Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3137382e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3137382e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          suOMzutQrqv6RQRmY2K2xxyl6c80CsVUbZi+jmJ4gN4=
Subject key identifier:   04:94:F8:AC:7B:4B:8F:F9:E3:BB:3B:D4:01:74:DF:48:1F:71:E4:1B
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       0A6F3A34D528417BA78CD71116742336C4525C40
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3137382e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     27891
IP address blocks:        150.187.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6f:3a:34:d5:28:41:7b:a7:8c:d7:11:16:74:23:36:c4:52:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=0494F8AC7B4B8FF9E3BB3BD40174DF481F71E41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:71:e9:bc:87:db:42:2e:e9:33:c8:2e:02:
                    87:90:ab:85:c7:d2:ea:18:6b:1c:e5:0d:44:a7:b6:
                    29:f5:cb:cb:26:91:60:63:cf:67:66:99:b7:20:6b:
                    64:04:78:cc:9b:9f:05:15:93:f1:30:c0:a4:4a:c1:
                    de:8f:c5:45:90:bb:d7:ad:3d:8b:15:4e:77:82:2d:
                    2e:73:16:1f:e0:d4:91:53:ee:04:af:9d:54:c9:61:
                    c5:b8:d9:6f:d9:b7:75:51:8d:24:ff:43:29:97:6b:
                    2e:c2:17:29:fb:5d:c1:3f:f4:81:76:79:79:48:e2:
                    30:ce:04:58:8a:c9:49:da:6e:17:14:7e:42:dc:79:
                    24:77:ea:84:4e:c0:74:29:79:53:02:0c:55:eb:70:
                    dc:fb:ad:b5:ff:37:76:8a:8b:39:a3:30:7b:0b:67:
                    0f:c6:9b:40:a9:3c:4c:bd:96:0a:78:f2:e8:5b:b9:
                    00:bc:e5:cd:5e:1d:bf:b5:e2:1c:65:00:d1:45:4f:
                    42:81:1a:59:bf:bd:99:f7:19:d1:8e:08:0d:a0:53:
                    7a:fc:ce:77:6b:f4:eb:b1:2a:06:39:e7:5d:a8:65:
                    1a:65:9c:75:85:4f:fa:fe:b0:c5:51:4b:db:a6:b1:
                    64:68:a5:d1:9e:9a:ff:fb:86:67:96:b1:0b:9f:ea:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:94:F8:AC:7B:4B:8F:F9:E3:BB:3B:D4:01:74:DF:48:1F:71:E4:1B
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3137382e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:45:a1:0f:01:19:3f:30:be:95:66:40:65:cd:ef:6b:8e:
         e2:65:bf:6a:ea:e8:c8:18:93:07:3e:be:6d:a8:29:67:eb:7b:
         05:8c:c2:2a:7b:ec:e8:ed:72:73:ea:83:02:f0:fc:34:08:01:
         e9:81:e0:b3:7d:d6:29:0c:5a:a5:87:10:36:0c:c4:0b:70:27:
         64:c3:58:b5:f2:9a:8a:48:00:99:50:8b:90:b6:9a:27:c9:ca:
         74:26:b3:49:cb:45:ec:68:c5:65:28:50:48:0e:78:17:b3:99:
         a6:af:42:b0:88:21:a8:08:1b:cf:54:56:b5:30:9a:f9:17:2e:
         1d:52:09:d4:91:8f:a4:39:38:99:7c:a9:ef:d1:49:60:37:4e:
         f2:b8:3a:a6:03:45:fd:53:a6:ef:e2:c0:2b:1f:7f:03:42:e5:
         9f:5c:64:06:60:89:a6:34:bc:72:29:b7:e2:16:11:8b:be:6f:
         20:3f:71:e7:bf:cc:d7:c0:52:a3:43:79:8c:77:7b:5e:5f:e4:
         53:a7:89:56:c3:6d:a9:16:09:53:01:84:23:79:77:a2:be:de:
         a2:fa:53:80:62:c5:81:c8:90:06:24:2c:0d:2e:4d:5f:9b:f8:
         fb:d7:83:c7:ff:7c:69:4c:f1:ee:db:a8:0e:d0:3d:13:0a:ce:
         2d:be:a5:73
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCm86NNUoQXunjNcRFnQjNsRSXEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyQjM4Njg0REE2OTQxRDVCRDgyODgyNDM4QjVBNkEx
QkMzRUY4MzAeFw0yNDAzMDUxNzQ0MjlaFw0yNTAzMDQxNzQ5MjlaMDMxMTAvBgNV
BAMTKDA0OTRGOEFDN0I0QjhGRjlFM0JCM0JENDAxNzRERjQ4MUY3MUU0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+3HpvIfbQi7pM8guAoeQq4XH
0uoYaxzlDUSntin1y8smkWBjz2dmmbcga2QEeMybnwUVk/EwwKRKwd6PxUWQu9et
PYsVTneCLS5zFh/g1JFT7gSvnVTJYcW42W/Zt3VRjST/QymXay7CFyn7XcE/9IF2
eXlI4jDOBFiKyUnabhcUfkLceSR36oROwHQpeVMCDFXrcNz7rbX/N3aKizmjMHsL
Zw/Gm0CpPEy9lgp48uhbuQC85c1eHb+14hxlANFFT0KBGlm/vZn3GdGOCA2gU3r8
zndr9OuxKgY5512oZRplnHWFT/r+sMVRS9umsWRopdGemv/7hmeWsQuf6mhrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBJT4rHtLj/njuzvUAXTfSB9x5BswHwYDVR0j
BBgwFoAU8Ss4aE2mlB1b2CiCQ4taahvD74MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0JCRDlCMzA2RjY3NUREOUM2NUZDMzU5QTNFOEJEMDJF
ODgwMEQ4MDczN0RGMUVDODQ1QUY1NjE5ODgyMzQ5LzAvRjEyQjM4Njg0REE2OTQx
RDVCRDgyODgyNDM4QjVBNkExQkMzRUY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTJCMzg2ODREQTY5NDFENUJE
ODI4ODI0MzhCNUE2QTFCQzNFRjgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNCQkQ5QjMwNkY2NzVERDlDNjVGQzM1OUEzRThCRDAyRTg4MDBEODA3
MzdERjFFQzg0NUFGNTYxOTg4MjM0OS8wLzMxMzUzMDJlMzEzODM3MmUzMTM3Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlruy
MA0GCSqGSIb3DQEBCwUAA4IBAQBgGkWhDwEZPzC+lWZAZc3va47iZb9q6ujIGJMH
Pr5tqCln63sFjMIqe+zo7XJz6oMC8Pw0CAHpgeCzfdYpDFqlhxA2DMQLcCdkw1i1
8pqKSACZUIuQtponycp0JrNJy0XsaMVlKFBIDngXs5mmr0KwiCGoCBvPVFa1MJr5
Fy4dUgnUkY+kOTiZfKnv0UlgN07yuDqmA0X9U6bv4sArH38DQuWfXGQGYImmNLxy
KbfiFhGLvm8gP3Hnv8zXwFKjQ3mMd3teX+RTp4lWw22pFglTAYQjeXeivt6i+lOA
YsWByJAGJCwNLk1fm/j714PH/3xpTPHu26gO0D0TCs4tvqVz
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org