Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa
File:                     3135302e3138352e302e302f31362d3230203d3e203230333132.roa (raw, json)
Hash identifier:          LTL6nbj7Mf5p4kRuz8F1tK3P/R+j4f4ySoWOWpZi/Zw=
Subject key identifier:   A4:6A:FE:B1:18:DD:59:E2:8C:48:15:0E:F1:71:80:DA:AE:0F:D5:E4
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       7E77F8B83C0DE0C4FCFB468A14743452D1CE2CBA
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa
Signing time:             Tue 04 Feb 2025 18:21:40 +0000
ROA not before:           Tue 04 Feb 2025 18:16:40 +0000
ROA not after:            Tue 03 Feb 2026 18:21:40 +0000
asID:                     20312
IP address blocks:        150.185.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:f8:b8:3c:0d:e0:c4:fc:fb:46:8a:14:74:34:52:d1:ce:2c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:40 2025 GMT
            Not After : Feb  3 18:21:40 2026 GMT
        Subject: CN=A46AFEB118DD59E28C48150EF17180DAAE0FD5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:7e:ac:70:68:ed:e5:b4:0c:f2:e5:8e:4e:
                    05:7e:3b:95:9f:08:6c:d7:6b:fe:8c:fa:cf:09:11:
                    2c:2e:0b:ac:06:be:8b:3b:a5:d4:53:43:20:a4:86:
                    1e:45:18:3a:d7:40:56:e2:17:d4:79:2c:55:f3:ae:
                    7c:e8:91:74:17:a3:62:36:66:af:b1:5c:40:f7:77:
                    52:2f:eb:16:f2:cc:50:9a:f4:3c:88:91:08:d4:d0:
                    58:9a:40:fa:46:08:47:65:98:45:14:3d:d7:12:1c:
                    db:15:4f:b8:8b:f0:35:93:41:37:67:60:bd:99:e1:
                    13:5c:a3:86:3e:82:39:5f:5d:3e:a3:aa:aa:ea:12:
                    fc:df:a4:21:8d:77:71:b6:5f:d9:18:2f:e8:8f:9d:
                    a3:3e:26:91:df:ac:39:94:13:9e:6c:a6:fd:35:f1:
                    71:d6:9a:1a:bc:35:2d:7b:d0:e0:a9:03:7e:af:93:
                    44:fd:c4:53:a9:76:a8:e3:07:76:07:de:14:f0:de:
                    99:06:df:9f:04:92:06:55:ae:2c:a9:41:4d:e7:2b:
                    eb:a6:0c:2e:f3:55:a6:19:15:0d:e4:ae:6a:5e:cb:
                    f9:e0:4d:2f:1e:3c:37:89:4e:52:47:8e:a5:13:e3:
                    be:1e:4b:6e:ae:66:c5:0a:40:c1:9a:92:14:f6:93:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:FE:B1:18:DD:59:E2:8C:48:15:0E:F1:71:80:DA:AE:0F:D5:E4
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:00:f5:7e:05:9e:11:ab:66:7b:b7:de:5a:ed:b4:e3:1f:
         9f:ac:0e:82:bb:38:53:48:e3:e6:ff:f3:57:84:87:fc:e2:fc:
         af:d2:b5:95:ea:25:48:03:a9:3a:4b:d7:ad:00:8c:0e:50:70:
         4a:80:7c:b0:46:a3:a2:e9:53:c0:54:2e:0c:e6:11:78:40:bd:
         7d:fe:00:20:d4:89:b8:82:48:d1:8f:40:49:38:95:7e:e8:cb:
         32:ad:f8:80:b4:16:d8:98:ce:f8:d9:a7:04:c7:1a:ba:e8:c4:
         5b:21:58:62:2e:60:ec:61:f1:3a:48:a0:e0:1d:d4:d1:1b:0e:
         78:8f:5a:cf:28:51:35:14:98:58:de:96:ed:80:76:e8:c6:0d:
         19:ad:c0:0e:8c:f8:b8:51:05:fb:3b:76:ba:5f:42:21:af:8c:
         e0:44:20:6c:57:06:ef:4a:15:f7:be:37:9e:75:66:d8:04:da:
         bc:ca:4c:a2:80:8d:00:a7:cd:0d:63:66:49:6e:54:3b:15:55:
         a0:63:e4:4d:32:4c:23:69:42:c8:a7:72:db:d5:58:99:7a:bc:
         72:59:ce:05:30:6a:29:55:77:e1:dd:3a:9c:ec:a7:a7:a8:35:
         e5:0c:67:5d:a5:ba:ee:37:52:57:3f:58:70:9b:75:72:4e:ce:
         6e:2a:06:db
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUfnf4uDwN4MT8+0aKFHQ0UtHOLLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyQjM4Njg0REE2OTQxRDVCRDgyODgyNDM4QjVBNkEx
QkMzRUY4MzAeFw0yNTAyMDQxODE2NDBaFw0yNjAyMDMxODIxNDBaMDMxMTAvBgNV
BAMTKEE0NkFGRUIxMThERDU5RTI4QzQ4MTUwRUYxNzE4MERBQUUwRkQ1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwMX6scGjt5bQM8uWOTgV+O5Wf
CGzXa/6M+s8JESwuC6wGvos7pdRTQyCkhh5FGDrXQFbiF9R5LFXzrnzokXQXo2I2
Zq+xXED3d1Iv6xbyzFCa9DyIkQjU0FiaQPpGCEdlmEUUPdcSHNsVT7iL8DWTQTdn
YL2Z4RNco4Y+gjlfXT6jqqrqEvzfpCGNd3G2X9kYL+iPnaM+JpHfrDmUE55spv01
8XHWmhq8NS170OCpA36vk0T9xFOpdqjjB3YH3hTw3pkG358EkgZVriypQU3nK+um
DC7zVaYZFQ3krmpey/ngTS8ePDeJTlJHjqUT474eS26uZsUKQMGakhT2k4/5AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUpGr+sRjdWeKMSBUO8XGA2q4P1eQwHwYDVR0j
BBgwFoAU8Ss4aE2mlB1b2CiCQ4taahvD74MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0JCRDlCMzA2RjY3NUREOUM2NUZDMzU5QTNFOEJEMDJF
ODgwMEQ4MDczN0RGMUVDODQ1QUY1NjE5ODgyMzQ5LzAvRjEyQjM4Njg0REE2OTQx
RDVCRDgyODgyNDM4QjVBNkExQkMzRUY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTJCMzg2ODREQTY5NDFENUJE
ODI4ODI0MzhCNUE2QTFCQzNFRjgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNCQkQ5QjMwNkY2NzVERDlDNjVGQzM1OUEzRThCRDAyRTg4MDBEODA3
MzdERjFFQzg0NUFGNTYxOTg4MjM0OS8wLzMxMzUzMDJlMzEzODM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzAyMDNkM2UyMDMyMzAzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCWuTANBgkq
hkiG9w0BAQsFAAOCAQEAYP0A9X4FnhGrZnu33lrttOMfn6wOgrs4U0jj5v/zV4SH
/OL8r9K1leolSAOpOkvXrQCMDlBwSoB8sEajoulTwFQuDOYReEC9ff4AINSJuIJI
0Y9ASTiVfujLMq34gLQW2JjO+NmnBMcauujEWyFYYi5g7GHxOkig4B3U0RsOeI9a
zyhRNRSYWN6W7YB26MYNGa3ADoz4uFEF+zt2ul9CIa+M4EQgbFcG70oV9743nnVm
2ATavMpMooCNAKfNDWNmSW5UOxVVoGPkTTJMI2lCyKdy29VYmXq8clnOBTBqKVV3
4d06nOynp6g15QxnXaW67jdSVz9YcJt1ck7ObioG2w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 19:38:08 2025 by rpki-client