Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31352e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e31352e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          Mw7+Lsqmpt9SlrhnvDouClLMu3ujNy9yW+fVdsEmLgY=
Subject key identifier:   3B:D6:18:FA:30:4F:D4:2F:ED:7B:E9:6A:78:98:90:20:91:0D:8F:CC
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       49ADCAF5EAF00E7774783CE2F698BBF158BDE734
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31352e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 17 Mar 2026 16:40:01 +0000
ROA not before:           Tue 17 Mar 2026 16:35:01 +0000
ROA not after:            Tue 16 Mar 2027 16:40:01 +0000
asID:                     267797
IP address blocks:        165.98.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 08:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ad:ca:f5:ea:f0:0e:77:74:78:3c:e2:f6:98:bb:f1:58:bd:e7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 17 16:35:01 2026 GMT
            Not After : Mar 16 16:40:01 2027 GMT
        Subject: CN=3BD618FA304FD42FED7BE96A78989020910D8FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:2b:0c:a7:8b:89:c7:86:da:b7:d6:2c:92:
                    32:bc:5a:7a:27:fe:f7:6c:1c:19:91:19:d0:17:af:
                    8f:a6:dc:16:f5:8e:ed:48:72:1b:39:87:3b:dd:21:
                    61:d2:65:d1:09:ff:3a:2b:48:6a:ec:a4:f7:2e:49:
                    62:36:dd:66:0d:06:e2:4c:33:ff:57:bb:61:8a:76:
                    95:ef:17:31:c7:11:06:1e:a2:61:d5:21:b1:a7:d7:
                    61:25:df:9d:9a:dd:a9:23:1a:36:2d:5d:fa:39:d1:
                    ea:0e:84:21:7a:55:4b:6b:eb:10:66:93:0c:a2:71:
                    e6:7b:6f:78:64:d3:a0:cd:c3:70:c5:db:0c:14:47:
                    5f:fd:6b:6e:c4:e8:d1:0f:6b:18:78:ae:c4:d9:22:
                    e2:47:4e:f8:74:76:7a:7c:24:cd:da:b8:27:39:62:
                    3a:ff:73:15:47:9a:15:44:bb:e0:ab:41:9f:49:84:
                    00:5c:7d:26:5a:e3:16:55:20:21:71:a3:65:3c:5a:
                    8a:8c:2a:eb:33:ce:27:18:15:8a:7e:2a:8f:a2:1d:
                    31:1e:cb:3e:0c:28:03:9a:b1:f7:ff:63:e6:cf:ff:
                    37:42:b4:84:37:2f:16:26:ef:02:0a:31:5f:76:a3:
                    fc:1b:6a:0c:95:63:85:bc:37:3e:bb:b0:f7:2c:cc:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D6:18:FA:30:4F:D4:2F:ED:7B:E9:6A:78:98:90:20:91:0D:8F:CC
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31352e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:16:b3:80:bf:76:af:ea:04:c3:fe:70:c1:aa:42:6f:2c:
         4e:3f:07:c4:5c:6c:9c:04:76:f2:d4:b7:91:98:a2:7a:cf:db:
         c2:0a:d3:16:b3:7e:57:29:64:d3:b4:2b:18:70:98:71:bf:cb:
         64:f0:45:23:0c:0b:87:2c:d8:b0:98:e0:e4:6a:13:1f:f2:7f:
         ce:0d:43:8b:da:14:78:cd:c9:bd:9d:1c:39:21:49:38:00:b6:
         6a:8b:3e:f7:60:9d:24:aa:61:6f:4a:d6:ee:c3:49:95:11:f3:
         23:96:21:d7:3c:45:cb:be:2f:71:1b:20:e0:01:d7:a4:9f:91:
         99:b0:c1:91:6b:25:a9:3d:cf:cf:71:af:69:3f:66:57:6e:a5:
         6a:98:d4:6a:17:2b:cf:f1:9f:1b:1f:0e:00:4f:ae:27:3d:89:
         67:dc:9e:19:6d:fe:49:ff:bb:e2:21:c3:51:c7:ec:0a:1f:a0:
         5c:d8:55:0f:48:f3:e3:e7:d9:1e:90:89:07:fe:81:b1:3a:ac:
         26:41:cd:64:87:a3:24:3b:08:2a:26:86:cc:85:d0:39:17:da:
         2b:0a:cf:5d:47:88:19:7e:13:40:17:9f:bb:53:52:dc:e6:ed:
         33:49:d7:b2:04:a7:1b:6b:38:32:82:03:8b:79:91:32:7f:92:
         64:2f:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:36:58 2026 by rpki-client