Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32342d3234203d3e203332303938.roa
File:                     3137302e3135302e31322e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          1YTNMyAvXUVyq422JapK5svOxet05KiUtYHaXmZHbq8=
Subject key identifier:   F9:0A:9A:51:23:E8:C3:55:3A:A1:7A:B1:BE:AF:E7:10:6B:2F:E1:C1
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3274CF3CF60E7AE8F8AB97B2B1F31610B844B622
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:50 +0000
ROA not before:           Tue 05 Mar 2024 18:12:50 +0000
ROA not after:            Tue 04 Mar 2025 18:17:50 +0000
asID:                     32098
IP address blocks:        170.150.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:74:cf:3c:f6:0e:7a:e8:f8:ab:97:b2:b1:f3:16:10:b8:44:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:50 2024 GMT
            Not After : Mar  4 18:17:50 2025 GMT
        Subject: CN=F90A9A5123E8C3553AA17AB1BEAFE7106B2FE1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:fe:f6:84:f8:1b:b5:5d:55:51:1a:f3:bc:
                    f3:f3:75:e0:1e:c3:7f:49:32:e2:a0:fc:1b:d9:83:
                    19:7e:78:af:98:a6:9b:b3:34:01:d4:ce:81:a1:99:
                    31:75:f2:3c:b9:7c:31:86:ff:a6:a6:c3:13:68:4a:
                    9b:95:c9:5c:b6:2a:29:43:e8:a9:57:33:9e:8d:76:
                    5f:2d:9b:10:ca:36:02:19:c0:a5:f2:d5:de:9b:85:
                    0e:61:b0:a3:65:02:a7:35:f9:44:9c:87:bb:39:1d:
                    7b:49:33:64:b0:49:73:4b:20:3c:0f:99:c1:d7:91:
                    43:c5:e3:a7:2d:53:e8:52:70:98:4e:a8:89:e7:2c:
                    9a:d0:d4:03:36:9f:93:b0:57:cd:c8:74:05:0d:58:
                    e2:37:65:0f:24:01:05:89:03:db:35:0a:c4:60:8f:
                    7b:b4:7e:a8:18:50:af:dd:aa:de:3d:c0:25:60:14:
                    84:29:cc:84:ea:74:5d:3e:57:03:f7:cc:72:fe:55:
                    e5:fa:de:e9:53:91:ef:a9:b1:21:99:a4:6e:d8:28:
                    9c:1e:4b:01:24:d3:85:66:cc:f1:4b:c9:50:0c:f3:
                    85:41:5f:1f:52:81:51:68:ce:8b:30:d7:71:2e:7f:
                    59:84:ae:07:32:55:54:be:88:39:9b:08:37:58:f9:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0A:9A:51:23:E8:C3:55:3A:A1:7A:B1:BE:AF:E7:10:6B:2F:E1:C1
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:2b:a4:1e:71:c0:74:ac:36:17:71:e0:52:b5:39:ba:ea:
         0f:41:a9:c6:ef:88:26:b6:63:18:d5:b9:ed:f6:c1:4c:d3:e9:
         b1:1b:99:12:3e:7a:d8:6b:6c:2f:7d:28:44:88:4d:72:e0:01:
         2c:93:cf:17:e2:89:55:22:f8:8b:a0:96:b3:ca:bf:a2:62:59:
         b3:0c:9a:1e:56:4e:4b:e4:11:5c:e6:ea:b9:8c:27:f7:c6:0c:
         db:96:b5:84:34:16:e3:28:69:33:65:ae:5c:7e:9c:d8:46:a5:
         f7:35:9e:71:b8:9a:41:c7:04:d4:7b:45:6f:c1:80:45:64:ce:
         34:d7:d0:24:32:bf:72:21:9c:9b:79:28:b2:86:a3:f2:f9:8d:
         16:a1:6f:6c:a9:87:13:54:43:84:8f:66:42:46:d9:36:77:a4:
         bc:aa:0b:62:f2:e0:35:e5:70:31:c8:2b:8d:ab:f7:be:86:e7:
         a7:27:93:9d:ac:c3:d9:c1:fe:5c:3e:e2:ac:b0:9b:b0:9d:4f:
         cc:29:09:b9:45:c3:b5:86:fa:12:cf:04:b1:e6:cb:1c:d5:84:
         44:2b:d3:7d:89:b3:9c:67:bc:4c:04:33:86:27:22:9c:fa:6a:
         f1:92:9d:78:17:c8:1b:f5:17:2e:32:3c:41:ee:5a:6a:55:0d:
         11:58:8a:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMnTPPPYOeuj4q5eysfMWELhEtiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNDAzMDUxODEyNTBaFw0yNTAzMDQxODE3NTBaMDMxMTAvBgNV
BAMTKEY5MEE5QTUxMjNFOEMzNTUzQUExN0FCMUJFQUZFNzEwNkIyRkUxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFP72hPgbtV1VURrzvPPzdeAe
w39JMuKg/BvZgxl+eK+YppuzNAHUzoGhmTF18jy5fDGG/6amwxNoSpuVyVy2KilD
6KlXM56Ndl8tmxDKNgIZwKXy1d6bhQ5hsKNlAqc1+USch7s5HXtJM2SwSXNLIDwP
mcHXkUPF46ctU+hScJhOqInnLJrQ1AM2n5OwV83IdAUNWOI3ZQ8kAQWJA9s1CsRg
j3u0fqgYUK/dqt49wCVgFIQpzITqdF0+VwP3zHL+VeX63ulTke+psSGZpG7YKJwe
SwEk04VmzPFLyVAM84VBXx9SgVFozosw13Euf1mErgcyVVS+iDmbCDdY+ZPrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+QqaUSPow1U6oXqxvq/nEGsv4cEwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMxMzczMDJlMzEzNTMwMmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKqWDDAN
BgkqhkiG9w0BAQsFAAOCAQEAC8grpB5xwHSsNhdx4FK1ObrqD0Gpxu+IJrZjGNW5
7fbBTNPpsRuZEj562GtsL30oRIhNcuABLJPPF+KJVSL4i6CWs8q/omJZswyaHlZO
S+QRXObquYwn98YM25a1hDQW4yhpM2WuXH6c2Eal9zWecbiaQccE1HtFb8GARWTO
NNfQJDK/ciGcm3kosoaj8vmNFqFvbKmHE1RDhI9mQkbZNnekvKoLYvLgNeVwMcgr
jav3vobnpyeTnazD2cH+XD7irLCbsJ1PzCkJuUXDtYb6Es8EsebLHNWERCvTfYmz
nGe8TAQzhicinPpq8ZKdeBfIG/UXLjI8Qe5aalUNEViKbg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org