Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31342e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e31342e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          8XLgRaVuVhnfeag+g0x+/wd9dd4YXbdc+USQZ6NfjIU=
Subject key identifier:   BD:BF:1B:BE:3D:01:29:EB:56:2E:27:EF:94:68:71:10:64:6C:DC:26
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       75835A7DACDFCECC3BB419894DE99B8A519037C3
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31342e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 17 Mar 2026 16:40:01 +0000
ROA not before:           Tue 17 Mar 2026 16:35:01 +0000
ROA not after:            Tue 16 Mar 2027 16:40:01 +0000
asID:                     267797
IP address blocks:        165.98.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:83:5a:7d:ac:df:ce:cc:3b:b4:19:89:4d:e9:9b:8a:51:90:37:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 17 16:35:01 2026 GMT
            Not After : Mar 16 16:40:01 2027 GMT
        Subject: CN=BDBF1BBE3D0129EB562E27EF94687110646CDC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:3f:48:07:33:bb:07:f8:9f:d7:5c:55:5f:
                    21:40:94:d0:61:3e:ca:76:cb:d8:a5:79:d2:38:3e:
                    ff:41:1b:fe:97:92:a8:61:3b:b2:8f:3e:76:f4:ca:
                    67:0d:ab:35:c4:ef:20:2f:6d:52:5d:28:c8:5d:8e:
                    73:0c:4c:0f:51:0f:e4:61:cf:31:8b:5b:e7:ec:f1:
                    d7:ee:b3:49:1d:b8:81:fb:84:d3:f6:10:30:7f:5a:
                    de:b4:ff:70:1a:a7:69:a1:45:7d:17:be:c7:39:54:
                    78:75:dc:1a:5f:cf:8e:b4:9b:d1:c3:f4:48:36:f6:
                    c8:64:d8:f9:4b:a6:63:dd:42:96:f8:9d:8b:7e:df:
                    db:c3:67:a9:84:3b:22:90:c3:ca:39:f7:04:40:b4:
                    93:c6:06:90:06:b4:40:19:91:44:8e:a5:55:b3:84:
                    9f:c7:91:cf:e2:c3:64:ce:af:33:77:5f:38:72:77:
                    85:96:f9:dd:37:47:b5:0e:c0:4c:3a:7b:43:e9:4f:
                    03:55:a4:24:b3:d5:83:9d:08:ee:d8:6a:94:d4:58:
                    a0:0d:84:6d:fb:9c:ae:6f:f5:e3:0c:2b:84:30:4d:
                    3c:f2:76:e5:22:ae:e8:60:ab:cd:c1:c0:9c:08:e8:
                    61:aa:9f:cf:20:b1:44:8c:1d:a9:66:10:6a:56:1f:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:1B:BE:3D:01:29:EB:56:2E:27:EF:94:68:71:10:64:6C:DC:26
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31342e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:73:cb:17:dd:18:cd:1a:69:82:c0:02:e4:32:09:89:fc:94:
         1d:41:c3:fb:cb:84:c6:62:e8:93:c1:51:12:d2:51:de:ec:29:
         7f:41:73:d8:a0:07:ec:b0:2c:9b:7e:df:e8:ca:05:e4:f0:99:
         a7:8e:ea:93:37:bb:95:f3:3f:85:85:e8:94:00:35:ec:17:82:
         e9:f2:c3:62:56:5f:c7:81:07:90:31:54:e5:c4:6b:ef:94:99:
         bd:97:6f:44:c4:c8:0d:c2:49:13:6b:ac:6f:b1:02:b4:d6:11:
         41:5a:47:63:9b:ab:ab:48:d8:83:68:9b:f3:55:b7:2a:41:52:
         d9:43:31:34:71:cf:ec:4c:cd:c7:8d:c7:bd:80:3c:39:aa:97:
         48:a1:a1:12:71:c0:95:22:26:1f:11:bc:b2:84:40:39:49:43:
         77:0d:bf:d0:c5:66:7c:68:30:32:7e:31:4e:11:f2:cc:33:d6:
         89:54:ec:4e:38:d6:3f:52:50:74:69:6c:79:60:8e:b0:55:79:
         05:b6:20:12:74:fc:39:ff:9d:03:9f:69:d4:ab:ee:4c:67:3b:
         68:df:11:4f:09:23:0d:f0:b2:0b:b8:69:8f:72:14:eb:ba:54:
         87:c2:82:6c:33:17:f8:55:53:0b:a6:75:72:af:47:f4:3f:a8:
         60:40:e8:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdYNafazfzsw7tBmJTembilGQN8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNjAzMTcxNjM1MDFaFw0yNzAzMTYxNjQwMDFaMDMxMTAvBgNV
BAMTKEJEQkYxQkJFM0QwMTI5RUI1NjJFMjdFRjk0Njg3MTEwNjQ2Q0RDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXT9IBzO7B/if11xVXyFAlNBh
Psp2y9iledI4Pv9BG/6XkqhhO7KPPnb0ymcNqzXE7yAvbVJdKMhdjnMMTA9RD+Rh
zzGLW+fs8dfus0kduIH7hNP2EDB/Wt60/3Aap2mhRX0Xvsc5VHh13Bpfz460m9HD
9Eg29shk2PlLpmPdQpb4nYt+39vDZ6mEOyKQw8o59wRAtJPGBpAGtEAZkUSOpVWz
hJ/Hkc/iw2TOrzN3Xzhyd4WW+d03R7UOwEw6e0PpTwNVpCSz1YOdCO7YapTUWKAN
hG37nK5v9eMMK4QwTTzyduUiruhgq83BwJwI6GGqn88gsUSMHalmEGpWH/1tAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvb8bvj0BKetWLifvlGhxEGRs3CYwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKViDjAN
BgkqhkiG9w0BAQsFAAOCAQEAMnPLF90YzRppgsAC5DIJifyUHUHD+8uExmLok8FR
EtJR3uwpf0Fz2KAH7LAsm37f6MoF5PCZp47qkze7lfM/hYXolAA17BeC6fLDYlZf
x4EHkDFU5cRr75SZvZdvRMTIDcJJE2usb7ECtNYRQVpHY5urq0jYg2ib81W3KkFS
2UMxNHHP7EzNx43HvYA8OaqXSKGhEnHAlSImHxG8soRAOUlDdw2/0MVmfGgwMn4x
ThHyzDPWiVTsTjjWP1JQdGlseWCOsFV5BbYgEnT8Of+dA59p1KvuTGc7aN8RTwkj
DfCyC7hpj3IU67pUh8KCbDMX+FVTC6Z1cq9H9D+oYEDosA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:15:41 2026 by rpki-client