Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          YeGF9VPP791TFLYLj5M5M66r4Z/+ytE2CWc4CR32fks=
Subject key identifier:   FE:E2:CB:9B:0A:CC:7E:D9:4B:C6:20:33:76:38:28:AD:95:F6:7A:96
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       5DFD440951FB3765818823973BFCBFA5757B26E6
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 04 Feb 2025 18:21:39 +0000
ROA not before:           Tue 04 Feb 2025 18:16:39 +0000
ROA not after:            Tue 03 Feb 2026 18:21:39 +0000
asID:                     27891
IP address blocks:        150.187.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fd:44:09:51:fb:37:65:81:88:23:97:3b:fc:bf:a5:75:7b:26:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:39 2025 GMT
            Not After : Feb  3 18:21:39 2026 GMT
        Subject: CN=FEE2CB9B0ACC7ED94BC62033763828AD95F67A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:8d:f1:7d:15:99:07:06:97:9a:5c:9b:c5:
                    37:82:e1:ed:a6:2e:41:cf:fb:d7:0e:6b:bf:ab:ec:
                    31:4c:8d:d7:d7:9b:66:7f:4e:09:0e:64:e1:f9:2b:
                    4f:da:67:d1:7c:e7:b0:4f:29:61:a5:9f:78:1a:a1:
                    21:a6:57:07:ed:13:a0:fb:be:dd:ee:02:a0:3e:65:
                    d3:16:0e:c3:bb:d3:e8:7c:45:8f:c6:cf:43:7d:1a:
                    12:12:df:20:e1:09:c3:18:c4:0c:9f:57:16:71:9c:
                    a4:19:d0:46:7c:95:74:fc:db:f7:56:61:38:f1:4b:
                    36:12:ac:2a:4d:ca:5b:8e:db:e9:de:7b:ce:15:39:
                    b1:48:68:fc:f1:8c:13:e0:02:7a:56:7c:5c:7c:c8:
                    a4:0a:b3:36:2e:cb:bc:0f:0b:64:b7:8c:c7:94:0f:
                    f5:79:2f:22:94:b7:a3:d7:30:e6:1c:80:7a:8e:8d:
                    78:85:39:bc:f6:7a:61:a6:71:34:1b:2a:34:b5:7b:
                    c0:d0:4c:cf:9c:69:72:ec:e7:d1:99:93:5f:1e:1b:
                    74:80:6e:b1:fd:c6:af:f5:e5:9c:df:19:2b:3b:f8:
                    4e:c0:f3:87:b1:aa:82:ea:ce:4f:85:6c:35:db:2e:
                    b6:9f:ca:5f:fa:b4:fe:03:67:3e:9a:bb:32:0b:82:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:CB:9B:0A:CC:7E:D9:4B:C6:20:33:76:38:28:AD:95:F6:7A:96
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134352e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:6c:61:38:9f:98:b1:d8:c1:68:b3:46:40:f2:96:c1:c3:66:
         9d:ab:92:b7:b2:ae:8b:b4:10:a8:e8:76:62:0c:ac:39:3d:b6:
         1d:8a:bf:89:ff:c2:11:67:aa:af:24:86:03:88:1f:19:92:ae:
         08:62:21:27:02:e3:08:69:16:30:52:ba:15:9e:ad:09:f3:75:
         7a:0e:62:a3:4a:a8:1d:b9:cc:35:32:af:3e:90:60:39:59:d2:
         ca:6c:9e:e5:ed:bb:ee:63:1a:c8:48:71:ad:1b:c1:cc:de:00:
         8d:62:4f:f6:b1:b9:f6:0d:9f:1c:ab:c3:95:0b:17:e1:75:bf:
         33:96:67:00:70:97:ee:7e:73:2f:c5:69:11:bd:22:51:c8:7a:
         a4:21:7c:f6:00:49:08:fb:fa:ff:e8:45:8d:a4:f2:9d:c1:42:
         99:1f:d9:56:d3:53:ae:a2:9e:f0:d9:9a:e9:12:50:65:f0:0b:
         6e:20:1d:a9:d8:59:19:b7:19:0a:0f:24:4b:ef:25:75:70:14:
         a1:49:b4:ff:7e:a4:06:19:c2:fb:fc:dd:e1:10:45:77:b5:2c:
         ad:70:c8:3c:7c:00:b7:4a:60:3d:79:88:b2:a2:f4:0f:29:b2:
         56:0c:12:6b:8b:d3:e7:c6:e5:46:c8:55:0d:18:43:0f:21:c5:
         79:7c:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client