Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa
File:                     3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa (raw, json)
Hash identifier:          D0gnvIfrt1gLUaiUqQgHUPsVYr7rBI3BjHVeqe+gDvE=
Subject key identifier:   0D:A3:39:CA:97:31:D4:6B:95:FF:B0:13:C2:70:A6:1D:44:2B:E8:02
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       3A49C79FF35905E7AB8378DE1D25ADAE9B75B420
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     23007
IP address blocks:        150.185.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:c7:9f:f3:59:05:e7:ab:83:78:de:1d:25:ad:ae:9b:75:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=0DA339CA9731D46B95FFB013C270A61D442BE802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:f4:ec:02:40:5f:b4:ef:ba:b4:11:9c:3a:
                    f8:57:81:a0:fa:a1:6a:e1:cb:f0:29:67:2a:d2:07:
                    83:9d:ec:b8:c1:2f:6b:35:2c:69:23:de:6f:a9:45:
                    f2:64:20:ae:cb:64:5e:ea:a0:98:69:fa:ee:2f:58:
                    93:e6:d8:0b:db:f7:a8:f4:af:00:80:e6:27:df:e3:
                    19:91:cd:99:ae:0f:18:43:ce:de:4b:88:78:0d:35:
                    ba:1a:ee:1d:36:47:c3:35:4e:84:53:7b:22:e6:ce:
                    8e:83:69:30:7b:af:3b:a8:64:2a:40:3f:9e:fd:52:
                    ab:0c:48:f1:2c:3b:87:0a:3a:b8:3e:2e:a4:bf:ad:
                    d2:3a:a0:75:bb:7b:62:1f:8a:f7:cc:57:db:61:9e:
                    df:12:40:fe:47:ec:89:da:4c:d1:14:3a:2d:73:c5:
                    71:58:f2:9f:81:62:1a:94:f7:59:b8:5f:69:34:01:
                    55:21:86:76:9b:14:3f:55:d2:86:20:ae:96:b0:12:
                    8d:ad:37:63:07:30:8b:bf:e4:99:4c:95:12:88:b8:
                    db:05:9c:1e:97:7e:7d:e2:83:da:1d:6c:ca:b1:6d:
                    24:56:c5:ab:89:c9:4a:24:0a:a6:67:7c:61:e3:3f:
                    f4:7a:3a:c1:98:af:91:a7:a5:80:2c:3f:b3:9c:6a:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A3:39:CA:97:31:D4:6B:95:FF:B0:13:C2:70:A6:1D:44:2B:E8:02
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:2d:d2:6c:50:56:79:1e:8b:33:de:f7:b0:89:2a:49:b8:7a:
         5f:09:5d:b6:bc:4f:e5:77:5f:c0:e9:c8:a9:e6:e2:ff:84:f9:
         42:3c:da:0e:98:2a:2c:43:40:d9:16:41:3b:e5:1e:98:94:5a:
         5d:4b:e8:5e:fc:56:91:56:dd:72:43:a8:6c:c3:30:39:4f:49:
         81:bf:94:65:70:d5:77:c0:5b:1c:a8:a4:cf:b5:98:7d:f4:9b:
         84:66:43:ac:df:69:a2:00:9e:db:db:86:54:c1:19:c6:ed:70:
         3b:0c:c8:c1:92:ff:17:d2:7b:c6:f8:0f:80:35:b5:50:7d:3a:
         bb:6e:4c:d9:cb:41:41:6f:9e:a4:89:37:59:89:7d:1f:d3:6d:
         2f:6e:83:44:44:18:58:ab:35:9c:4b:9a:39:d5:e7:76:5c:1e:
         03:1c:cd:ee:90:76:ee:95:2f:cc:e8:71:38:a2:d5:ae:16:76:
         6f:c4:31:f4:ec:9f:c6:b9:fa:46:20:cb:41:9f:9a:8b:78:2b:
         9d:2e:6e:00:c0:b8:90:b3:d6:77:0e:6b:83:18:e4:08:61:02:
         dd:f6:d0:3e:69:d3:cf:00:1a:8c:07:7b:b5:42:e1:f7:d6:21:
         ed:f5:ff:be:4d:07:51:0f:e0:62:9a:9e:bc:4f:3c:5b:0f:8a:
         ee:d7:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:44:59 2024 by rpki-client on console-fra.rpki-client.org