Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa
File:                     34352e3139302e31352e302f32342d3234203d3e20323639393132.roa (raw, json)
Hash identifier:          5qjU5/Kn2XBUtbQsrV+S84h80fqMB7RQaM8kkGigwwM=
Subject key identifier:   39:30:42:8B:37:18:41:66:9C:D4:C0:93:39:96:94:86:E1:FC:20:E6
Certificate issuer:       /CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
Certificate serial:       7486AA185F543A9F41D5315BFAFAFB35CDDFF138
Authority key identifier: 46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa
Signing time:             Tue 04 Feb 2025 19:59:29 +0000
ROA not before:           Tue 04 Feb 2025 19:54:29 +0000
ROA not after:            Tue 03 Feb 2026 19:59:29 +0000
asID:                     269912
IP address blocks:        45.190.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:86:aa:18:5f:54:3a:9f:41:d5:31:5b:fa:fa:fb:35:cd:df:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
        Validity
            Not Before: Feb  4 19:54:29 2025 GMT
            Not After : Feb  3 19:59:29 2026 GMT
        Subject: CN=3930428B371841669CD4C09339969486E1FC20E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:10:6a:2f:47:36:d2:5d:c0:5e:ef:81:99:
                    d7:d2:3b:99:01:4f:91:10:c0:15:ed:f5:1f:d6:73:
                    72:8e:c6:da:bb:1c:66:fc:d5:58:f6:aa:f1:aa:c7:
                    3d:05:de:33:19:17:68:e5:0e:ea:68:0f:0b:f5:bd:
                    46:f4:3d:af:e9:24:d5:6d:f9:44:07:8a:62:99:11:
                    0e:b7:f7:74:20:02:d2:47:62:b9:de:1e:90:e0:c0:
                    da:8b:76:fc:4e:93:24:52:82:39:4b:69:e2:d5:f1:
                    d1:db:07:53:2c:05:d1:79:07:95:19:9f:1e:c2:23:
                    ef:4b:aa:c0:70:54:c6:94:83:67:d1:71:82:d9:2c:
                    17:21:e8:03:ad:78:3b:69:93:e7:b9:06:5c:af:91:
                    41:08:2b:73:0b:85:24:7e:cf:db:dd:f1:61:36:0d:
                    15:9f:aa:e7:71:f9:d1:3c:ac:c3:e0:e5:4a:c5:04:
                    2e:8f:cd:51:e3:0b:4c:e8:a4:00:72:d5:9e:97:59:
                    6e:da:4a:98:96:c5:7d:a2:69:1a:5e:4b:90:86:46:
                    2c:66:34:82:1a:69:cc:77:83:0c:6b:43:9b:0e:ea:
                    26:dd:e4:15:97:82:d6:c4:a7:02:6c:49:47:0e:b3:
                    9e:59:a7:3c:f9:36:ec:d7:71:40:6c:00:e6:bd:24:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:42:8B:37:18:41:66:9C:D4:C0:93:39:96:94:86:E1:FC:20:E6
            X509v3 Authority Key Identifier:
                keyid:46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:e5:c0:c6:6a:26:15:a4:96:87:d5:a3:f0:ef:ae:be:db:
         38:8e:3d:1b:9d:c5:bf:bc:ac:ff:22:93:bb:a6:d3:5a:56:ec:
         8e:ac:5c:3c:7e:02:1f:9d:05:4a:6c:86:94:5a:15:34:fb:29:
         18:ed:bc:71:1f:3e:40:c4:50:70:b6:fd:ee:88:ea:92:0b:f3:
         c0:07:c6:24:25:c1:24:c0:52:6c:06:b0:b6:9d:93:dc:80:20:
         d1:c4:72:0c:87:3e:8f:04:1f:03:b8:da:d0:2a:ed:97:b9:16:
         c1:02:76:29:ef:45:83:3d:3d:95:06:d6:59:c1:9d:fb:8e:53:
         52:0f:1e:e0:6e:86:cb:de:25:ea:5d:e3:b2:bb:b8:e0:3e:eb:
         3d:49:2c:99:7b:e0:11:5e:1b:7e:84:e6:75:54:a6:aa:ab:1d:
         9f:2d:78:56:c2:f6:25:b1:79:51:0e:74:13:4f:6e:d0:c4:37:
         4b:2e:ab:69:66:0d:f4:9c:45:0a:3d:70:cd:f7:2f:e5:4a:49:
         95:59:c6:b5:1d:0d:ca:fa:0b:8a:86:50:31:93:4a:93:75:98:
         22:83:17:db:fa:20:d2:77:55:45:0a:e1:de:c4:d8:24:a6:85:
         65:a7:22:e2:dd:ad:1f:49:6a:84:31:76:12:f1:a7:e7:4a:32:
         cb:6b:ec:1f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdIaqGF9UOp9B1TFb+vr7Nc3f8TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEMzE3OEI0OTVDMkEwQzdBNzM1MzlEREFDRjdCMThC
NDMwMEU4MzAeFw0yNTAyMDQxOTU0MjlaFw0yNjAyMDMxOTU5MjlaMDMxMTAvBgNV
BAMTKDM5MzA0MjhCMzcxODQxNjY5Q0Q0QzA5MzM5OTY5NDg2RTFGQzIwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVhBqL0c20l3AXu+BmdfSO5kB
T5EQwBXt9R/Wc3KOxtq7HGb81Vj2qvGqxz0F3jMZF2jlDupoDwv1vUb0Pa/pJNVt
+UQHimKZEQ6393QgAtJHYrneHpDgwNqLdvxOkyRSgjlLaeLV8dHbB1MsBdF5B5UZ
nx7CI+9LqsBwVMaUg2fRcYLZLBch6AOteDtpk+e5BlyvkUEIK3MLhSR+z9vd8WE2
DRWfqudx+dE8rMPg5UrFBC6PzVHjC0zopABy1Z6XWW7aSpiWxX2iaRpeS5CGRixm
NIIaacx3gwxrQ5sO6ibd5BWXgtbEpwJsSUcOs55Zpzz5NuzXcUBsAOa9JIU7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOTBCizcYQWac1MCTOZaUhuH8IOYwHwYDVR0j
BBgwFoAURtMXi0lcKgx6c1Od2s97GLQwDoMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQkM4NTE3Qjk4MjhCNjQxMzY0MjhEN0UxRDI5NDlDOEMw
NUJFNTdFRDQwRjEyQTBERDdCQTZEQjFDOTc4Nzc2LzAvNDZEMzE3OEI0OTVDMkEw
QzdBNzM1MzlEREFDRjdCMThCNDMwMEU4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NkQzMTc4QjQ5NUMyQTBDN0E3
MzUzOUREQUNGN0IxOEI0MzAwRTgzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0JDODUxN0I5ODI4QjY0MTM2NDI4RDdFMUQyOTQ5QzhDMDVCRTU3RUQ0
MEYxMkEwREQ3QkE2REIxQzk3ODc3Ni8wLzM0MzUyZTMxMzkzMDJlMzEzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2+DzAN
BgkqhkiG9w0BAQsFAAOCAQEAl/PlwMZqJhWklofVo/Dvrr7bOI49G53Fv7ys/yKT
u6bTWlbsjqxcPH4CH50FSmyGlFoVNPspGO28cR8+QMRQcLb97ojqkgvzwAfGJCXB
JMBSbAawtp2T3IAg0cRyDIc+jwQfA7ja0Crtl7kWwQJ2Ke9Fgz09lQbWWcGd+45T
Ug8e4G6Gy94l6l3jsru44D7rPUksmXvgEV4bfoTmdVSmqqsdny14VsL2JbF5UQ50
E09u0MQ3Sy6raWYN9JxFCj1wzfcv5UpJlVnGtR0NyvoLioZQMZNKk3WYIoMX2/og
0ndVRQrh3sTYJKaFZaci4t2tH0lqhDF2EvGn50oyy2vsHw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:53 2025 by rpki-client