Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa
File:                     3135302e3138382e302e302f31352d3136203d3e203237383037.roa (raw, json)
Hash identifier:          cVZPJ3sKjJcip/n7ePzcpAXMcsqtBIhXJmcLKdyy1Ec=
Subject key identifier:   BC:B5:F4:06:5C:18:DE:28:C3:C3:7E:87:D4:2B:12:B4:32:85:19:41
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       5850A228B32EDA6B9022FC38E2D797B70CB815A7
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa
Signing time:             Tue 04 Feb 2025 18:21:43 +0000
ROA not before:           Tue 04 Feb 2025 18:16:43 +0000
ROA not after:            Tue 03 Feb 2026 18:21:43 +0000
asID:                     27807
IP address blocks:        150.188.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:a2:28:b3:2e:da:6b:90:22:fc:38:e2:d7:97:b7:0c:b8:15:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:43 2025 GMT
            Not After : Feb  3 18:21:43 2026 GMT
        Subject: CN=BCB5F4065C18DE28C3C37E87D42B12B432851941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:3c:04:91:8e:bc:cf:61:a0:db:dc:61:55:
                    be:8e:45:8d:d2:06:46:00:d0:33:76:e6:83:2c:37:
                    14:a9:35:22:a2:d4:d3:b4:c3:68:66:70:5e:f1:c9:
                    32:d1:4d:02:be:a0:51:59:11:7c:27:ef:9c:16:d2:
                    51:4d:9a:d2:a1:5d:8c:47:d3:8d:55:fe:71:2c:13:
                    3f:ac:e5:e2:7c:bf:ef:31:2d:68:a4:e5:fc:3f:01:
                    1c:0a:ca:72:83:ab:8f:26:70:c5:45:50:10:d7:08:
                    18:7b:b5:f2:bf:33:85:89:40:fc:5c:cf:37:7b:e2:
                    b5:77:2c:09:8a:32:e9:3d:c6:74:3a:55:81:4e:45:
                    04:a6:f5:c5:7a:4e:0a:09:36:f5:d1:99:7c:2e:39:
                    f7:8e:79:81:8b:52:24:f8:d4:6e:9f:dc:1b:84:46:
                    6c:1c:0d:51:f9:10:ac:0a:da:79:d4:74:cd:04:e4:
                    e1:81:52:2b:ad:87:a5:06:59:4d:74:23:92:b0:ea:
                    bc:d5:0a:1d:c5:02:04:33:26:0e:01:81:3a:89:c7:
                    7f:4a:dc:69:7c:e6:3f:8b:97:0c:a7:df:71:39:94:
                    03:fb:c3:57:65:9b:10:24:ca:8e:d5:ca:9d:df:09:
                    dc:e0:21:d4:8e:fb:87:32:38:c8:20:88:14:e7:de:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:F4:06:5C:18:DE:28:C3:C3:7E:87:D4:2B:12:B4:32:85:19:41
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31352d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:30:19:45:53:2b:2c:25:a6:bb:3e:eb:ed:3c:b2:2f:9c:
         9a:22:9d:c6:cd:18:d6:73:a3:c8:6e:17:81:b1:c8:70:1c:0d:
         c5:0e:04:6a:60:84:6b:17:59:e3:9b:33:72:fd:bd:09:f8:b7:
         0e:9f:8a:ff:b0:db:09:c7:06:a2:73:da:94:b1:97:93:c6:b2:
         6d:0d:b6:9b:df:d1:dd:4c:4c:a4:38:e4:12:79:59:a4:aa:83:
         ea:55:a1:e6:57:e4:a4:76:ef:c6:0b:5e:70:32:d7:c6:07:f5:
         13:ed:f9:91:83:26:ca:ad:0b:6c:57:40:87:7a:60:bf:82:27:
         ef:97:ef:74:dd:f0:33:d6:1c:b5:fc:41:12:f9:48:5c:2c:50:
         55:b1:e1:39:ce:69:08:c8:20:1a:a5:74:99:45:82:91:f6:f6:
         60:97:29:ff:00:40:90:d2:86:04:5b:29:0b:31:84:3d:b5:38:
         9f:b6:d4:e7:6a:92:02:4a:52:a3:6f:04:e6:88:a5:66:7b:5d:
         e3:90:da:46:20:0c:35:1b:cd:ce:92:c5:84:3f:34:28:c4:cd:
         f0:e9:eb:20:09:38:b4:9f:65:08:95:5a:3b:0b:2e:3f:58:eb:
         ac:7e:46:cf:de:1c:fc:74:28:0f:8c:f5:c8:b9:6f:64:28:7b:
         a4:5b:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:08 2025 by rpki-client