Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
File:                     3135302e3138362e302e302f31352d3139203d3e203230333132.roa (raw, json)
Hash identifier:          V9vpceWEoBfL0f1eNLF1hUxY16Wp+ehS4DFreb7jFfc=
Subject key identifier:   DC:D9:88:9E:07:AE:3B:D9:54:C7:FF:44:E4:7D:12:29:F9:39:B1:DB
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       77B2EA97C4960C52496FF2269DAB4A8CFAFAF2C4
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
Signing time:             Tue 04 Feb 2025 18:21:40 +0000
ROA not before:           Tue 04 Feb 2025 18:16:40 +0000
ROA not after:            Tue 03 Feb 2026 18:21:40 +0000
asID:                     20312
IP address blocks:        150.186.0.0/15 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b2:ea:97:c4:96:0c:52:49:6f:f2:26:9d:ab:4a:8c:fa:fa:f2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:40 2025 GMT
            Not After : Feb  3 18:21:40 2026 GMT
        Subject: CN=DCD9889E07AE3BD954C7FF44E47D1229F939B1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:7e:28:9b:95:a1:f2:24:a5:54:a3:cb:a1:
                    f1:db:6b:5d:df:25:71:95:be:d1:fc:ed:7e:b3:7b:
                    ef:27:4e:65:3f:0e:a9:d9:62:b8:1f:8a:86:12:67:
                    e7:1c:fc:f7:a4:6d:d5:fb:ae:9b:99:f0:4e:1c:13:
                    af:22:7b:75:bf:77:0f:4d:2f:48:99:45:ec:df:20:
                    71:69:1b:2c:6d:34:57:c9:7b:29:02:2d:71:87:13:
                    13:7a:29:36:e6:a5:68:c9:86:dc:56:83:cb:cd:6b:
                    68:83:7a:ca:7a:99:60:54:58:e9:c0:1f:23:6e:7e:
                    7e:70:44:34:8c:30:8f:6b:5a:3f:61:cf:e9:e9:ae:
                    1e:97:09:c8:ce:55:33:76:dc:f2:fc:0a:61:83:ba:
                    63:46:e3:84:80:de:35:99:9d:4a:e4:47:44:05:bf:
                    c0:4e:84:4b:60:d6:aa:ef:56:e2:db:e8:07:1e:a6:
                    91:53:0a:c1:fb:26:28:fd:ba:a3:ba:c9:63:19:c7:
                    24:8a:7f:b1:95:1f:a4:29:9d:3b:68:95:21:42:9d:
                    9a:b7:7c:42:95:91:3d:59:8c:48:f8:3c:a3:c1:4e:
                    77:15:5d:87:02:44:58:59:aa:5f:b6:40:0d:7f:54:
                    69:07:de:22:85:db:cc:57:02:26:7d:fb:e5:6e:64:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D9:88:9E:07:AE:3B:D9:54:C7:FF:44:E4:7D:12:29:F9:39:B1:DB
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         14:16:36:46:a4:4d:4a:1a:b4:8e:3f:c5:20:a2:76:a6:66:8a:
         62:c9:e9:e2:f4:76:35:af:b5:c7:25:df:ad:6c:fe:a4:3a:c3:
         c4:93:a2:b9:77:81:7a:68:45:ed:e1:2a:d2:87:2b:3d:d5:07:
         f4:fd:81:dd:f6:1a:b2:45:f3:37:89:4b:e7:30:ab:15:e4:e2:
         be:ce:0c:62:47:94:b4:47:2a:3a:57:8b:d3:49:8e:bf:1a:b8:
         ba:89:2c:38:3c:27:89:fb:16:f6:75:bf:96:9a:3b:fb:ef:40:
         e2:08:16:cf:cb:25:6f:2c:eb:ec:35:cf:df:60:4f:9f:19:39:
         2e:72:31:1d:4c:67:1e:21:82:ec:21:2e:91:5a:05:4f:0a:0c:
         ab:20:bc:f9:b6:92:06:f0:e1:4c:96:e8:2d:da:36:eb:1b:31:
         29:8f:13:9c:b8:4b:b4:80:3a:32:81:ee:bd:23:01:4d:91:bd:
         5f:8b:74:16:c2:8e:fa:7e:f2:10:fb:6a:dc:8a:30:12:8b:5b:
         a3:05:08:d2:38:67:68:4e:12:1f:ee:f3:dc:85:9c:e2:2a:7d:
         83:fb:5a:31:4a:67:18:77:99:22:8a:16:76:26:2d:c0:23:2f:
         bd:b0:fa:7a:82:2f:02:a7:08:41:c4:66:bc:0f:7c:99:3c:b4:
         59:03:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client