Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa
File:                     3135302e3138362e302e302f31352d3136203d3e203237383037.roa (raw, json)
Hash identifier:          XPvzGYc8zUMfsvJgUyMLkkpmT7CTnC4NekcdEukFrFg=
Subject key identifier:   F3:4F:C3:6A:2A:12:CC:B1:95:8E:B4:31:DD:6A:90:FD:12:4B:F9:AB
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       484D64E5B645F55ABA9CEDDC9A3ACDB2B4BCE704
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa
Signing time:             Tue 05 Mar 2024 17:49:31 +0000
ROA not before:           Tue 05 Mar 2024 17:44:31 +0000
ROA not after:            Tue 04 Mar 2025 17:49:31 +0000
asID:                     27807
IP address blocks:        150.186.0.0/15 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4d:64:e5:b6:45:f5:5a:ba:9c:ed:dc:9a:3a:cd:b2:b4:bc:e7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:31 2024 GMT
            Not After : Mar  4 17:49:31 2025 GMT
        Subject: CN=F34FC36A2A12CCB1958EB431DD6A90FD124BF9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:79:33:ff:8b:f7:39:5b:97:97:a6:d4:22:
                    07:e6:1a:11:c4:68:92:18:e2:2f:3a:eb:66:35:63:
                    40:4f:e6:b8:91:d9:74:13:50:74:13:61:d4:d3:eb:
                    96:72:41:09:36:36:de:6f:70:90:72:f0:dc:52:06:
                    5a:04:5b:3b:20:a0:c4:e0:60:44:11:19:5e:af:65:
                    4b:09:bd:59:dd:64:f1:80:23:4d:7c:1e:d5:b6:83:
                    d1:d6:53:4c:ed:ba:1d:3e:35:71:b3:4a:78:c6:40:
                    bd:6d:ec:fc:a6:4a:63:1e:38:12:83:a7:0d:7e:35:
                    8c:13:2f:b4:da:9f:b1:81:49:d2:39:4e:60:7d:ef:
                    b9:76:8b:dc:76:2a:a7:f0:7d:e6:ef:e0:ab:06:59:
                    70:9f:42:e4:70:70:a0:b9:7e:e5:9d:0a:c5:07:a4:
                    4f:fb:54:43:33:0b:e8:13:5a:90:76:c1:75:af:c2:
                    65:c5:76:1a:e0:14:4d:52:5d:db:f2:01:fe:e7:1e:
                    a0:cf:1f:04:69:6a:3e:60:d1:bd:6a:ca:2c:25:33:
                    4e:78:a9:f2:08:d0:23:27:33:9e:a4:7d:7c:3a:c5:
                    b6:58:cd:d1:7b:47:fd:16:ba:34:0e:5f:89:f8:b1:
                    96:06:ea:be:29:18:72:0c:99:17:d1:7d:e9:36:99:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:C3:6A:2A:12:CC:B1:95:8E:B4:31:DD:6A:90:FD:12:4B:F9:AB
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         d8:95:ab:94:a7:47:4b:f6:93:f6:12:21:7c:2e:58:c0:a1:c3:
         01:43:95:ab:89:30:67:cd:6e:ae:a4:66:2d:15:f3:47:1c:38:
         66:6f:6d:20:74:b1:a7:e2:1e:3c:5f:c9:e1:98:98:53:70:75:
         db:8a:4e:18:10:12:55:3e:14:a5:24:4c:d0:fb:9e:d8:66:81:
         77:83:6f:f4:d8:3a:0a:10:b9:78:c1:b2:e0:34:55:3d:a2:6b:
         0a:ff:6b:fa:74:1f:04:ac:2c:8b:f6:88:6e:b7:ac:19:3a:2c:
         03:4d:e4:10:b3:6c:a4:a9:59:46:15:67:d8:15:c6:40:04:8e:
         0e:ae:1b:2a:22:35:61:61:24:6d:4b:e0:50:8b:a5:c5:cf:6a:
         7e:4e:cb:3a:39:d8:e0:0e:8d:7a:c9:23:21:69:a2:62:97:41:
         c5:10:f0:90:7a:d3:7a:f3:26:e6:c4:69:7c:1a:fb:00:6e:7d:
         30:8e:c5:a2:c4:93:4a:fb:4a:5f:dd:5e:d7:33:5d:f6:a0:80:
         73:3e:d6:c5:46:21:fe:bd:bc:c6:fe:31:6d:b9:89:ba:95:f1:
         be:74:73:92:57:be:c1:4f:ce:7b:ce:3f:b4:05:b4:48:1a:1e:
         ac:9d:3e:cb:ef:8c:0c:d9:86:ce:10:f3:58:89:47:a6:3e:56:
         0d:9b:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org