not after:            Sat 05 Jun 2027 02:46:49 +0000
asID:                     18840
IP address blocks:        165.98.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:47:65:cc:51:e5:b0:5e:c1:64:e5:65:27:ea:ff:fd:86:12:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun  6 02:41:49 2026 GMT
            Not After : Jun  5 02:46:49 2027 GMT
        Subject: CN=57C584293979C527500831CB8722347B09ABC9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:59:ab:46:b2:96:0d:be:5a:72:dd:d0:d0:
                    20:7a:c6:ef:5b:5b:24:14:24:86:af:6d:c3:50:3e:
                    c2:21:81:68:a2:97:18:eb:4b:ab:78:32:50:fd:73:
                    be:66:10:22:f6:b8:d9:35:72:95:74:64:54:b0:b1:
                    aa:23:b2:71:26:ce:a9:6c:47:bd:12:cc:a3:d7:97:
                    da:3d:33:11:d5:d1:68:54:07:7b:a5:9c:d6:0a:b2:
                    cd:ff:25:29:fa:09:fa:70:06:a3:6a:2c:9a:7c:e9:
                    26:ea:30:0c:94:43:8a:bf:b1:04:cd:46:d2:75:11:
                    3d:2d:73:a4:97:f2:4e:85:c3:bd:d3:59:cd:35:0f:
                    ec:06:21:88:78:80:15:33:c9:1b:c4:36:0c:74:2c:
                    f6:80:c8:f7:24:60:45:9c:8a:1e:ed:8b:6c:0e:c9:
                    de:9e:34:d1:76:04:21:e9:c8:dc:38:59:83:0f:19:
                    89:1a:64:fd:de:d0:82:35:08:37:07:54:f7:85:85:
                    68:4a:02:b0:b0:10:86:3a:51:6f:82:0e:08:73:20:
                    5b:ca:99:db:90:b5:2b:ed:33:0d:9f:7f:a5:bd:c4:
                    0d:da:4f:64:cf:40:11:79:ac:24:39:97:6b:7f:df:
                    cb:ce:a1:7a:a3:21:cd:d3:c6:bb:fc:bf:d6:16:ea:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C5:84:29:39:79:C5:27:50:08:31:CB:87:22:34:7B:09:AB:C9:D4
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:1b:f5:c9:fa:6f:73:47:ac:8c:36:51:68:2a:16:ec:33:
         7f:4b:e0:2f:d1:29:af:ed:a9:47:6e:5d:fc:8d:65:d9:13:51:
         d0:eb:dd:b8:53:cd:ed:f6:e8:c5:9b:fc:78:c9:55:db:5d:c3:
         a0:d9:18:86:dd:04:fb:59:82:e7:0e:15:90:35:28:0c:0b:00:
         95:2f:53:1f:13:78:5e:4f:3c:ef:60:ad:78:bb:52:1f:b3:9a:
         ba:e8:5a:d8:ce:f8:cc:f2:ff:5f:52:07:54:42:27:e2:93:cd:
         39:5f:72:3e:c2:28:23:48:6c:71:41:47:0c:21:17:41:9b:ea:
         49:b4:20:fc:3a:d2:64:10:1d:95:f6:15:90:62:eb:bc:64:55:
         c0:08:23:17:d2:5f:b2:07:38:33:12:99:39:fb:06:06:22:19:
         26:b1:ec:0b:7b:cc:6d:41:bb:05:39:d8:b1:fe:8d:56:2f:8f:
         91:02:cc:b0:b2:9a:78:a9:ca:0e:53:8b:bd:c4:c4:a3:8c:73:
         dc:07:19:43:5b:7b:11:d2:49:f1:d2:34:b3:a7:97:e2:45:f0:
         12:6e:f7:63:81:18:85:fa:81:30:d3:4f:8a:01:08:e5:b2:b5:
         3b:fb:fb:54:e1:d9:6e:a2:c1:32:de:9d:2c:5b:6d:15:38:94:
         43:a0:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:45 2026 by rpki-client