Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34332e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e34332e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          6Ozgrm1/g3torBJ3piOpCBmfx4lJOt8sbjncXYksIKw=
Subject key identifier:   F7:17:14:3B:83:1E:D7:C0:74:89:64:BA:94:A6:E1:BC:DE:64:7E:AB
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       06F07D7AD759E5A5E903D3922809B0438AA6DD5E
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34332e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 29 Apr 2025 20:15:00 +0000
ROA not before:           Tue 29 Apr 2025 20:10:00 +0000
ROA not after:            Tue 28 Apr 2026 20:15:00 +0000
asID:                     267797
IP address blocks:        165.98.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:7d:7a:d7:59:e5:a5:e9:03:d3:92:28:09:b0:43:8a:a6:dd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Apr 29 20:10:00 2025 GMT
            Not After : Apr 28 20:15:00 2026 GMT
        Subject: CN=F717143B831ED7C0748964BA94A6E1BCDE647EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:2a:c2:4c:a2:04:6e:34:ea:e8:6d:04:09:
                    3a:d3:07:be:db:09:73:e1:de:c6:60:5d:65:46:85:
                    8c:fd:52:ab:46:20:b8:ce:ca:47:23:4e:7d:86:d3:
                    c2:ad:05:bf:9a:02:37:dd:a7:ca:3a:dc:6a:44:4f:
                    68:78:5b:33:3d:3c:57:96:87:e3:02:cc:52:dc:de:
                    69:a7:70:5f:c5:85:d2:97:7e:2f:80:48:7e:e0:e8:
                    89:7a:be:40:2b:dc:bd:2e:5c:87:9f:d9:05:b5:c2:
                    4c:8c:85:34:38:05:c6:17:88:7e:2c:26:ad:d0:f3:
                    6c:d5:e2:9e:72:33:8c:77:f4:3d:20:65:38:d2:58:
                    74:82:7f:46:ba:d6:2a:9b:fc:5a:00:d8:bf:f0:3c:
                    c7:6d:b1:6a:88:ef:5c:f6:21:19:d1:df:da:9b:c1:
                    b1:58:c5:e0:26:87:c7:54:92:16:28:6b:cf:1f:7c:
                    f9:3a:c2:f5:47:93:7b:9d:8e:80:92:c2:d7:18:18:
                    6d:cd:d8:d2:37:23:a1:b2:7e:6e:ad:ea:11:8e:17:
                    6d:eb:a0:8b:a8:d4:73:74:84:f6:14:25:32:c5:89:
                    ca:76:9d:e1:53:0b:ae:10:d8:f7:32:d3:55:65:41:
                    19:80:b6:66:86:4e:f0:79:fc:6e:53:84:9f:51:95:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:17:14:3B:83:1E:D7:C0:74:89:64:BA:94:A6:E1:BC:DE:64:7E:AB
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34332e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:11:1d:1f:77:c3:b6:44:76:f8:96:27:7d:d2:4f:d7:f3:6f:
         6e:8c:2f:64:4c:53:e6:8f:03:23:2a:67:3c:f6:47:56:8c:1c:
         1b:e1:7a:54:3a:45:1f:4a:fc:20:a3:41:89:9b:6e:ab:c5:21:
         26:bb:ec:49:b8:96:f3:78:2d:86:c2:11:5e:a5:ba:ed:0f:fb:
         30:b9:f6:10:3c:94:cb:ac:f6:dd:ab:1f:bf:03:23:c4:36:0a:
         ed:13:a0:15:7f:de:2c:e2:36:33:a3:9c:f4:00:a1:bc:2c:75:
         67:2e:e0:b8:af:d7:c7:02:73:42:80:78:52:e2:dd:8b:4d:a7:
         28:d6:a0:5d:56:27:2d:4d:92:51:47:e1:db:d1:db:ac:3e:28:
         69:46:a4:ec:6a:33:6c:07:6b:20:bb:37:d2:8b:17:38:a1:9e:
         ee:11:ae:7d:8d:40:07:e7:47:85:46:6f:a4:eb:47:ef:32:b2:
         62:5e:96:8e:06:0b:85:4a:de:3f:9a:dc:04:65:7b:a8:72:28:
         f2:8d:a0:d0:38:0a:42:e9:aa:ad:fc:79:1b:ea:71:6a:c9:3c:
         5b:36:55:80:f0:91:32:33:cb:2b:1d:43:ab:5c:79:43:48:e5:
         92:4d:e6:9d:c5:08:81:b1:cc:22:7b:7b:65:1e:72:8b:ac:48:
         c9:3f:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:30:27 2025 by rpki-client