Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33362e302f32332d3234203d3e20323637373937.roa
File:                     3136352e39382e33362e302f32332d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          n9CH5A+Kdw/6mO1ObSSbTUu2E/ojAPhyW3VJEKHqfmw=
Subject key identifier:   5D:55:B8:5F:58:F5:DB:F5:BB:60:78:0A:32:C3:C4:B5:33:02:D7:13
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       12A468C82F5B5F6915A505FB9F06867A857AE66C
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33362e302f32332d3234203d3e20323637373937.roa
Signing time:             Tue 29 Apr 2025 20:15:00 +0000
ROA not before:           Tue 29 Apr 2025 20:10:00 +0000
ROA not after:            Tue 28 Apr 2026 20:15:00 +0000
asID:                     267797
IP address blocks:        165.98.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:68:c8:2f:5b:5f:69:15:a5:05:fb:9f:06:86:7a:85:7a:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:10:00 2025 GMT
            Not After : Apr 28 20:15:00 2026 GMT
        Subject: CN=5D55B85F58F5DBF5BB60780A32C3C4B53302D713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:cd:a3:2b:85:f8:b9:b4:3c:ca:8b:cb:e8:
                    1b:3b:74:66:6d:93:0f:80:6d:07:71:86:c5:b4:7a:
                    d6:75:ef:30:29:91:2a:32:65:ef:b1:f3:34:55:da:
                    ee:a9:f9:9d:93:73:8d:32:04:d7:e7:ff:83:c7:df:
                    9a:d1:47:36:19:c9:ca:e9:21:e9:72:9a:3f:d8:d3:
                    f2:0b:fe:96:95:b0:63:a6:94:58:15:37:68:66:1e:
                    a0:56:ad:f6:35:fe:29:04:86:ec:0f:ab:6e:49:59:
                    af:23:97:30:67:9e:0b:07:b4:bf:c1:36:05:e8:a9:
                    0d:2e:00:14:c7:1b:f9:4a:94:c9:ff:98:6b:84:63:
                    3a:fa:e2:31:3a:98:dc:e5:d6:a6:06:0f:ab:97:f2:
                    22:2e:60:19:f7:15:39:b8:ab:d0:62:1f:be:54:19:
                    95:c7:66:3d:f4:27:1e:ed:db:ae:fb:cf:35:ed:da:
                    23:3b:90:46:d0:85:8f:ae:5b:ec:49:42:85:01:df:
                    f3:75:56:81:78:1d:17:74:68:d5:c5:fc:e3:0a:11:
                    63:b5:8e:aa:b4:f1:6c:36:00:0f:b8:46:9b:07:47:
                    84:0c:84:67:60:5a:fb:96:70:7e:69:a5:21:d9:4c:
                    9e:79:f4:e2:fa:81:7b:7c:3e:ad:d8:ac:a2:b6:77:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:B8:5F:58:F5:DB:F5:BB:60:78:0A:32:C3:C4:B5:33:02:D7:13
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33362e302f32332d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:e4:7a:3d:ed:78:f4:7d:73:0d:ee:cd:5c:14:d2:56:a9:
         41:a1:c0:d9:46:7f:32:22:cf:c9:d8:f0:06:26:17:69:17:f6:
         ed:95:26:ec:31:b2:d5:06:c4:39:65:51:7e:e3:99:38:b7:78:
         f6:a4:f7:7a:fc:52:e9:41:7c:7d:12:2e:ff:12:bb:f7:c7:60:
         3d:cf:6b:4a:bc:c7:fa:a9:e3:b5:ea:2d:0d:60:70:25:50:98:
         2e:b3:3a:18:d1:c7:ca:a3:af:81:1e:95:18:1e:8e:53:7c:69:
         bb:28:b5:b4:ae:85:74:f8:ba:51:52:36:77:af:06:a6:30:e5:
         cb:bd:fb:f8:b4:9b:8d:a9:cb:5d:34:73:2b:9b:c9:02:78:f6:
         ae:76:47:f2:03:a2:34:ec:c1:c5:f1:22:fd:35:54:21:0c:9c:
         ed:6e:de:cc:82:c8:67:f1:20:c6:ef:d0:d4:62:4a:4d:8a:3c:
         46:10:43:20:6d:25:ff:34:df:b3:c8:7c:83:f9:15:c5:8b:c4:
         1b:a7:3d:1f:49:78:49:9c:d0:63:2b:b4:03:91:27:5e:32:03:
         e8:ac:b2:77:b4:c0:bb:99:be:78:c8:07:bc:d6:00:98:06:1c:
         aa:c9:9c:f6:0a:6e:f0:77:6e:c2:e1:fc:a9:38:52:d3:be:bf:
         c1:30:ed:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEqRoyC9bX2kVpQX7nwaGeoV65mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTA0MjkyMDEwMDBaFw0yNjA0MjgyMDE1MDBaMDMxMTAvBgNV
BAMTKDVENTVCODVGNThGNURCRjVCQjYwNzgwQTMyQzNDNEI1MzMwMkQ3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo582jK4X4ubQ8yovL6Bs7dGZt
kw+AbQdxhsW0etZ17zApkSoyZe+x8zRV2u6p+Z2Tc40yBNfn/4PH35rRRzYZycrp
Ielymj/Y0/IL/paVsGOmlFgVN2hmHqBWrfY1/ikEhuwPq25JWa8jlzBnngsHtL/B
NgXoqQ0uABTHG/lKlMn/mGuEYzr64jE6mNzl1qYGD6uX8iIuYBn3FTm4q9BiH75U
GZXHZj30Jx7t2677zzXt2iM7kEbQhY+uW+xJQoUB3/N1VoF4HRd0aNXF/OMKEWO1
jqq08Ww2AA+4RpsHR4QMhGdgWvuWcH5ppSHZTJ559OL6gXt8Pq3YrKK2dzPfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXVW4X1j12/W7YHgKMsPEtTMC1xMwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzMzNjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaViJDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ93kej3tePR9cw3uzVwU0lapQaHA2UZ/MiLPydjw
BiYXaRf27ZUm7DGy1QbEOWVRfuOZOLd49qT3evxS6UF8fRIu/xK798dgPc9rSrzH
+qnjteotDWBwJVCYLrM6GNHHyqOvgR6VGB6OU3xpuyi1tK6FdPi6UVI2d68GpjDl
y737+LSbjanLXTRzK5vJAnj2rnZH8gOiNOzBxfEi/TVUIQyc7W7ezILIZ/Egxu/Q
1GJKTYo8RhBDIG0l/zTfs8h8g/kVxYvEG6c9H0l4SZzQYyu0A5EnXjID6Kyyd7TA
u5m+eMgHvNYAmAYcqsmc9gpu8HduwuH8qThS076/wTDtvg==
-----END CERTIFICATE-----
Generated at Mon May 5 23:18:03 2025 by rpki-client