Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa
File:                     3136352e39382e3133322e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          I3VQ3dNwzie2z0fwffC3bsV6siknI6UYBdRIcA64eNY=
Subject key identifier:   F1:3F:BD:9D:37:B1:0D:82:D8:E5:01:2B:E4:47:E7:90:D5:64:57:15
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       7C66BAD2B643621A4FEFF99BA2EFCFF0F2BD80BB
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa
Signing time:             Wed 03 Jun 2026 21:46:27 +0000
ROA not before:           Wed 03 Jun 2026 21:41:27 +0000
ROA not after:            Wed 02 Jun 2027 21:46:27 +0000
asID:                     27742
IP address blocks:        165.98.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:66:ba:d2:b6:43:62:1a:4f:ef:f9:9b:a2:ef:cf:f0:f2:bd:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun  3 21:41:27 2026 GMT
            Not After : Jun  2 21:46:27 2027 GMT
        Subject: CN=F13FBD9D37B10D82D8E5012BE447E790D5645715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:01:a8:16:6b:4b:e0:16:5d:4c:49:2a:50:
                    9a:a0:1b:1c:00:3d:09:37:43:e7:49:09:ce:94:fc:
                    f1:c7:17:90:9f:90:7c:5c:92:14:92:38:2d:f9:51:
                    81:1b:31:dd:5c:12:63:11:4d:4f:bb:21:82:82:a3:
                    4c:d8:52:94:0c:d2:1e:6a:f7:a7:9c:98:2d:e2:47:
                    d5:f4:ae:8e:1d:e0:bc:7c:47:d2:5f:08:93:b8:62:
                    7d:1f:ba:4c:49:e3:ac:69:eb:dd:ab:8e:97:05:67:
                    67:97:87:a5:69:ba:5c:7e:80:84:cb:f8:74:e7:a8:
                    21:58:74:50:58:08:70:6b:37:1f:10:56:d2:0a:38:
                    fb:71:14:68:05:fd:26:a1:16:c3:d3:8b:bc:81:ec:
                    d7:bc:20:0f:19:70:31:d3:61:35:a6:45:0f:21:fc:
                    5f:c3:6d:6f:aa:0f:aa:11:ea:52:9d:63:e5:85:9f:
                    84:c1:9d:f3:36:5a:dd:4c:aa:df:71:39:c6:77:28:
                    ca:a4:60:94:9f:ea:63:6a:cb:60:88:d4:5d:9c:c4:
                    0c:06:ad:7d:58:fd:ea:43:ab:e8:f8:fd:d3:d6:10:
                    8b:cd:c6:7e:87:51:1e:06:63:2f:39:37:58:2f:09:
                    c0:6c:28:2f:aa:b6:34:07:00:14:73:82:02:4a:00:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:BD:9D:37:B1:0D:82:D8:E5:01:2B:E4:47:E7:90:D5:64:57:15
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:58:24:0e:95:ea:91:63:57:1d:11:9a:e1:ca:c1:45:7d:bb:
         61:57:80:aa:ff:4d:46:d1:92:73:a4:2f:4b:a6:83:c9:67:ed:
         43:76:ab:b5:fe:a6:a8:76:4d:4d:68:ae:aa:4a:28:40:5e:d7:
         69:47:76:8b:4c:66:b5:99:fa:b0:e0:d2:2f:71:1d:f3:30:f6:
         ab:61:33:0d:04:44:17:1f:e8:e2:c8:d3:f1:41:27:e4:ab:69:
         87:7a:e3:94:cf:6c:45:8c:60:9d:ed:e8:93:90:7c:6b:7f:9b:
         06:1c:de:8a:68:c1:94:fe:97:f4:36:27:01:21:b2:1e:f1:4d:
         38:20:89:f4:2b:1f:10:1a:da:33:a7:3f:88:ac:5c:c7:de:28:
         8b:e2:4e:84:51:99:83:5f:f4:2b:86:a8:b3:d3:d4:6f:5e:d8:
         bc:86:42:5c:4d:68:5f:dc:b3:e5:12:6f:87:bf:42:dd:ee:5c:
         e6:6c:99:c8:48:0f:16:39:cb:a7:ac:3b:44:01:e1:94:09:2b:
         de:9b:7d:df:1c:3b:73:96:df:1d:dd:df:d3:d1:cd:f3:e5:87:
         10:dd:fd:fc:62:e9:4a:0d:b6:1c:2e:74:35:71:d2:8d:10:2b:
         37:89:28:22:09:d8:b3:7d:12:d5:d6:6b:e7:41:a9:74:cf:bf:
         77:67:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:37 2026 by rpki-client