Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
File:                     3135302e3138362e302e302f31352d3139203d3e203230333132.roa (raw, json)
Hash identifier:          Am2xZG2f2xACxmJyR+7VMOAvFDW3bl9YIG19Efmxn6c=
Subject key identifier:   FA:87:03:04:59:1A:D5:65:E0:A9:AA:F4:A4:F9:33:57:D5:3F:BD:F6
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       79D2D0546CA91F90F5227FEDC6E3B6356430C16F
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
Signing time:             Tue 05 Mar 2024 17:49:34 +0000
ROA not before:           Tue 05 Mar 2024 17:44:34 +0000
ROA not after:            Tue 04 Mar 2025 17:49:34 +0000
asID:                     20312
IP address blocks:        150.186.0.0/15 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d2:d0:54:6c:a9:1f:90:f5:22:7f:ed:c6:e3:b6:35:64:30:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:34 2024 GMT
            Not After : Mar  4 17:49:34 2025 GMT
        Subject: CN=FA870304591AD565E0A9AAF4A4F93357D53FBDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:65:4b:a0:89:1d:79:12:4a:89:94:56:37:
                    5a:65:68:1b:31:38:d1:2d:24:73:2e:4d:90:51:28:
                    3c:e5:b7:6c:99:24:01:4b:6c:b6:39:c0:fd:c8:5c:
                    a4:17:0b:37:de:e7:d5:71:c3:5d:37:54:95:77:cc:
                    e3:82:bf:8f:02:df:b3:9f:55:cc:e6:49:27:a4:24:
                    51:7e:4d:9f:90:16:ec:6f:74:08:eb:b3:09:3e:20:
                    c2:9c:76:ff:58:03:1c:c4:94:09:85:19:b5:d1:64:
                    e4:c0:76:b8:a6:5a:4c:71:8a:a1:75:58:49:c3:4c:
                    93:f9:70:de:45:ea:29:f9:04:29:84:9a:46:6d:27:
                    5b:d9:03:09:3c:75:0d:b4:53:e2:c4:98:fa:b9:73:
                    ae:47:32:4d:ba:6f:41:d2:f1:55:1c:a5:5c:c7:b9:
                    db:2a:8a:bd:9c:69:2d:db:18:22:da:c2:d0:0e:29:
                    3e:b0:7c:ca:14:14:05:1b:08:e8:4e:43:74:15:11:
                    89:f7:21:00:71:b8:91:89:63:b8:83:ee:a7:c6:38:
                    16:83:18:a7:82:c8:e3:43:b3:ad:d3:82:91:14:a4:
                    fa:f7:90:69:3a:4f:be:2e:7e:ac:2d:27:d5:ac:1a:
                    c5:55:bd:c1:7d:fe:c2:7b:b5:f4:37:89:9b:88:53:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:87:03:04:59:1A:D5:65:E0:A9:AA:F4:A4:F9:33:57:D5:3F:BD:F6
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         99:55:22:3a:3a:e1:6a:11:95:e2:6d:c7:01:ff:51:6a:82:2c:
         64:e6:dc:39:dc:7d:4c:75:8e:7e:de:70:79:da:21:4f:f3:28:
         8c:eb:4f:8f:09:fc:ad:12:5c:6a:ca:2e:ea:eb:9c:b6:7b:f4:
         25:c3:85:e4:e8:c6:32:e2:e1:ea:9d:a7:c1:e5:57:7f:d8:38:
         0f:4d:bd:f1:70:da:df:7f:e5:0f:7e:92:4d:65:69:ee:70:c3:
         38:f0:1a:0a:14:42:4a:11:61:8c:b4:21:54:17:71:e8:b0:ae:
         0c:7b:25:f8:b9:ae:0e:55:ce:8f:e2:e2:5f:70:32:6b:ee:ea:
         0e:be:4a:7e:90:33:3e:58:bd:82:57:d3:d2:0d:0e:ff:d5:28:
         6c:76:89:a9:dc:d6:29:09:31:9f:8d:57:80:c2:d4:4d:db:a3:
         fe:41:81:94:11:01:b6:92:44:c1:ef:a2:b1:48:c2:c2:77:d7:
         b5:a6:52:a7:48:76:ab:4c:2d:32:8c:0c:3a:f8:8d:d0:62:c3:
         91:ed:cb:80:28:25:7a:9f:cb:9f:52:9f:72:7a:dc:9e:b4:a1:
         33:59:6d:b9:49:f9:a5:be:54:69:70:bc:4c:a7:e5:db:59:c6:
         ef:fe:a8:12:dc:82:0c:c5:c7:46:7a:86:19:3e:ff:cc:33:b4:
         e9:89:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org