Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3233382e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e3233382e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          do3giJvK792vLAGQS8S3fvLbcfwjrjgO2+YqzKIAj1k=
Subject key identifier:   60:A8:D8:AD:E6:F7:A2:A1:05:21:9E:63:20:3B:05:85:FF:8E:67:45
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       19B009DC061373828B55887CDC08CF6FBACAFE97
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3233382e302f32342d3234203d3e203138383430.roa
Signing time:             Tue 29 Apr 2025 20:10:00 +0000
ROA not before:           Tue 29 Apr 2025 20:05:00 +0000
ROA not after:            Tue 28 Apr 2026 20:10:00 +0000
asID:                     18840
IP address blocks:        165.98.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 10:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b0:09:dc:06:13:73:82:8b:55:88:7c:dc:08:cf:6f:ba:ca:fe:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:05:00 2025 GMT
            Not After : Apr 28 20:10:00 2026 GMT
        Subject: CN=60A8D8ADE6F7A2A105219E63203B0585FF8E6745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:35:b5:a1:4b:18:0b:f7:92:25:60:61:59:
                    33:0b:1f:9a:5d:dc:e6:62:11:8e:cf:6b:c6:56:7f:
                    02:d6:43:1d:8a:0a:c6:d6:3a:c8:f1:61:35:40:25:
                    0b:a9:86:6f:71:d8:e5:d8:c1:36:e9:9b:63:b6:35:
                    e2:e5:10:10:d0:f7:7e:d3:ef:dc:77:11:76:4c:cc:
                    c3:7a:1d:6a:f4:a0:81:39:bb:2b:e2:0b:30:a7:f1:
                    ca:74:9f:5f:c3:62:14:b1:95:d7:54:12:2d:54:9e:
                    d9:f4:ee:31:63:d3:22:f2:70:f6:4b:ec:45:9e:73:
                    e6:6f:57:1e:0b:aa:df:08:c7:a8:a4:0e:97:a8:47:
                    01:53:c9:37:b1:dc:e2:ec:ed:8b:ea:ab:30:de:ab:
                    e5:c2:43:e4:9f:d9:1b:41:d9:17:0a:bb:4d:da:0f:
                    ad:79:71:24:fd:19:c6:f0:15:70:5b:ac:cc:8b:90:
                    51:95:ae:6a:71:29:0a:c3:05:94:0a:bf:fb:e2:77:
                    e5:20:98:85:a9:2f:d1:6b:37:bb:03:c9:43:2b:22:
                    72:55:aa:a2:91:b7:3f:3b:fc:21:a3:ac:9a:cd:0a:
                    0c:7b:42:de:79:f7:28:e1:58:a1:ba:7e:4e:f7:6c:
                    2f:f1:e1:8f:18:23:87:ae:54:06:63:f0:cf:b8:0c:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A8:D8:AD:E6:F7:A2:A1:05:21:9E:63:20:3B:05:85:FF:8E:67:45
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3233382e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:d2:59:f0:10:ed:a7:38:4b:9e:c0:e1:67:7b:a9:bc:22:
         ba:9c:30:d7:08:75:d8:1a:4b:ec:fd:e4:b6:a9:18:59:55:bc:
         8b:70:6d:ca:48:01:4d:67:26:73:61:51:70:af:c3:ff:5c:2c:
         de:63:66:ab:c2:93:bb:75:a0:b3:93:dd:1d:a3:8e:9d:9d:66:
         08:90:de:9e:57:52:1f:e9:58:01:95:b7:c2:8a:dc:69:0e:1e:
         5f:58:dd:69:df:e1:f3:f1:db:4f:1d:8b:4f:ce:93:34:55:6e:
         15:b4:0b:6c:83:aa:f8:e5:fc:0b:b4:8c:d6:c2:f8:c9:a6:30:
         12:e0:12:b6:cd:b2:49:9d:3a:69:33:16:18:eb:32:56:3e:1a:
         da:cf:72:25:2f:2a:d9:e9:7b:4b:0e:86:eb:41:9d:da:c6:c6:
         68:b9:2f:10:1b:28:96:a5:b5:ac:3e:ce:ec:37:4c:3e:9b:90:
         d2:ff:41:65:fe:75:19:cc:aa:5c:24:4e:1c:e0:8d:e5:3d:ed:
         d8:84:70:9f:61:b3:6f:5f:41:f2:ce:81:40:97:29:52:7f:16:
         f9:97:01:cb:1e:b3:87:a5:c7:bc:d0:79:86:70:ec:2d:47:42:
         37:5f:c9:05:d9:ed:53:24:b5:2d:40:d1:6f:97:82:59:d1:17:
         4b:a1:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:55:09 2025 by rpki-client