Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa
File:                     3135302e3138392e302e302f31362d3234203d3e203230333132.roa (raw, json)
Hash identifier:          Un3NaNr2qyi9YJiDgbRtRurV4k55/KmKE+clwITWYhc=
Subject key identifier:   16:25:D6:9E:85:D4:6C:F5:42:75:BB:2E:5C:2D:FD:04:73:E1:2E:F3
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       73132DC6114A124BE315528F05CDDC34C8961E42
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     20312
IP address blocks:        150.189.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:13:2d:c6:11:4a:12:4b:e3:15:52:8f:05:cd:dc:34:c8:96:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=1625D69E85D46CF54275BB2E5C2DFD0473E12EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:ab:62:44:0d:0a:ae:6c:cc:0b:d1:89:7b:
                    f3:7e:d3:d2:62:5b:15:bd:08:33:c5:65:99:94:3a:
                    b3:6f:dd:ab:1a:66:4b:cf:ec:1f:12:69:07:79:dd:
                    13:ce:49:20:a5:56:43:09:5e:f6:e5:d1:d1:7b:e5:
                    dd:40:db:6c:70:6b:dc:33:7d:18:a6:53:21:ba:70:
                    c0:9d:05:43:93:0c:39:cf:94:2e:2f:ab:37:51:ed:
                    b7:30:be:ab:4c:c0:01:ab:ed:2a:42:35:8c:26:54:
                    0b:5d:e6:1f:0b:50:de:c4:36:cc:f3:5b:61:e8:bd:
                    ce:ac:01:18:4a:c8:72:24:76:81:ec:2e:32:46:2d:
                    a0:da:0d:71:34:83:56:43:21:44:dc:58:25:f5:d0:
                    b0:dd:cc:1d:c8:87:b7:67:ff:40:7d:cc:ee:1f:99:
                    68:21:f6:d0:0c:1e:7f:ca:ec:fc:3d:43:ce:86:b4:
                    9a:e5:cc:77:43:04:c6:bc:3a:a9:d2:14:82:68:75:
                    e6:e0:b7:4c:75:ad:90:e9:d5:d0:23:b5:f3:f5:3e:
                    99:3d:15:16:bf:da:4e:49:03:3c:6d:5f:12:6d:71:
                    ed:c1:2b:d2:b9:e6:71:be:9e:f8:26:33:2c:ef:bd:
                    bd:a5:6e:39:8b:89:8f:1d:d4:4b:b2:37:09:8a:e9:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:25:D6:9E:85:D4:6C:F5:42:75:BB:2E:5C:2D:FD:04:73:E1:2E:F3
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:af:f0:ab:8f:fb:42:96:bc:35:20:6b:24:8c:80:83:c3:
         3c:1e:d5:f7:fd:60:cf:16:04:ca:7c:a3:b9:c9:d9:f5:08:40:
         92:70:dd:5f:08:16:9f:c5:18:ea:3c:b7:da:ac:0d:8e:91:ca:
         53:7b:f4:56:b6:0c:e9:bd:1e:38:09:11:a1:b0:49:62:f4:45:
         85:95:b1:d2:89:6f:ca:60:8c:48:fc:40:58:26:37:b3:19:07:
         12:8d:94:07:61:c5:8a:39:db:a8:ee:37:0b:ae:b6:90:59:79:
         94:93:51:9f:1d:6c:a6:92:c9:d9:aa:57:67:91:a5:88:01:f7:
         5e:5f:23:be:c1:af:5d:83:16:f1:ee:72:2a:81:ce:9c:aa:15:
         bd:a8:6a:c5:e2:74:b1:15:d6:4f:c9:15:41:7d:68:56:99:b4:
         c8:85:2d:09:bb:7e:c2:43:61:be:fb:83:30:f9:16:bc:ca:63:
         bd:e5:92:8c:35:c8:a1:67:14:fe:64:f9:96:d1:5f:61:58:b0:
         de:f1:e4:a8:e2:8d:ef:93:c0:66:64:27:40:23:44:30:91:5e:
         c8:31:29:2a:3f:14:1f:9d:90:94:79:89:37:ba:34:2b:80:7b:
         15:ef:35:e6:bc:8d:ad:39:3c:6f:50:b0:2a:e9:48:84:be:7f:
         9c:07:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org