Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa
File:                     3136352e39382e3133302e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          XGFR8d4onFhomtm8hnnevg+al5poltoJbXbBlMVGqzg=
Subject key identifier:   B7:01:94:54:3A:6E:B6:63:65:D4:72:A0:4A:E1:79:E2:75:CE:A8:85
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       5A94F6395E37EEED28C7E3D7C2B60079376C2422
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa
Signing time:             Wed 02 Jul 2025 23:24:31 +0000
ROA not before:           Wed 02 Jul 2025 23:19:31 +0000
ROA not after:            Wed 01 Jul 2026 23:24:31 +0000
asID:                     14754
IP address blocks:        165.98.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:f6:39:5e:37:ee:ed:28:c7:e3:d7:c2:b6:00:79:37:6c:24:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jul  2 23:19:31 2025 GMT
            Not After : Jul  1 23:24:31 2026 GMT
        Subject: CN=B70194543A6EB66365D472A04AE179E275CEA885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:b7:dc:30:c0:65:60:47:6d:34:50:09:6e:
                    21:2c:d5:68:ea:56:3f:c9:80:66:65:aa:71:51:c3:
                    dd:eb:34:b1:a9:70:5f:1b:33:98:89:eb:86:fc:c7:
                    6a:7a:ce:d3:d8:30:00:be:12:00:77:bb:89:11:7b:
                    05:eb:04:3c:c9:73:15:d5:2f:d7:3a:bf:09:3e:44:
                    35:7c:5f:d7:8e:5a:ba:aa:c4:4c:ba:ff:26:cc:05:
                    79:17:bd:89:6a:f6:74:75:bf:cd:b9:bd:4d:1b:5a:
                    b4:4a:7b:83:58:d3:3f:82:54:8e:c7:c8:80:36:dc:
                    af:23:44:da:43:19:ec:c6:51:a3:55:71:b4:35:ca:
                    dc:7b:18:af:de:6d:80:3c:81:f5:06:79:63:71:be:
                    fa:eb:02:81:94:6f:45:d7:75:39:7a:9d:d7:eb:7a:
                    bf:6b:39:0e:04:1b:01:ee:77:c1:f6:90:42:c8:74:
                    af:59:a9:81:48:08:f4:2b:fd:2c:a5:05:fe:d6:e7:
                    66:3c:68:89:a3:65:c8:5e:c1:53:fb:9e:38:f9:72:
                    60:d1:13:b6:45:dc:66:5d:37:62:fc:0c:c7:19:fc:
                    3e:76:10:16:6f:91:8c:d9:91:4f:bc:b3:e6:10:8c:
                    61:59:46:dd:b4:86:8c:3b:5b:9c:1a:9a:f4:09:7e:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:01:94:54:3A:6E:B6:63:65:D4:72:A0:4A:E1:79:E2:75:CE:A8:85
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:21:36:5a:4a:82:21:7a:2e:f0:e0:6f:02:8d:88:c1:0a:42:
         3c:da:24:25:d5:8a:1c:09:e1:22:9d:41:1d:f8:28:8f:51:a1:
         95:74:d6:17:ce:1e:b4:ee:c7:78:69:6a:bf:59:e9:4a:3c:1d:
         fb:d4:3e:eb:6b:94:1d:3b:a1:83:80:dd:61:ec:52:6c:86:25:
         69:42:73:5b:91:cc:08:4c:13:3d:1d:d2:0a:2c:14:72:e3:46:
         14:e3:c0:8c:b5:e1:a8:eb:08:e1:aa:21:85:7b:b8:b5:61:a3:
         42:67:24:0f:8d:20:4b:0f:3d:c5:41:00:88:16:f7:4a:04:19:
         cb:5e:4e:8f:b8:be:c9:dc:0e:72:ab:ef:0c:3f:4a:f0:90:64:
         b8:5d:45:06:ee:f7:6f:2b:e0:59:0a:76:86:57:1f:dd:d8:ab:
         87:ac:28:b4:62:33:1c:40:7f:95:5b:be:c5:a6:7d:9b:6a:38:
         0d:48:4b:5c:74:53:ce:37:21:40:a1:e3:89:ec:23:3e:44:4d:
         af:16:5d:d8:d2:04:29:ce:ce:d5:8a:f7:20:7d:2b:2b:99:b9:
         1c:7b:bb:e2:a2:05:9d:cd:5f:72:68:5e:fa:f9:e4:fc:32:d0:
         34:52:8e:26:a8:87:f4:5a:10:3f:06:24:38:61:8f:ca:20:59:
         8e:49:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:48:53 2025 by rpki-client