Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134312e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134312e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          T6rOc5Q7ZYS/VRtKNv3sbYoLevMYstrDstR2o7wvuSg=
Subject key identifier:   6E:5B:66:A6:0F:C0:49:EF:53:DA:DE:81:83:F9:FB:1A:A7:1D:87:1D
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       3EF8B69F6E8AC3D2BB6C79E682F6DF4FBC1A86EE
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134312e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 05 Mar 2024 17:49:32 +0000
ROA not before:           Tue 05 Mar 2024 17:44:32 +0000
ROA not after:            Tue 04 Mar 2025 17:49:32 +0000
asID:                     27891
IP address blocks:        150.187.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f8:b6:9f:6e:8a:c3:d2:bb:6c:79:e6:82:f6:df:4f:bc:1a:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:32 2024 GMT
            Not After : Mar  4 17:49:32 2025 GMT
        Subject: CN=6E5B66A60FC049EF53DADE8183F9FB1AA71D871D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:cf:66:6a:5e:c4:aa:b6:80:db:5f:23:5b:
                    b1:f2:31:c9:43:46:18:50:d2:5a:fe:a4:d7:4f:9e:
                    4e:2f:24:ae:14:25:15:73:36:1d:e0:60:b0:65:db:
                    69:96:ac:67:3f:83:1f:c4:13:6e:ac:63:68:19:b9:
                    70:e3:f4:1c:0e:58:d2:41:d1:3b:ef:7a:59:b9:fd:
                    e0:96:eb:b4:d5:3d:ea:21:ef:4d:0c:64:28:17:87:
                    72:04:32:2a:d6:04:5e:02:1d:c4:0a:de:10:71:a0:
                    d7:0e:00:55:2e:38:4b:bb:93:09:ea:4b:3b:fd:b5:
                    7d:34:5f:58:f2:3d:72:ad:9c:fc:8b:a0:a6:94:11:
                    1b:ad:a9:8d:96:21:98:43:30:01:21:c0:58:f1:e6:
                    70:a2:e7:94:74:cd:a6:60:ba:18:11:5e:02:15:22:
                    97:5f:09:91:21:1f:68:58:d1:35:22:3a:31:23:72:
                    43:3b:4f:2c:4f:c1:89:a9:75:f5:d9:e0:ee:d6:49:
                    86:ba:7d:72:5a:9f:69:f7:8a:9b:c3:f1:37:23:ee:
                    02:41:52:ac:be:6c:f3:31:20:8b:af:1a:3e:02:fc:
                    d0:f4:09:fc:6d:b0:8f:98:c4:39:c1:0a:a5:90:5b:
                    a6:fc:b4:28:3c:53:af:16:56:eb:3f:9c:52:c8:ba:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:66:A6:0F:C0:49:EF:53:DA:DE:81:83:F9:FB:1A:A7:1D:87:1D
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134312e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:fe:aa:cd:fe:29:e1:65:33:d0:00:62:f8:b9:62:ab:1c:
         1e:e3:9b:6f:14:4f:52:70:c1:16:84:0b:ed:db:68:d0:ee:b4:
         8d:c8:66:7b:30:11:08:60:26:73:2c:84:ad:a3:7f:a7:99:71:
         de:ac:89:23:b6:5d:a1:36:27:de:85:30:2b:ba:f6:5a:4f:72:
         c6:d2:0e:79:be:90:2d:ae:09:8b:b3:e9:80:b0:63:64:e5:9a:
         84:ef:bb:39:d3:c5:62:23:8d:5d:9c:24:40:11:d4:57:2e:80:
         5b:f7:e7:c1:cb:45:c1:09:28:bf:4a:34:03:ed:97:26:3f:f8:
         53:92:39:be:dc:72:69:c1:98:a9:ac:bf:7e:66:15:1f:e2:6b:
         d3:10:e7:d2:c5:5a:fd:5e:31:36:ac:ae:ed:a3:3f:c2:ff:9b:
         a1:45:2c:c1:08:49:9d:89:e4:33:18:1f:e3:86:7a:fd:1f:d7:
         5f:91:59:5c:93:80:18:23:33:05:06:db:30:16:79:53:2c:9c:
         90:dd:d9:8c:af:7c:c0:38:88:be:d6:a5:30:23:9f:5e:6e:b8:
         33:c9:d5:bc:b7:87:76:c0:e3:af:82:35:aa:2e:95:4a:6d:7c:
         35:0a:ab:cf:76:17:d6:6c:df:4b:e5:27:c3:ee:af:3d:af:83:
         6a:aa:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org