Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa
File:                     3135302e3138382e302e302f31352d3136203d3e203237383037.roa (raw, json)
Hash identifier:          YZjHg/wyBJaGOcwsQ1+NyaGit76b5BPn6tu4xRy3DRE=
Subject key identifier:   E2:B7:80:AE:2F:7A:85:A5:28:64:75:53:46:C2:12:11:BC:6A:C7:E8
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       4E4DB66E44B21008FBC10C3BF17CC32C45DDC9BB
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     27807
IP address blocks:        150.188.0.0/15 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4d:b6:6e:44:b2:10:08:fb:c1:0c:3b:f1:7c:c3:2c:45:dd:c9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=E2B780AE2F7A85A52864755346C21211BC6AC7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:de:da:0d:17:0b:c1:9b:9a:17:c6:c4:df:
                    d0:ff:3a:a1:c4:a3:bd:2b:f5:28:ee:02:3c:7c:0e:
                    5a:bc:81:56:4f:21:92:9d:be:63:8d:7f:50:d7:1a:
                    35:2e:46:ef:10:ad:2e:57:53:3e:1a:98:db:83:96:
                    65:86:00:6c:4e:8d:f3:89:a0:34:fe:67:83:f4:c1:
                    17:a1:c1:92:35:65:91:13:98:5d:a6:e1:10:89:b0:
                    d9:70:5d:78:e7:43:64:bc:34:13:bb:31:3b:f7:2f:
                    33:1a:ad:d2:6a:43:04:92:6d:82:b4:e1:2a:ea:70:
                    71:17:39:a7:a9:73:86:a9:b3:f7:c4:71:50:7f:17:
                    7f:99:a7:77:84:70:e2:a9:e0:41:20:04:4b:7a:22:
                    3c:fd:0d:3b:53:85:57:38:89:21:c1:74:13:d7:29:
                    b7:02:db:63:1d:f5:0e:4a:c6:48:d8:7e:1d:cf:1b:
                    9d:e6:8d:b1:bb:fc:89:9a:da:08:b5:17:66:4d:e9:
                    9d:2c:49:d9:b5:4b:fe:a2:6b:a0:8b:21:a3:97:bb:
                    30:30:f4:e7:0a:23:5d:50:7d:da:0b:a9:7f:5a:e5:
                    05:72:ec:47:cc:ee:6c:94:41:d4:2d:2a:67:a8:fb:
                    6d:1f:d2:83:d7:95:4b:92:9b:2e:9f:a0:43:0d:51:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:80:AE:2F:7A:85:A5:28:64:75:53:46:C2:12:11:BC:6A:C7:E8
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:ec:bb:59:93:93:de:0f:95:16:da:e5:c0:3a:7e:73:73:
         c0:6e:ae:22:fe:55:b1:4d:25:0f:6e:26:d3:9c:4a:7a:06:6f:
         01:ea:30:a9:55:5f:5a:e9:1e:0d:58:13:14:2d:6e:3f:41:8f:
         0e:aa:66:72:f7:a1:c4:0d:49:67:44:27:f8:15:fa:56:09:79:
         7a:3e:1e:e0:82:7a:9b:24:c7:da:57:90:ea:da:23:02:db:77:
         8a:1e:65:5e:2a:4a:8d:6f:7b:ac:0d:d4:cd:0e:0b:31:63:7b:
         d4:7e:b8:fa:2a:76:3e:8c:a4:c0:e5:97:51:a7:9a:ad:0e:e6:
         8a:14:6a:57:21:67:86:52:5b:95:7b:53:0b:42:82:c1:0e:3a:
         ac:26:39:39:4c:de:fa:30:5f:59:a7:b4:8e:a2:10:4f:0f:35:
         cf:11:18:3e:39:6f:e4:dd:6a:3a:7c:1a:9a:a4:26:95:e8:ef:
         a2:e5:db:76:68:36:cd:cf:34:3c:b1:2b:47:96:c8:65:99:4d:
         23:68:ea:ce:d9:47:3a:89:84:af:49:1c:6c:ac:29:dd:1f:8a:
         5d:ec:85:e1:98:48:66:37:5f:de:13:9d:e1:a9:ec:91:c3:1c:
         cf:4d:c4:8b:f7:a7:51:ef:3b:6d:5e:a9:5d:cc:b1:60:a5:7f:
         b5:f6:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org