Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
File:                     3135302e3138382e302e302f31362d3234203d3e203230333132.roa (raw, json)
Hash identifier:          tNYTr1L3Y7Y9/0AAizsSlSYeRrzYHRh6hw4lcWQ4SqM=
Subject key identifier:   D1:11:6A:4E:B5:62:FC:62:63:AF:80:E8:DB:EA:C6:C5:BD:BD:CB:7B
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       1AB0B3BC2FCED57D3C1FA133B3B4B0645ED82215
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     20312
IP address blocks:        150.188.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b0:b3:bc:2f:ce:d5:7d:3c:1f:a1:33:b3:b4:b0:64:5e:d8:22:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=D1116A4EB562FC6263AF80E8DBEAC6C5BDBDCB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:17:0d:54:e4:8b:79:05:07:b4:c4:af:ab:
                    7a:d4:7b:e0:77:80:c1:d6:b0:05:10:8d:2e:45:62:
                    d9:93:1e:68:aa:0b:ea:21:76:9e:ba:62:e0:98:41:
                    00:3d:fa:b3:9c:d6:fb:eb:a5:61:3e:5e:e5:75:c2:
                    67:c7:6b:b1:af:1b:5b:5e:b8:38:e5:a4:ee:35:64:
                    f0:31:40:cf:fd:59:0f:ae:46:24:cf:bf:80:a5:dc:
                    38:d9:8f:02:7d:3d:86:4e:4f:46:aa:1f:93:93:71:
                    c2:1f:55:63:6d:f8:b4:0e:55:43:c5:0b:fd:4b:38:
                    43:89:35:13:51:ae:5e:cf:06:bb:fd:ff:6e:6a:50:
                    53:a5:25:16:e8:e0:1d:5e:2c:7a:f1:6e:4a:c2:96:
                    2a:09:d6:8d:ea:13:e1:b8:26:f5:49:ef:81:c0:00:
                    4b:f1:50:1a:82:61:d2:f6:65:9a:ed:dd:50:ac:4e:
                    70:2c:37:10:38:cf:8a:dd:44:81:26:ea:1e:bc:87:
                    ac:e3:9b:b4:2b:53:af:4e:1d:c2:51:af:49:f2:53:
                    61:6d:75:55:95:a3:29:c9:86:0b:56:6c:34:a5:88:
                    40:3c:a6:18:c6:da:78:0b:11:54:96:ad:c2:05:49:
                    0d:f5:4d:98:88:7e:f3:85:c8:a9:ce:56:a9:cb:90:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:6A:4E:B5:62:FC:62:63:AF:80:E8:DB:EA:C6:C5:BD:BD:CB:7B
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:a5:65:50:5c:69:a6:ba:dc:60:26:a2:c3:ce:98:09:08:
         fe:df:2c:e2:1b:7e:d1:c3:3d:9a:17:ed:e0:87:a2:f0:20:28:
         6f:c6:6f:ef:a5:31:b6:cc:7c:88:6b:bb:62:24:a6:f7:16:41:
         37:1c:e7:62:9b:db:16:8c:44:5d:b5:ab:36:ec:d2:66:96:74:
         6f:cf:2e:c3:cc:5b:ed:40:44:0c:bc:61:c4:72:9e:4f:3d:d6:
         5c:ab:e2:2b:55:d8:40:b2:cd:10:e1:24:2f:2b:5a:e2:7a:22:
         f0:78:1c:5e:27:79:3e:fe:22:f6:7f:d8:37:7d:24:1b:dd:96:
         06:8b:03:56:c0:bd:c7:72:9b:e4:ca:a0:ea:58:be:fe:81:f6:
         08:6a:02:a5:41:97:9f:e9:0d:ec:e1:da:ed:c8:ed:60:3d:36:
         e1:fd:7c:68:4b:f3:21:22:6f:66:f5:75:6a:bd:b9:b6:6a:33:
         5b:8c:d4:b6:77:0b:06:d9:21:32:aa:7c:48:4a:f0:0e:d4:8d:
         ef:bd:51:95:5d:88:88:f8:f3:ef:ce:c7:68:37:12:79:f2:06:
         0a:3e:8e:d4:89:86:87:8c:63:d8:98:5d:d8:ec:48:b0:cd:27:
         9c:c1:ea:d8:9d:8b:11:50:72:22:73:74:b1:8c:80:56:2c:d2:
         4d:2b:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org