Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34342e302f32332d3234203d3e203237383131.roa
File:                     3136352e39382e34342e302f32332d3234203d3e203237383131.roa (raw, json)
Hash identifier:          o0nSrDRuSfP7r86IE5qefJhqs22BBYyKHKZYCZLgGCY=
Subject key identifier:   8A:B9:C6:04:B9:4A:00:C1:CF:01:85:D7:CE:C9:8B:A0:B0:21:03:56
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       55FAFA582D683EDB16980782ECB0017578B3F013
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34342e302f32332d3234203d3e203237383131.roa
Signing time:             Wed 25 Feb 2026 22:31:52 +0000
ROA not before:           Wed 25 Feb 2026 22:26:52 +0000
ROA not after:            Wed 24 Feb 2027 22:31:52 +0000
asID:                     27811
IP address blocks:        165.98.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:fa:58:2d:68:3e:db:16:98:07:82:ec:b0:01:75:78:b3:f0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Feb 25 22:26:52 2026 GMT
            Not After : Feb 24 22:31:52 2027 GMT
        Subject: CN=8AB9C604B94A00C1CF0185D7CEC98BA0B0210356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:30:a7:e1:86:9b:23:62:ad:1b:9c:9d:99:
                    24:5c:0a:af:a4:56:4d:cf:b7:f3:c7:2d:fe:1d:f4:
                    52:43:45:bd:3b:94:8f:b5:c8:5a:d5:81:9c:f2:03:
                    fa:51:61:33:e5:fd:e7:82:56:75:80:63:40:c4:72:
                    12:80:eb:ef:f2:83:bc:5e:fc:54:25:35:90:45:49:
                    23:d8:fc:aa:3d:d0:13:24:eb:bb:9d:b6:06:1c:a0:
                    6d:88:dc:b4:a9:c1:c6:0d:01:a4:d1:1d:4d:8c:48:
                    cc:10:4b:73:dc:50:ea:27:bd:13:4c:31:34:be:32:
                    35:e3:52:ad:0e:d9:07:10:7e:4e:09:f7:61:89:1c:
                    7d:71:37:42:2d:83:fd:42:c0:a7:bf:44:a9:cd:76:
                    3e:ca:b5:7c:40:77:4e:77:be:bb:84:d7:98:b5:4d:
                    23:0b:a8:3e:c9:51:7a:0a:0d:30:18:f0:4d:b3:90:
                    93:9f:93:40:2a:84:ed:09:0c:c2:e3:63:27:b0:fe:
                    68:2e:d7:02:78:65:a2:47:9a:f5:86:11:69:b1:6c:
                    70:3e:af:b1:14:71:81:fb:cc:18:64:48:6d:a9:fd:
                    31:45:65:69:6b:b4:e4:d4:07:22:f8:5c:2b:aa:bc:
                    fc:94:d4:49:c7:72:8e:ae:12:7f:6a:d1:4f:55:24:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B9:C6:04:B9:4A:00:C1:CF:01:85:D7:CE:C9:8B:A0:B0:21:03:56
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e34342e302f32332d3234203d3e203237383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:e3:84:81:7e:b1:03:6a:c9:51:85:51:0d:30:c0:ec:d1:
         ab:af:b4:aa:8a:e7:d6:5f:e9:e3:8c:30:cd:34:ac:7e:27:65:
         38:bc:98:23:05:e6:0d:aa:cd:19:aa:b0:66:f0:58:eb:0e:ad:
         59:79:74:f1:08:fa:a0:20:b9:a0:cc:b1:9a:4f:fe:5d:cb:0b:
         93:c4:03:00:4b:36:ae:da:92:a7:f4:c3:30:fe:2d:8f:23:60:
         bf:cb:66:80:91:bd:9d:fc:c4:69:ae:1a:be:90:7b:0f:69:ea:
         28:20:93:8d:d1:90:9f:89:1d:1b:26:5d:e7:90:ff:f7:ed:55:
         0b:6e:0d:5f:f8:ef:c6:ff:17:eb:a8:3e:fa:4f:67:82:05:b3:
         20:a6:40:35:57:62:d2:84:04:bd:d3:ce:fd:a4:f6:cc:b7:63:
         11:61:a9:43:29:21:38:77:a6:eb:11:28:06:66:ed:9f:90:21:
         f4:27:e4:12:d2:d2:3f:34:55:44:84:d4:de:ab:7b:cd:78:00:
         60:93:3f:22:bc:0b:a8:2d:65:cb:f3:2e:49:b6:ef:cd:bc:59:
         f6:14:45:ca:fb:58:62:23:5f:11:61:29:a6:cd:d6:6d:dd:c7:
         a7:02:4b:dd:c2:bd:e7:14:63:94:20:0f:46:1c:c8:17:77:74:
         7d:84:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:26 2026 by rpki-client