Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa
File:                     3138362e3135302e302e302f31362d3234203d3e203238313138.roa (raw, json)
Hash identifier:          nn+INFPJSFy37qcAcEbeyIqLfH8Nelw1wMTCMMHi5s8=
Subject key identifier:   92:8B:06:05:7E:D1:81:CD:9C:A7:56:D4:41:99:A9:79:D6:5F:00:AB
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       3BAB98B29AD93A626DDEED3E805DC5330020EFB2
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:18 +0000
ROA not before:           Tue 05 Mar 2024 18:04:18 +0000
ROA not after:            Tue 04 Mar 2025 18:09:18 +0000
asID:                     28118
IP address blocks:        186.150.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ab:98:b2:9a:d9:3a:62:6d:de:ed:3e:80:5d:c5:33:00:20:ef:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:18 2024 GMT
            Not After : Mar  4 18:09:18 2025 GMT
        Subject: CN=928B06057ED181CD9CA756D44199A979D65F00AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:69:3a:4d:c8:ae:41:95:0b:72:a4:37:2a:
                    92:f6:3e:4d:76:98:f0:f5:cd:d4:0a:f2:98:be:b7:
                    33:75:ca:8d:d5:6d:99:4f:36:0a:03:e3:ec:98:a5:
                    70:a9:46:05:ca:1a:4a:77:2a:6a:d4:54:66:39:bc:
                    22:6b:a3:1d:5e:0a:a0:e6:ec:11:24:fb:27:c9:cf:
                    c3:64:e1:ea:4a:18:11:96:f9:33:92:99:65:de:e5:
                    35:af:f9:b7:f6:7e:cd:f4:54:47:33:80:08:31:3e:
                    6a:53:01:0c:c0:5b:79:26:77:92:9c:f9:9a:66:56:
                    9d:2f:45:22:59:2e:19:a0:5e:c8:03:b6:32:4a:b4:
                    70:4e:64:82:94:73:fd:fb:70:e9:b1:da:8a:01:99:
                    2a:3c:22:bd:d5:0e:e1:04:91:f1:b0:da:bf:11:72:
                    e5:d6:96:5b:66:74:e5:5e:04:74:69:09:49:a5:bf:
                    1a:70:5f:06:fe:7f:98:23:af:c2:e6:b3:9f:36:11:
                    07:aa:46:d3:3d:9b:90:d3:47:10:6f:ca:b9:a3:56:
                    fb:d5:24:90:4d:4f:48:26:30:c8:57:3e:aa:d3:d4:
                    86:cb:50:83:8f:5a:a5:f5:10:b7:0b:45:bb:3c:cb:
                    e4:c4:dd:ae:9b:ec:96:07:d7:c3:20:83:39:0c:8a:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8B:06:05:7E:D1:81:CD:9C:A7:56:D4:41:99:A9:79:D6:5F:00:AB
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:73:f1:49:d7:53:41:4e:67:1e:c8:58:92:bd:11:61:9b:
         84:71:33:4a:55:d3:ff:53:cc:c0:70:83:cf:c5:a0:57:d4:88:
         e9:a7:8c:3a:ae:6e:42:52:36:b4:85:30:6c:37:ea:4c:56:f9:
         7b:15:74:75:13:46:16:13:69:58:c0:23:34:c5:9f:a7:99:ba:
         b4:94:04:7b:42:2e:a5:2c:bc:5a:1f:44:99:b0:0e:b0:f3:42:
         14:83:40:e0:0c:59:f1:54:26:7d:eb:cc:e6:1b:6d:a1:1a:a5:
         5d:e6:0a:9d:f8:14:5e:98:4b:fa:57:ad:63:e9:a5:df:ac:7b:
         d4:bc:04:bb:f5:d6:76:2f:fe:76:b0:a0:0a:b8:d3:64:28:0c:
         e9:12:f9:37:8c:b3:a9:be:c6:ee:93:df:9b:94:d7:3d:8c:0f:
         51:5d:2b:09:0f:10:ae:0e:5f:55:49:99:7a:3c:7a:75:a5:f8:
         89:49:48:13:f7:af:60:ac:a4:39:54:e4:c9:fe:88:d5:eb:04:
         5e:2f:dd:3a:56:92:f2:5a:f5:75:0f:0b:e1:a0:10:b0:fa:b3:
         8a:22:c5:ac:e9:27:57:ef:57:e6:6a:40:3d:2b:02:63:ab:31:
         a7:24:2e:5d:33:56:cc:e9:47:a5:1d:cf:df:2c:af:8b:e8:77:
         be:84:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org