Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa
File:                     34352e3139302e31352e302f32342d3234203d3e20323639393132.roa (raw, json)
Hash identifier:          VOY3WxA3/ZMUhcHCyOqDQ6+RoaN8Pv2brzjMt6g7rtM=
Subject key identifier:   F6:C5:27:28:B1:C3:4D:32:80:48:6D:E3:03:FD:E6:1B:BE:07:D3:56
Certificate issuer:       /CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
Certificate serial:       089505CE6BFF834B129ABA52E2FB786FAEAEB1B1
Authority key identifier: 46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     269912
IP address blocks:        45.190.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:95:05:ce:6b:ff:83:4b:12:9a:ba:52:e2:fb:78:6f:ae:ae:b1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=F6C52728B1C34D3280486DE303FDE61BBE07D356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:be:53:a2:30:e9:90:54:42:3f:00:a4:4f:
                    ff:5c:2a:05:c3:b0:f6:6e:f8:15:33:ee:50:55:30:
                    e2:cc:20:0c:ee:d6:55:39:c0:a1:88:42:2d:33:32:
                    0b:f7:1d:6d:78:65:96:33:e6:a0:a8:dc:77:2f:33:
                    5b:aa:25:ec:b1:a2:18:7a:c3:fa:90:4b:81:3d:fc:
                    16:b2:75:e3:da:34:ab:4d:9b:f1:d1:71:46:97:91:
                    a5:dc:1b:be:8c:67:6b:18:4e:cd:16:7b:1d:d3:bc:
                    2b:c6:78:90:22:8f:e0:fd:04:30:bb:81:14:a7:10:
                    41:47:e5:d6:2d:99:f0:88:08:7a:c5:d8:03:2e:33:
                    6b:2f:c8:fd:01:bf:34:83:1f:73:ed:c6:91:3f:e6:
                    bc:c4:07:8c:06:28:84:3e:2d:27:af:8c:d7:27:ca:
                    f8:83:37:c9:9d:86:27:be:98:c1:40:33:83:95:8b:
                    f8:b9:33:2e:33:33:c6:92:d3:21:60:20:eb:d6:2c:
                    c1:e3:9d:47:77:ff:07:42:e6:45:71:ca:3f:a2:f9:
                    c2:48:56:c2:a7:9d:86:ef:ef:e2:31:34:22:90:04:
                    87:17:4c:b6:3d:c8:7b:d1:98:5a:95:5c:14:24:17:
                    49:4c:09:fa:24:ac:d0:3f:2f:a6:72:3f:1f:84:2a:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:27:28:B1:C3:4D:32:80:48:6D:E3:03:FD:E6:1B:BE:07:D3:56
            X509v3 Authority Key Identifier:
                keyid:46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/34352e3139302e31352e302f32342d3234203d3e20323639393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:10:b7:cf:8e:b4:92:9b:46:d0:e6:ba:7d:7e:c9:b5:d5:
         85:a0:ee:be:c3:e6:29:f8:9e:a9:f6:02:66:60:22:fb:74:5a:
         02:74:d8:f7:8a:e2:e8:a5:2b:bd:0c:9d:da:01:ad:16:c7:8c:
         b6:23:20:d6:d0:32:15:72:41:23:79:bf:32:e1:f9:77:27:b1:
         d2:28:13:b8:71:9b:22:ca:b9:e9:a9:af:cf:0b:cc:8d:f8:d9:
         c0:45:c7:2e:3a:c7:f1:bf:4a:a1:08:48:4c:35:71:e3:bb:5c:
         29:59:b5:4c:2b:a7:63:59:9a:4e:51:2d:21:4a:59:a9:6f:38:
         87:7a:c2:1b:ee:4d:42:a0:cd:60:78:cb:ba:8e:36:22:c9:98:
         f9:27:bf:d6:3a:6b:99:42:5a:30:9d:f5:7c:6e:b3:d3:de:6c:
         ae:b2:2e:51:67:40:90:72:17:a6:1b:91:c5:61:e8:8b:3a:4b:
         6a:42:04:da:48:32:ed:7d:37:34:fb:13:67:84:29:f4:ef:78:
         8c:64:05:2b:73:39:5d:08:00:99:60:87:c8:b0:7f:b1:04:22:
         b6:eb:ae:be:29:ab:4b:69:18:14:6b:38:b3:75:e8:d1:20:f4:
         f9:e6:f4:ba:23:65:7a:2a:12:24:a1:36:b7:0b:c2:9b:e0:1c:
         24:57:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:40 2024 by rpki-client on console-fra.rpki-client.org