Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          ureZXebemNVSauqcfVSRFDGzd3Va6uo0OdJ55xvyf2A=
Subject key identifier:   5F:AE:1C:05:A0:E1:46:5F:08:7F:6B:4C:7B:C2:63:F1:CC:9A:77:E1
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       712EDAF25FF1E6DD3B45A9B539CE4A0C1C28F99A
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     27891
IP address blocks:        150.187.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2e:da:f2:5f:f1:e6:dd:3b:45:a9:b5:39:ce:4a:0c:1c:28:f9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=5FAE1C05A0E1465F087F6B4C7BC263F1CC9A77E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:9f:f3:fa:13:ef:84:16:6b:21:41:e4:37:
                    dc:5a:75:f2:e3:0a:cd:e9:18:2e:ed:b9:74:78:38:
                    53:05:b0:37:ac:b0:7e:93:5a:40:e7:17:34:02:36:
                    a6:5b:6f:d9:56:79:6f:70:6a:ca:95:2a:b9:61:16:
                    f7:e0:d1:96:60:8e:d1:d4:53:d5:cc:54:0a:7a:2d:
                    b3:41:68:b6:09:57:ee:38:eb:1b:4d:7f:85:2b:29:
                    ee:2b:ca:77:83:29:bd:14:fc:77:c5:1b:04:19:07:
                    1e:03:d3:f2:26:cf:d5:42:b2:d9:11:88:cc:f4:e1:
                    b9:69:b9:6e:12:4e:c3:83:db:11:e7:e4:82:b5:3d:
                    9f:a8:7a:04:6a:02:d9:6b:1f:83:df:5d:66:4b:1d:
                    12:ba:c8:ca:a5:17:ec:da:52:96:c7:33:b9:14:53:
                    7e:06:a5:95:5b:ae:71:7c:a9:71:3f:bf:fa:9d:f2:
                    99:b1:00:f2:6b:4c:52:72:03:b3:66:bb:1a:c4:22:
                    02:5e:a7:5e:de:67:f5:81:ef:12:a1:5a:1c:25:8e:
                    48:f3:82:ba:34:81:4f:54:3f:66:4f:f7:7d:eb:5d:
                    ad:e0:8e:23:ad:54:e1:a6:da:f4:da:b7:39:7b:10:
                    2a:d4:52:d5:fc:f0:d6:2e:0c:08:13:f7:32:61:0a:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:1C:05:A0:E1:46:5F:08:7F:6B:4C:7B:C2:63:F1:CC:9A:77:E1
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:20:98:ce:84:b2:51:19:fa:23:9e:6e:b5:cc:d5:6c:ef:d2:
         39:b7:cc:bb:84:87:b6:76:49:44:68:15:33:c7:f6:af:f8:2f:
         fb:2a:d5:b3:38:22:69:90:2a:89:6a:05:a4:38:65:88:83:a6:
         5b:18:ad:93:9d:c8:37:af:25:df:a8:92:36:44:b8:25:54:81:
         be:27:30:50:32:c7:f4:9c:5c:4e:94:f6:e9:dd:79:b6:b9:4f:
         db:84:49:ce:08:31:4f:74:8b:00:8f:06:1e:28:e4:9c:ad:e0:
         4d:f0:48:bf:dd:85:0d:e3:18:8d:4c:d6:fd:59:26:93:08:0f:
         65:e0:d8:40:9a:68:35:3f:e8:fe:82:c9:e0:8f:72:21:f0:1e:
         1e:94:a9:93:a3:31:e8:5c:27:5c:4f:61:1d:fe:ed:96:23:a7:
         0d:f4:2d:d1:6b:32:4e:ab:2e:c7:e6:21:0a:bc:e7:00:c1:4c:
         49:12:bb:96:bb:e7:41:09:c1:92:4b:40:b0:a4:ec:af:76:1d:
         f0:2d:95:d4:c3:37:1d:ef:b6:ee:0d:cb:b6:97:d9:10:b0:9c:
         3a:bf:c5:e4:0e:a8:0f:4f:dc:7b:08:a6:43:4f:e8:b3:7c:41:
         3b:b1:0e:16:c7:ea:0f:4c:13:bf:6e:0b:4b:78:6d:6f:3c:65:
         7a:19:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org