Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e36342e302f31392d3139203d3e203237383930.roa
File:                     3135302e3138362e36342e302f31392d3139203d3e203237383930.roa (raw, json)
Hash identifier:          1m0c2vcXDbeaDVkfNJFk65VNXPoJQwA0vsbyPnU3Yu4=
Subject key identifier:   C9:C6:90:3C:66:49:AC:B7:3E:2F:E4:17:AC:6A:BD:22:01:51:0A:CE
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       7831346E85ECBF1F08251CAFB3B73FDE062A2161
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e36342e302f31392d3139203d3e203237383930.roa
Signing time:             Tue 04 Feb 2025 18:21:42 +0000
ROA not before:           Tue 04 Feb 2025 18:16:42 +0000
ROA not after:            Tue 03 Feb 2026 18:21:42 +0000
asID:                     27890
IP address blocks:        150.186.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:31:34:6e:85:ec:bf:1f:08:25:1c:af:b3:b7:3f:de:06:2a:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:42 2025 GMT
            Not After : Feb  3 18:21:42 2026 GMT
        Subject: CN=C9C6903C6649ACB73E2FE417AC6ABD2201510ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:ff:21:88:21:c3:cb:e4:1b:4d:dc:0b:7c:
                    ae:cb:08:64:1d:34:18:a1:7a:1c:06:9b:8a:9b:77:
                    24:61:c2:34:93:b4:59:4b:f9:61:bf:0b:93:d5:64:
                    5d:42:4d:d8:98:65:59:50:3a:65:b5:30:ad:ff:67:
                    12:76:f4:c4:b2:a8:b2:25:00:6d:b6:b9:f3:c6:1e:
                    1d:c7:76:17:42:e3:71:0e:f0:5d:58:3f:ec:ee:f5:
                    54:4b:3b:f4:02:6d:5b:55:87:af:fa:7a:ab:4e:bf:
                    26:9f:db:41:e9:1a:f2:16:b8:ae:96:df:59:f7:73:
                    cf:4a:75:60:44:36:36:a5:dc:3b:a9:cb:88:e1:92:
                    5c:07:a0:74:8c:50:84:12:b1:75:76:4f:a6:24:72:
                    cb:56:84:d5:4d:e5:d2:14:5a:de:ff:80:b4:85:95:
                    d6:d7:8e:2b:5e:21:c0:37:a2:86:42:6a:0c:54:c0:
                    30:af:5f:14:e8:91:c0:10:b4:21:53:d7:43:57:b9:
                    8d:92:dc:b1:89:66:ba:14:8b:a8:01:91:45:56:b7:
                    1c:c1:42:bf:d0:1e:84:6f:34:3b:3c:fe:b7:96:61:
                    43:6e:6b:00:f0:3f:23:47:0b:68:1d:1e:f4:a4:ab:
                    4f:c5:54:b6:56:09:4c:b0:8d:d5:0d:97:76:59:94:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:90:3C:66:49:AC:B7:3E:2F:E4:17:AC:6A:BD:22:01:51:0A:CE
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e36342e302f31392d3139203d3e203237383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:da:af:90:af:80:7e:ee:46:d4:97:63:67:85:4e:b2:ba:6c:
         df:79:c6:08:91:4a:95:b5:71:1b:1a:12:77:37:d2:4d:a1:6f:
         9e:91:66:1e:f8:d5:d9:f1:33:c0:86:ad:ed:29:d1:f4:6a:40:
         26:82:53:b9:05:7d:93:a0:f9:f9:e2:49:0c:32:56:15:2a:c5:
         7b:27:78:fe:93:0c:5d:b4:15:d5:9f:a2:77:0f:82:71:33:10:
         43:9b:d0:76:1e:aa:37:93:d7:97:8c:9d:66:01:3a:d8:29:bc:
         34:7d:39:1b:27:3e:21:28:a9:5e:7b:5a:a8:31:ad:78:63:1a:
         2b:94:79:b5:c8:6f:60:7a:4c:71:09:ac:9c:0f:99:b5:6a:fd:
         fd:6a:f8:e5:05:6c:74:e8:d2:e4:54:e9:5f:b5:83:5c:5b:c8:
         93:e7:b5:56:ec:bb:ee:00:53:5f:1e:07:09:98:5b:84:d1:3f:
         46:08:76:97:db:fc:3e:d3:cc:1e:49:a6:22:30:d2:25:d6:94:
         1a:5a:d3:64:3d:dd:0c:62:64:74:da:bb:ca:be:39:98:4e:ad:
         9e:2e:10:64:a9:2f:88:9b:fb:03:84:67:50:2c:49:4d:68:af:
         9d:f7:cb:6d:79:f2:d2:e8:9a:dd:dd:3f:9a:30:50:d9:ef:bf:
         51:2d:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:14 2025 by rpki-client