Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e33382e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          2tZTWJIyuugNij+1hcXXcAaf53WQkKIbrNL1k/GQ5H0=
Subject key identifier:   63:66:2A:BD:A0:8E:68:AA:2B:70:4F:F5:29:09:FE:2D:67:A7:F2:CA
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       4E0FA0829E4B7F34E0C50188194E28EFBCB0C633
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa
Signing time:             Tue 29 Apr 2025 20:10:01 +0000
ROA not before:           Tue 29 Apr 2025 20:05:01 +0000
ROA not after:            Tue 28 Apr 2026 20:10:01 +0000
asID:                     18840
IP address blocks:        165.98.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0f:a0:82:9e:4b:7f:34:e0:c5:01:88:19:4e:28:ef:bc:b0:c6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:05:01 2025 GMT
            Not After : Apr 28 20:10:01 2026 GMT
        Subject: CN=63662ABDA08E68AA2B704FF52909FE2D67A7F2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:3c:12:6a:02:78:38:f7:4c:64:63:6b:96:
                    4f:9b:80:53:30:3e:45:21:7b:80:aa:a7:e0:09:b0:
                    b3:84:fa:10:05:b7:6d:1b:e5:18:9e:3b:89:41:5e:
                    4a:4d:9a:00:a5:eb:92:82:ad:7e:dd:56:6f:95:71:
                    45:71:a7:41:50:ef:89:47:bf:fc:bf:d5:5a:04:6b:
                    9e:05:7a:b5:79:f4:2b:ca:7d:57:3f:e0:51:a1:fe:
                    47:df:2c:fd:1e:fc:bf:95:01:2f:ab:9c:ee:60:18:
                    49:9a:bf:b1:d6:59:68:01:5d:41:bd:e6:f4:aa:92:
                    0c:da:99:87:6c:9c:e3:0a:e3:e7:dc:be:47:7a:44:
                    ec:5f:bd:bd:a6:8f:29:d1:1c:ac:ef:5c:55:50:ef:
                    3b:81:04:a3:00:47:cf:46:23:5a:1e:ca:39:b4:99:
                    98:32:a6:0a:2b:a5:ac:18:96:2c:3e:ba:5b:6c:b9:
                    45:23:51:af:7f:ce:55:af:58:f3:5d:f0:20:09:cf:
                    be:2f:88:f1:9d:e6:19:d4:a7:97:10:ef:b6:69:ab:
                    57:b6:bd:07:0d:9d:fb:9b:a0:bf:7d:2a:2a:9b:76:
                    58:12:3f:30:ad:64:f9:29:98:e4:24:c2:f0:57:42:
                    1d:42:9f:5c:a7:70:8c:75:b6:10:9a:09:71:2e:4e:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:2A:BD:A0:8E:68:AA:2B:70:4F:F5:29:09:FE:2D:67:A7:F2:CA
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:87:3c:af:5d:bd:fa:8d:17:90:83:c1:38:5e:d2:45:f5:b7:
         5a:b7:0c:9c:39:7a:51:cc:18:d7:85:7a:0c:c7:0f:4b:79:32:
         c2:8a:0b:7d:2e:7c:e7:73:d0:7b:88:b5:b7:04:f6:5e:63:1f:
         07:0a:f7:15:55:d2:5b:07:40:c5:d1:df:29:da:5d:58:fc:f7:
         e3:6f:33:2a:93:b0:d0:a7:b9:43:14:67:9c:15:b2:32:b3:c9:
         ed:b6:77:7f:cb:14:6f:05:e2:0b:e2:12:25:b9:5e:5d:5d:15:
         6e:80:be:23:59:af:f4:f8:eb:0f:9e:db:e3:49:f1:3f:fe:21:
         13:f9:e7:0e:70:da:c2:fb:03:3a:7c:67:f9:c1:a4:90:3d:38:
         01:da:3e:bf:d4:f1:a2:9e:ee:9c:95:e9:d4:5f:6b:30:26:b2:
         9d:1d:df:f7:32:21:eb:90:33:69:51:46:70:0f:bd:c6:80:d0:
         6b:24:54:46:83:01:d3:62:6d:de:e6:35:93:3f:8b:77:46:e2:
         f5:7e:8f:6c:8e:7b:21:13:bc:0b:b9:63:da:21:b4:3f:6a:59:
         97:1e:3b:4c:77:1e:9a:99:ee:ff:27:ef:16:21:5a:b3:2b:8f:
         65:43:e5:11:bb:25:73:b9:c1:86:d7:f1:bf:f0:1f:0b:29:36:
         a0:f5:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:40:10 2025 by rpki-client