Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa
File:                     3136352e39382e3232382e302f32342d3234203d3e203235363037.roa (raw, json)
Hash identifier:          oxo+z5zHF/zonIGG8w+RmI3wV8F8tEaEmCuIRjZ1ayk=
Subject key identifier:   1E:30:36:47:86:08:B1:0D:31:8B:51:2F:E8:BC:30:54:20:47:17:37
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       47710ABF6D6675EFF19F2AD430EAC7B69EA4AA31
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa
Signing time:             Sat 13 Jun 2026 14:47:38 +0000
ROA not before:           Sat 13 Jun 2026 14:42:38 +0000
ROA not after:            Sat 12 Jun 2027 14:47:38 +0000
asID:                     25607
IP address blocks:        165.98.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:0a:bf:6d:66:75:ef:f1:9f:2a:d4:30:ea:c7:b6:9e:a4:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun 13 14:42:38 2026 GMT
            Not After : Jun 12 14:47:38 2027 GMT
        Subject: CN=1E3036478608B10D318B512FE8BC305420471737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:4f:e2:92:56:ef:66:d9:80:9a:ed:33:57:
                    17:05:51:9e:d5:25:61:9a:e6:51:a1:91:9f:89:24:
                    5c:a3:ac:94:73:88:ba:8b:c5:c9:ac:5c:3c:5a:f3:
                    61:16:f0:6a:1f:13:bd:4d:3e:2b:82:c3:89:a2:11:
                    08:7d:32:31:d4:dc:bd:ab:e4:47:00:e0:b1:ff:76:
                    e8:18:a1:1b:21:66:d6:ce:11:33:6b:b8:f5:38:05:
                    c8:8f:8e:69:61:2b:32:13:e0:1c:b7:19:f4:45:91:
                    88:9a:f3:e3:79:3f:46:ab:c8:f6:11:d4:5c:a8:99:
                    e0:50:a1:46:2c:33:61:a0:47:da:20:e0:80:e4:77:
                    c4:3b:9d:7c:ac:dc:9d:fd:ea:4c:cd:2e:aa:bc:7f:
                    bd:47:eb:cb:5e:87:94:b1:b7:34:70:23:91:7b:06:
                    f9:1b:eb:f2:ad:fa:f1:b4:28:2f:88:21:e2:3c:06:
                    ee:00:2c:13:63:af:c3:5d:03:c5:ae:94:a0:1b:00:
                    12:ed:b3:06:75:16:1c:7c:7d:cf:73:70:fd:01:70:
                    f8:54:e6:45:24:9d:bb:bc:54:b4:b4:aa:33:85:e7:
                    52:c2:e1:96:fa:ef:6f:4b:31:ad:80:d6:a1:c3:c6:
                    58:44:07:97:24:ce:ec:0f:86:d1:3f:85:0c:45:bc:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:36:47:86:08:B1:0D:31:8B:51:2F:E8:BC:30:54:20:47:17:37
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:a7:76:af:a9:ff:0c:68:a7:fb:df:9a:23:47:14:93:ca:
         46:7c:93:7c:8c:23:70:6f:b6:0e:00:bf:3a:13:00:c1:94:b3:
         de:6c:1a:18:dc:13:a1:98:ea:98:fc:cc:51:91:9c:0f:6f:9b:
         82:9e:49:fa:28:e6:f8:a2:9f:af:c1:1e:fb:ab:8c:f7:9c:56:
         79:4a:5e:52:0c:31:f9:6d:af:c2:6b:d6:0b:c8:fc:ff:13:3f:
         be:0c:d4:f3:c7:07:5b:65:fe:d4:c4:6f:88:53:09:f6:f9:6c:
         0e:97:52:74:a7:7b:1a:0e:da:e7:03:5f:e5:ee:62:96:2f:51:
         9a:77:ae:a7:5b:80:1b:31:2e:18:da:25:c4:91:05:15:1d:33:
         49:6e:ef:02:40:0c:f1:92:f7:61:ea:69:6e:8b:8e:0d:d5:1a:
         7a:55:be:fd:f7:0e:bf:be:ac:85:b8:15:b0:ba:1c:21:17:af:
         63:8b:5b:f7:48:bf:22:d8:f6:78:64:c5:5a:68:23:46:45:a9:
         ca:5c:16:7b:0b:a3:f6:6a:4f:13:6d:8f:55:7a:f3:eb:3a:0f:
         8d:5a:a1:ca:68:23:3e:bd:e4:64:6d:5b:c0:77:fe:ce:12:56:
         0a:b8:ae:72:d7:f7:eb:ff:fc:c3:59:30:31:51:4c:98:f4:18:
         96:24:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:47:12 2026 by rpki-client