Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa
File:                     3135302e3138352e302e302f31362d3136203d3e203237383037.roa (raw, json)
Hash identifier:          Dpxvx1xnI6Fqk0kg/wenWY3jCxYyuzH8zuNjTAOZJUc=
Subject key identifier:   0F:CF:A8:B4:E3:D2:9C:C0:D7:0B:E2:80:03:F8:5E:63:36:57:56:03
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       04018BEB717895B372726782A262130110B4591F
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa
Signing time:             Tue 04 Feb 2025 18:21:37 +0000
ROA not before:           Tue 04 Feb 2025 18:16:37 +0000
ROA not after:            Tue 03 Feb 2026 18:21:37 +0000
asID:                     27807
IP address blocks:        150.185.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:8b:eb:71:78:95:b3:72:72:67:82:a2:62:13:01:10:b4:59:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:37 2025 GMT
            Not After : Feb  3 18:21:37 2026 GMT
        Subject: CN=0FCFA8B4E3D29CC0D70BE28003F85E6336575603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:51:ac:39:16:a1:24:fd:e0:be:92:a3:6e:
                    c4:9b:f4:db:87:a2:78:2f:03:d9:5f:bb:29:82:ff:
                    2f:5a:7d:eb:11:3e:4e:66:01:43:95:b7:54:fe:d8:
                    9d:e6:b1:f5:16:7b:71:cf:6f:d3:24:8f:99:9f:e5:
                    ec:d5:8c:f2:9e:51:e5:6f:76:91:f7:5c:40:ec:ec:
                    a3:31:25:72:f3:53:cb:68:7a:af:b4:2a:79:1e:b6:
                    55:2d:17:56:5b:a9:be:67:c4:a3:f7:08:ae:4d:17:
                    da:a7:25:48:eb:1d:45:ea:89:cf:6a:2c:a0:a6:10:
                    ca:1c:f6:de:c7:7c:e4:14:59:63:a5:a2:d7:8d:7a:
                    70:56:fe:5f:8e:c6:81:17:01:e2:fa:7b:e0:cd:10:
                    cc:0d:65:e0:9e:20:54:a2:c1:3e:18:33:5b:88:18:
                    9c:87:03:3f:b4:dd:37:e1:ca:52:29:09:25:fc:72:
                    0f:1a:56:9c:60:51:6c:9c:51:ef:ea:f6:91:18:87:
                    9f:20:48:5e:6d:78:99:82:48:1a:76:ff:2e:53:6c:
                    a9:96:e8:37:ab:75:55:67:0e:48:21:f3:db:bd:d4:
                    21:c3:8c:f9:2a:7d:a6:34:07:89:77:c1:17:a0:e6:
                    a0:bc:3e:12:20:59:61:90:cf:8c:13:0b:11:d4:72:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:A8:B4:E3:D2:9C:C0:D7:0B:E2:80:03:F8:5E:63:36:57:56:03
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:91:14:07:85:33:4f:42:e3:90:34:00:75:b6:a8:cf:34:26:
         2a:6c:f6:fd:8e:3c:44:10:86:6b:61:e8:f8:5e:5e:d6:90:17:
         ef:d0:f3:74:0c:be:fd:2d:7a:b7:fb:e6:0d:d1:b8:ae:4f:ab:
         f3:26:c0:ee:7d:1a:98:71:12:35:d0:0a:c5:71:48:b9:89:0a:
         14:d8:44:94:29:fd:af:4a:c1:20:70:f1:b4:ba:95:74:b0:21:
         2b:b1:46:eb:e6:65:51:79:a8:ad:12:7a:62:0d:db:1c:60:cf:
         7f:d0:18:c6:3e:76:9b:bc:52:05:0b:00:12:a8:96:6f:3f:30:
         cf:1b:d3:ac:65:71:ce:5e:de:e7:79:f2:91:71:22:6c:44:6c:
         97:10:be:68:6d:97:d2:8e:e3:fe:54:2a:1f:16:2e:06:7a:48:
         32:79:67:61:32:e0:fd:47:b5:d6:99:db:2e:22:ae:a8:d9:77:
         2b:4b:00:9f:af:80:df:ed:03:5d:21:43:14:8d:19:8b:08:dd:
         6a:b6:bf:2b:70:46:ac:a1:2a:e1:75:3a:43:4c:a7:46:ae:82:
         6f:e7:9d:48:50:da:6f:f6:49:78:96:40:71:17:ee:75:68:e3:
         ab:86:ef:5a:3a:c9:5c:0e:a7:b6:d1:98:84:59:b7:94:94:0a:
         3b:f2:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:19 2025 by rpki-client