Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa
File:                     3135302e3138352e302e302f31362d3136203d3e203237383037.roa (raw, json)
Hash identifier:          gaWotO7zmaIXB7Wvp7aZVImPSFED0RMC0wf4NerRwlk=
Subject key identifier:   26:CA:44:A9:56:23:A9:1B:C1:C3:D7:94:FB:19:C2:CB:73:16:59:87
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       3CF34A73719A0E04119554830C8C8F8BE86BC1C4
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     27807
IP address blocks:        150.185.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f3:4a:73:71:9a:0e:04:11:95:54:83:0c:8c:8f:8b:e8:6b:c1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=26CA44A95623A91BC1C3D794FB19C2CB73165987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:3a:8a:6e:0c:2f:d0:50:a7:f2:1b:4a:9b:
                    69:74:56:21:c6:95:70:7a:58:63:26:5b:29:30:39:
                    dd:00:f4:81:fe:c6:2d:c6:36:d9:3b:59:4a:85:34:
                    f4:84:9c:17:e0:7a:c1:d3:4f:d2:01:98:6d:77:28:
                    ca:16:cf:7b:d3:b1:2f:ea:81:ca:a1:db:6a:fa:5d:
                    47:f7:ce:7a:b0:8b:98:d0:08:9f:a0:36:1d:d9:97:
                    ab:56:ec:b1:39:81:bf:37:97:87:01:c9:79:16:e9:
                    39:9f:5e:ca:e8:9b:6e:86:7b:13:21:97:08:15:71:
                    3a:77:79:fd:55:73:13:ab:38:8f:9c:3e:7f:17:dd:
                    8c:bd:87:46:8b:cb:4c:df:e9:d9:66:4d:91:9e:41:
                    a8:52:9f:2f:0f:cd:c1:17:f1:aa:9a:da:59:78:6f:
                    fe:02:69:8a:64:dc:0e:66:2c:37:fb:a6:bd:07:81:
                    2d:78:83:47:10:8f:3c:85:bf:8e:05:fc:ab:7c:9a:
                    a5:86:44:d4:78:23:e4:51:76:58:d1:12:b4:71:ec:
                    2f:2a:ca:85:a7:7d:10:2e:2f:7d:38:6d:dd:ed:c0:
                    95:a7:ab:a5:20:33:97:a4:2e:ef:9c:21:19:c3:d3:
                    b4:2a:87:62:2d:26:f4:58:d6:52:56:c3:ed:90:3a:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:44:A9:56:23:A9:1B:C1:C3:D7:94:FB:19:C2:CB:73:16:59:87
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:d5:3f:03:13:2d:cf:f9:58:aa:ad:0a:95:a8:68:b6:d5:
         d6:0f:fa:d7:4a:5c:8f:c3:1f:16:ec:e3:d4:13:72:7e:33:9e:
         c5:69:a6:bc:3b:9d:be:30:35:9b:45:af:25:4c:46:d3:73:47:
         a5:ca:56:c5:71:2c:9b:70:26:7d:a8:c3:f1:b0:39:ee:61:10:
         b2:a8:e6:21:9f:42:ad:16:54:0d:98:4e:ec:ac:2c:22:37:e7:
         77:4a:80:b1:50:77:cc:a8:75:24:0d:aa:71:6a:82:68:a1:c6:
         21:43:34:92:2b:61:2b:72:24:13:3c:8c:72:14:a8:79:2e:f5:
         c8:65:11:61:ca:a1:8b:27:5b:bb:87:7c:54:de:f7:44:f6:04:
         eb:55:26:5c:d5:b6:36:b0:4a:fe:70:28:35:f0:78:f9:7e:9e:
         36:50:4a:10:d8:6f:7f:ba:a6:de:68:71:f6:4a:8b:79:c0:fa:
         0e:89:f6:f6:d1:f2:d7:8e:74:f8:d8:5c:64:90:b1:d7:4c:18:
         de:01:93:ac:34:a1:6c:f2:85:5e:81:66:d8:f5:e9:79:c2:5d:
         6a:d2:14:89:3b:0d:dc:03:55:36:37:a5:95:34:57:9b:4a:62:
         67:e8:41:4b:dd:56:b8:df:05:ff:d8:ec:1c:46:cc:44:5e:f7:
         97:95:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org