Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31372e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e31372e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          QB/9td5KJj8jgpT9e7HBnZGgchsDer60VNNgSC80i1g=
Subject key identifier:   18:6E:99:33:05:8D:2E:37:60:A6:F0:4E:46:43:E1:A5:30:9F:FB:56
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       41BEE7EE5A5AD40751F71BBC8758F58DA8DD3A14
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31372e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 17 Mar 2026 16:40:00 +0000
ROA not before:           Tue 17 Mar 2026 16:35:00 +0000
ROA not after:            Tue 16 Mar 2027 16:40:00 +0000
asID:                     267797
IP address blocks:        165.98.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:be:e7:ee:5a:5a:d4:07:51:f7:1b:bc:87:58:f5:8d:a8:dd:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 17 16:35:00 2026 GMT
            Not After : Mar 16 16:40:00 2027 GMT
        Subject: CN=186E9933058D2E3760A6F04E4643E1A5309FFB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:83:f9:e1:a0:cb:a7:ee:58:6f:8f:7e:ad:
                    a1:5a:c8:54:48:c5:de:7d:e4:40:b3:ca:17:e5:ae:
                    7a:b3:f9:68:3e:ad:da:22:84:ff:58:6d:0e:04:d7:
                    1e:9a:1e:69:01:52:4c:6f:ff:36:b4:f7:d1:8e:39:
                    46:54:28:7c:6d:61:d2:ad:04:eb:a7:01:5b:91:17:
                    b8:a4:e3:24:d4:27:f4:1e:27:02:ce:6c:2c:3a:5e:
                    0c:c0:02:8e:88:17:eb:26:35:ae:c7:5c:b5:97:4d:
                    f8:d5:69:ed:fc:f0:29:e4:7f:c7:9d:a7:bd:a3:95:
                    26:83:a9:32:ff:a3:0f:8c:1f:2c:59:a1:eb:2d:93:
                    dc:11:3f:95:fa:99:14:fc:a4:72:ad:6d:00:26:25:
                    59:7c:c5:62:7c:4a:49:b8:fc:12:72:1f:b3:25:fa:
                    8c:8d:c8:e7:be:4f:9b:30:e1:e4:16:d2:e8:28:87:
                    87:d1:cb:1f:a1:ae:60:72:21:0c:d4:4d:86:95:64:
                    d8:24:cb:9e:7b:f4:0e:4b:e4:97:40:33:ae:70:1b:
                    03:ed:f7:98:af:2a:83:04:65:43:1d:53:42:5b:51:
                    e2:b1:a1:18:3a:9b:26:a6:4e:13:d0:ff:2f:60:df:
                    85:54:c8:c7:54:d1:e0:7f:b9:d2:1a:55:38:34:0d:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:99:33:05:8D:2E:37:60:A6:F0:4E:46:43:E1:A5:30:9F:FB:56
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31372e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:59:47:96:62:31:72:a0:56:0d:05:ed:87:65:ed:d4:53:cc:
         c9:4a:75:ea:eb:04:0b:60:3e:8d:d7:7c:55:07:d3:ec:3b:41:
         62:01:ea:c5:80:f0:07:57:44:0c:cc:ad:b1:ce:f7:a7:77:9d:
         da:e2:44:88:b5:b4:89:00:d3:bd:39:66:eb:55:18:29:d3:86:
         9e:66:b9:da:1c:97:67:e5:87:cd:fb:0d:b2:7f:54:e9:e4:84:
         46:e3:53:22:0c:94:73:ce:f2:f0:b2:d1:97:70:5a:2d:53:5b:
         40:a8:ba:f1:da:1c:40:56:57:70:b9:69:9f:de:1d:cb:c4:82:
         1f:ae:3d:77:85:0c:1e:e0:d0:51:47:9b:eb:cf:4a:a7:58:27:
         8a:7a:25:88:c7:1a:6d:68:4d:5a:20:ae:3f:bf:85:71:0f:9d:
         89:46:f9:d8:5f:56:6a:8e:02:e9:6f:ef:16:18:7d:6c:e0:72:
         43:69:62:a8:35:ab:c3:f4:03:e8:cb:3b:ce:7b:a5:8c:99:93:
         40:07:44:9e:b4:29:9f:98:48:31:bc:bb:16:fa:03:8e:fc:11:
         cd:92:dd:19:bc:88:2a:86:d2:ef:2a:66:31:c0:dc:40:3f:7a:
         77:f1:78:5b:d5:a4:b2:37:6c:09:5a:c3:2d:83:2f:59:51:a3:
         cf:1b:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:46:09 2026 by rpki-client