Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232342e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e3232342e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          +1BI4F+wWOvv2mt3WTnJc5IlWZZrRJ+5TMEKCUxHU24=
Subject key identifier:   E4:9D:D7:76:19:49:24:1F:54:8E:FC:D2:12:53:1F:B3:C9:E6:27:B9
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       59DEC04678728E62AE89F6E603FA7327B42BCC1C
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232342e302f32342d3234203d3e203138383430.roa
Signing time:             Tue 29 Apr 2025 20:10:00 +0000
ROA not before:           Tue 29 Apr 2025 20:05:00 +0000
ROA not after:            Tue 28 Apr 2026 20:10:00 +0000
asID:                     18840
IP address blocks:        165.98.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 01:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:de:c0:46:78:72:8e:62:ae:89:f6:e6:03:fa:73:27:b4:2b:cc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:05:00 2025 GMT
            Not After : Apr 28 20:10:00 2026 GMT
        Subject: CN=E49DD7761949241F548EFCD212531FB3C9E627B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:98:e9:95:9d:a6:e6:56:72:ca:43:e9:87:
                    81:de:1b:f3:ed:15:1c:4c:fd:31:0e:4a:61:e2:4f:
                    86:9c:11:c0:f2:24:00:e4:5a:85:35:6a:96:2d:be:
                    50:0e:17:4a:33:ce:e0:ab:4f:26:76:9e:e4:d2:8c:
                    b3:3b:06:cf:67:e0:91:b4:b5:6d:ea:e8:ca:b4:89:
                    81:a5:49:b2:d4:b6:52:fe:a1:07:a0:f2:21:71:ba:
                    1d:a1:9a:11:8c:1e:27:b9:92:60:ad:f5:64:4e:21:
                    1e:78:14:8c:c4:c5:f5:b8:07:0b:f7:22:13:85:44:
                    6f:4f:56:ea:22:b1:28:ac:0f:2d:cc:bd:e8:cb:23:
                    68:e4:22:4c:5f:2e:34:fd:26:3e:e7:4d:a5:b5:dc:
                    2e:f8:94:f6:3c:1b:34:63:0d:fd:de:2a:fb:b2:c1:
                    e5:ca:23:50:24:e4:1f:52:5c:57:23:39:1e:d9:a9:
                    1d:4a:a9:75:55:44:be:95:76:8c:de:fb:f3:18:a6:
                    1d:f4:ad:aa:f8:6f:c2:1c:93:a7:ea:52:ea:7b:eb:
                    b1:3c:a2:9d:3a:3a:ea:72:a6:d2:68:7e:84:0c:d7:
                    7a:ad:c4:b9:05:4a:2e:6e:b3:3c:f3:76:a8:65:2c:
                    85:91:01:74:15:46:29:d4:db:c9:59:92:05:4b:20:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:D7:76:19:49:24:1F:54:8E:FC:D2:12:53:1F:B3:C9:E6:27:B9
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232342e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:e2:41:15:7b:2f:cd:e6:02:42:ef:55:ac:32:84:ec:3b:
         25:15:d9:bd:a3:f2:02:02:06:e2:1f:cd:0e:0a:11:88:2f:86:
         56:c9:d2:03:17:1b:e0:1b:a2:f3:2f:b0:c4:3a:2b:43:ef:bc:
         d8:59:5f:72:0b:9c:d2:49:68:c9:14:5d:7b:e3:7a:8f:86:2e:
         80:70:a1:d6:3f:ee:a2:f9:bf:15:af:f8:4f:cf:66:96:df:c2:
         56:7e:fe:85:73:ec:10:c5:7f:74:b4:91:0a:28:83:73:34:ba:
         14:04:27:13:13:8b:6e:83:0a:9b:1b:be:d4:b4:63:87:38:48:
         39:3a:ff:5f:fe:14:81:f6:9a:58:cc:5b:0d:3a:ba:60:42:eb:
         b3:68:96:c6:10:bc:4e:b6:5f:73:17:fd:24:12:4a:58:e5:3d:
         ec:02:64:7e:93:3f:8f:21:89:79:ca:f9:be:02:09:6d:6d:fc:
         48:f3:f7:12:74:db:ac:7b:0b:93:ff:de:1e:fe:f0:e7:8e:78:
         ed:36:a9:3c:fa:8d:f5:9b:e8:2b:d7:8c:40:ca:0b:11:7c:96:
         ed:79:0b:21:69:ee:45:a3:b4:c9:32:32:29:8f:74:a7:ca:9d:
         bb:24:b0:4c:01:41:63:d8:d1:f8:2a:41:81:b4:e6:57:07:57:
         9c:42:de:96
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWd7ARnhyjmKuifbmA/pzJ7QrzBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTA0MjkyMDA1MDBaFw0yNjA0MjgyMDEwMDBaMDMxMTAvBgNV
BAMTKEU0OURENzc2MTk0OTI0MUY1NDhFRkNEMjEyNTMxRkIzQzlFNjI3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB05jplZ2m5lZyykPph4HeG/Pt
FRxM/TEOSmHiT4acEcDyJADkWoU1apYtvlAOF0ozzuCrTyZ2nuTSjLM7Bs9n4JG0
tW3q6Mq0iYGlSbLUtlL+oQeg8iFxuh2hmhGMHie5kmCt9WROIR54FIzExfW4Bwv3
IhOFRG9PVuoisSisDy3MvejLI2jkIkxfLjT9Jj7nTaW13C74lPY8GzRjDf3eKvuy
weXKI1Ak5B9SXFcjOR7ZqR1KqXVVRL6Vdoze+/MYph30rar4b8Ick6fqUup767E8
op06OupyptJofoQM13qtxLkFSi5uszzzdqhlLIWRAXQVRinU28lZkgVLIE19AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5J3XdhlJJB9UjvzSElMfs8nmJ7kwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzIzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKVi4DAN
BgkqhkiG9w0BAQsFAAOCAQEAXwviQRV7L83mAkLvVawyhOw7JRXZvaPyAgIG4h/N
DgoRiC+GVsnSAxcb4Bui8y+wxDorQ++82Flfcguc0kloyRRde+N6j4YugHCh1j/u
ovm/Fa/4T89mlt/CVn7+hXPsEMV/dLSRCiiDczS6FAQnExOLboMKmxu+1LRjhzhI
OTr/X/4UgfaaWMxbDTq6YELrs2iWxhC8TrZfcxf9JBJKWOU97AJkfpM/jyGJecr5
vgIJbW38SPP3EnTbrHsLk//eHv7w54547TapPPqN9ZvoK9eMQMoLEXyW7XkLIWnu
RaO0yTIyKY90p8qduySwTAFBY9jR+CpBgbTmVwdXnELelg==
-----END CERTIFICATE-----
Generated at Mon May 5 02:35:37 2025 by rpki-client