Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa
File:                     3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa (raw, json)
Hash identifier:          X1TxXt7EoGYUQ0chuarICeuoXWpPgzA7RkT9PI1nlMY=
Subject key identifier:   A7:FB:D7:F9:D2:94:1D:74:B4:F1:6C:70:D6:F7:A9:14:6F:CF:36:A7
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       31F4FF85CB215B78315A601971A9BD28D792ADC3
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa
Signing time:             Tue 04 Feb 2025 18:21:42 +0000
ROA not before:           Tue 04 Feb 2025 18:16:42 +0000
ROA not after:            Tue 03 Feb 2026 18:21:42 +0000
asID:                     23007
IP address blocks:        150.185.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:ff:85:cb:21:5b:78:31:5a:60:19:71:a9:bd:28:d7:92:ad:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:42 2025 GMT
            Not After : Feb  3 18:21:42 2026 GMT
        Subject: CN=A7FBD7F9D2941D74B4F16C70D6F7A9146FCF36A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:ac:3d:ff:17:b2:5f:8d:5e:7e:87:37:6a:
                    f7:79:6a:ab:b5:f0:15:74:02:49:21:54:e6:cf:d8:
                    40:9c:ea:cd:b5:2c:21:67:77:10:64:4b:20:cb:85:
                    ad:79:67:ca:e4:c6:7b:52:1c:dd:bd:e6:85:f7:7b:
                    35:3b:d4:b0:c4:56:0b:89:6c:76:6a:ce:b7:ff:ef:
                    49:2d:d6:ec:85:42:38:1f:f8:1c:f4:43:2e:77:2d:
                    8e:3c:b6:1b:90:e2:89:43:1e:d7:96:ca:b8:48:0e:
                    61:69:d3:7b:38:6e:26:60:54:bb:ef:19:a9:4b:65:
                    60:08:3f:11:2b:2a:51:0c:20:f8:39:4c:4e:2c:2f:
                    8e:36:22:85:a1:bb:70:ec:6d:e2:68:e9:b8:c2:4c:
                    b3:a8:ec:6a:53:41:44:63:40:fa:f3:26:6a:46:3d:
                    f7:a3:c4:20:6e:0e:35:1d:58:94:dd:b7:f4:72:bf:
                    61:63:bc:46:c1:62:ee:ed:f5:22:d0:e1:11:8a:1a:
                    34:89:49:53:fd:b4:ca:ab:fa:66:70:40:1e:a8:ba:
                    0e:51:8b:99:db:5b:37:ca:98:85:2d:b0:9c:83:7e:
                    d8:a9:65:c3:8a:f6:c4:16:f0:e6:21:9c:0c:49:3c:
                    81:6f:63:b6:ca:b7:34:b9:6f:de:1a:9c:f7:fe:ff:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:D7:F9:D2:94:1D:74:B4:F1:6C:70:D6:F7:A9:14:6F:CF:36:A7
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3132382e302f31382d3138203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:fe:17:57:c4:70:56:46:4b:63:64:ac:a8:61:8e:8d:e8:
         57:5d:23:51:87:0a:3f:22:ce:d1:58:be:51:9c:6c:70:bf:bd:
         46:94:b8:c0:aa:e1:59:55:42:58:dc:d6:5c:bd:c3:d8:a3:6c:
         20:7a:71:55:36:63:c5:e5:ba:19:f8:8e:a6:d6:31:06:78:5e:
         a0:e5:e8:9f:3b:27:ae:a7:19:9a:86:70:1f:9b:dd:80:c0:6f:
         17:82:24:fa:87:7a:f7:90:04:3c:04:e1:71:55:5d:60:15:b3:
         8d:cf:a1:75:68:df:7d:53:49:ac:12:5c:8f:9a:90:c0:32:58:
         c2:9c:90:db:ad:f8:c6:f0:9b:e0:20:7d:b9:58:9b:7c:a9:ef:
         5b:b8:04:4c:13:e4:e0:09:0c:f3:fd:ab:95:f0:21:14:78:d6:
         b2:b2:ac:c9:34:9e:db:c7:6e:06:3c:76:cc:87:d6:14:42:f8:
         13:19:fe:ca:2c:d9:67:6c:af:7d:a0:8e:96:ff:29:dc:72:35:
         7a:03:7a:6a:93:5a:5d:08:d6:cc:8c:62:e6:c5:d0:e8:96:8c:
         60:7c:b4:e6:20:b8:43:6f:06:75:72:2e:57:3d:cb:e2:1c:e4:
         c7:03:50:c5:24:14:21:a0:3a:b8:12:a5:50:6d:cf:9e:3e:80:
         4f:9e:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:03 2025 by rpki-client