Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa
File:                     3135302e3138362e33322e302f31392d3139203d3e203137323837.roa (raw, json)
Hash identifier:          CO+B+VKWHnd5dX3wrvOG4pUsaFxdFWAJBqN8ErRZGSI=
Subject key identifier:   23:1E:26:24:EF:FB:57:34:5D:F6:BA:D4:8D:4E:1A:12:62:C7:54:2C
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       28283A3C9C27BDD0E9ED8384A943D140A5BA660F
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa
Signing time:             Tue 05 Mar 2024 17:49:33 +0000
ROA not before:           Tue 05 Mar 2024 17:44:33 +0000
ROA not after:            Tue 04 Mar 2025 17:49:33 +0000
asID:                     17287
IP address blocks:        150.186.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:28:3a:3c:9c:27:bd:d0:e9:ed:83:84:a9:43:d1:40:a5:ba:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:33 2024 GMT
            Not After : Mar  4 17:49:33 2025 GMT
        Subject: CN=231E2624EFFB57345DF6BAD48D4E1A1262C7542C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:43:e2:69:a8:65:02:da:f7:7c:c5:97:70:
                    3d:3f:af:94:48:c7:96:18:a5:ea:be:43:4e:66:6b:
                    6d:78:43:84:e6:f6:ef:b5:d8:5a:7a:da:b5:db:4a:
                    f7:21:8d:77:0c:46:78:df:9e:1c:b4:a2:74:c0:25:
                    8a:28:ea:5a:98:e1:b3:85:ea:34:75:73:e7:87:b1:
                    a7:67:d6:07:11:5b:50:d8:f9:58:21:1b:44:d6:48:
                    69:59:7a:98:01:f5:11:cc:9f:50:4f:e8:3a:92:15:
                    e7:e9:f3:d1:ce:c7:4b:82:f1:98:19:b0:26:f1:24:
                    ef:bc:51:e2:12:e9:0e:41:8e:51:5d:01:5d:3a:9e:
                    8f:df:d7:7c:70:c4:94:e0:7d:8f:92:61:36:dc:9d:
                    16:1c:05:f7:65:4f:05:44:2b:9e:64:61:19:74:03:
                    ac:c6:02:31:55:07:c1:4e:fc:84:6b:fd:b3:8b:99:
                    a2:01:ec:90:d0:b6:b5:c2:4d:9a:8d:42:83:da:d8:
                    f4:38:1b:2f:f8:e8:ca:a7:3c:13:d3:14:b2:c1:ca:
                    64:a3:e2:d8:6d:f1:e1:85:6c:e8:f8:6b:eb:8a:6f:
                    e9:47:e4:2e:77:10:39:92:74:2a:fd:4d:7b:50:f8:
                    1f:10:69:d2:4d:b2:c6:26:4b:0d:a5:22:17:83:31:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1E:26:24:EF:FB:57:34:5D:F6:BA:D4:8D:4E:1A:12:62:C7:54:2C
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e33322e302f31392d3139203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:5d:dd:52:34:47:8e:85:bb:6c:11:bb:33:1d:3f:ef:52:c0:
         bc:13:ee:61:02:0a:23:ee:f5:25:da:d8:01:7e:75:c8:83:12:
         91:2f:af:3f:d4:86:2f:63:df:4c:d7:47:e2:cd:70:e6:5a:f0:
         b1:b0:9d:e4:2d:ef:62:70:48:d5:a2:94:da:c3:9a:c7:b0:3d:
         37:18:39:cf:fe:66:bf:f7:49:35:2b:51:ee:28:48:7d:01:71:
         a0:e8:3f:64:79:c2:3f:40:58:a8:ac:0f:77:6a:fc:da:fe:ed:
         56:32:a1:d6:0f:05:5e:49:4b:6f:01:b7:bf:c0:86:5b:40:7d:
         04:60:89:f4:da:11:89:5c:c9:28:ef:77:9c:e6:60:12:3c:2d:
         56:37:84:4d:77:68:1d:d2:f1:48:bf:6f:23:e1:95:75:91:bd:
         a7:04:54:be:96:06:9c:b2:6a:f8:4c:0b:8b:d7:98:e2:f7:56:
         9a:b0:43:2d:07:d7:03:63:5c:7a:f8:0d:31:a6:be:b5:79:77:
         aa:26:97:30:1b:d4:e4:26:96:f8:3d:e4:11:8b:c3:8c:98:83:
         ed:cd:7b:1f:54:9a:1f:43:cd:09:b2:69:81:07:cf:70:89:b3:
         77:5e:63:86:48:fe:11:36:87:ff:da:c1:ed:25:30:4f:13:24:
         a6:b4:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org