Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31362e302f32322d3234203d3e20323637373937.roa
File:                     3136352e39382e31362e302f32322d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          tY9glEiJ83mVfzTeZMsU424H2hoioo/JdGSsbKKXTbw=
Subject key identifier:   A8:6A:D6:1E:01:D6:5F:59:60:F8:F4:57:6C:F7:CB:A1:92:8D:24:AB
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       4B9196F83063826750361B46BEAD2FE0308B8F6B
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31362e302f32322d3234203d3e20323637373937.roa
Signing time:             Tue 29 Apr 2025 20:15:00 +0000
ROA not before:           Tue 29 Apr 2025 20:10:00 +0000
ROA not after:            Tue 28 Apr 2026 20:15:00 +0000
asID:                     267797
IP address blocks:        165.98.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:91:96:f8:30:63:82:67:50:36:1b:46:be:ad:2f:e0:30:8b:8f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:10:00 2025 GMT
            Not After : Apr 28 20:15:00 2026 GMT
        Subject: CN=A86AD61E01D65F5960F8F4576CF7CBA1928D24AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:c7:c3:de:2f:f5:cc:1a:13:5b:84:c2:5f:
                    68:df:cc:1f:25:b8:cf:44:97:66:09:c1:3f:c9:bd:
                    50:52:71:77:fa:a0:ea:98:f9:0e:6c:6d:55:99:45:
                    8a:15:66:69:ad:b3:5a:37:8d:a8:76:35:6f:09:3c:
                    48:20:2a:58:70:4b:7a:08:a3:91:f6:bd:0a:88:47:
                    d0:26:0b:06:b3:da:20:1c:96:87:a6:ad:f2:4e:a4:
                    29:1f:48:8f:8b:46:db:7b:6d:8d:5d:bb:a9:8c:62:
                    3e:d0:45:cc:68:80:0f:b4:d0:ed:87:30:f9:75:15:
                    f9:42:dd:08:00:c2:b4:64:c8:af:f3:bc:a5:14:8d:
                    de:37:89:7e:de:09:8d:a4:75:eb:4d:cc:13:7b:14:
                    89:ac:21:24:dd:0a:a8:f1:ef:fc:27:f4:db:d7:c6:
                    51:7d:f6:48:95:74:37:12:f0:a7:0b:22:23:99:99:
                    e7:df:9d:66:0b:14:4a:26:ab:73:80:3f:7a:31:93:
                    c6:36:46:e1:01:a7:e5:42:82:67:db:5f:7f:15:38:
                    52:a7:24:b9:a2:da:2e:72:d0:6d:4f:32:01:11:7b:
                    4e:93:ad:cd:47:4b:93:04:74:db:1b:fe:be:ce:34:
                    e8:63:f3:87:dd:3e:54:29:a1:02:b1:8a:84:f5:05:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6A:D6:1E:01:D6:5F:59:60:F8:F4:57:6C:F7:CB:A1:92:8D:24:AB
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31362e302f32322d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:23:62:ea:cb:01:8e:d5:23:52:5c:64:a0:3d:4d:ec:7f:
         2f:9d:b2:f6:3f:16:85:6b:ec:5e:6d:dd:60:1e:e5:33:55:d5:
         79:2f:d6:cb:d8:20:88:6a:ff:a3:50:19:4c:af:9f:11:54:24:
         43:d7:b1:0d:34:62:80:cd:d6:55:48:2e:fa:d3:4c:a3:93:34:
         a0:d7:20:f5:8b:4f:a4:e7:ca:3e:01:f6:64:64:dc:2b:6a:a2:
         87:db:1c:0c:0d:5b:b5:75:1f:ce:8d:2a:19:c6:dc:6d:14:67:
         e2:e7:5e:aa:1f:66:c0:87:bb:c7:b7:8d:a6:fb:a2:ed:39:72:
         c6:21:2d:3a:35:61:8d:f2:71:f7:de:0d:20:6e:17:ea:ae:c7:
         79:f9:f9:f9:1a:ef:b0:10:05:32:e6:b5:4e:53:47:8c:29:e7:
         ab:9f:df:9e:e3:ab:2b:d9:5b:9f:5c:8d:ee:35:4e:79:68:c5:
         df:5a:47:05:c7:af:e0:08:27:aa:8f:1f:7d:16:68:a4:eb:3f:
         2b:1e:b0:76:e6:ce:f5:f5:8b:53:a8:47:df:f3:ff:6a:ad:d2:
         4c:75:3c:86:7b:2b:de:e1:84:71:9d:a0:20:1a:b7:4d:25:44:
         db:c0:1f:f2:29:49:f8:09:c8:b5:77:9f:14:ca:1d:b8:a7:73:
         3f:56:78:3c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUS5GW+DBjgmdQNhtGvq0v4DCLj2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTA0MjkyMDEwMDBaFw0yNjA0MjgyMDE1MDBaMDMxMTAvBgNV
BAMTKEE4NkFENjFFMDFENjVGNTk2MEY4RjQ1NzZDRjdDQkExOTI4RDI0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClB8fD3i/1zBoTW4TCX2jfzB8l
uM9El2YJwT/JvVBScXf6oOqY+Q5sbVWZRYoVZmmts1o3jah2NW8JPEggKlhwS3oI
o5H2vQqIR9AmCwaz2iAcloemrfJOpCkfSI+LRtt7bY1du6mMYj7QRcxogA+00O2H
MPl1FflC3QgAwrRkyK/zvKUUjd43iX7eCY2kdetNzBN7FImsISTdCqjx7/wn9NvX
xlF99kiVdDcS8KcLIiOZmeffnWYLFEomq3OAP3oxk8Y2RuEBp+VCgmfbX38VOFKn
JLmi2i5y0G1PMgERe06Trc1HS5MEdNsb/r7ONOhj84fdPlQpoQKxioT1BddbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqGrWHgHWX1lg+PRXbPfLoZKNJKswHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqViEDAN
BgkqhkiG9w0BAQsFAAOCAQEAEs4jYurLAY7VI1JcZKA9Tex/L52y9j8WhWvsXm3d
YB7lM1XVeS/Wy9ggiGr/o1AZTK+fEVQkQ9exDTRigM3WVUgu+tNMo5M0oNcg9YtP
pOfKPgH2ZGTcK2qih9scDA1btXUfzo0qGcbcbRRn4udeqh9mwIe7x7eNpvui7Tly
xiEtOjVhjfJx994NIG4X6q7Hefn5+RrvsBAFMua1TlNHjCnnq5/fnuOrK9lbn1yN
7jVOeWjF31pHBcev4Agnqo8ffRZopOs/Kx6wdubO9fWLU6hH3/P/aq3STHU8hnsr
3uGEcZ2gIBq3TSVE28Af8ilJ+AnItXefFModuKdzP1Z4PA==
-----END CERTIFICATE-----
Generated at Tue May 6 14:40:29 2025 by rpki-client