Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
File:                     34352e3136302e32382e302f32322d3232203d3e20323636383732.roa (raw, json)
Hash identifier:          Ri4MN88urQesxHXJIQdOVmGx6NbgmZwpctCAz/mt+xo=
Subject key identifier:   16:C2:3B:DC:A6:EA:EB:F7:A6:DD:C1:D8:01:01:45:2B:15:8F:69:37
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       7349D00FDBE1B33AD32B2D7CF12CCC5C9FF15CC2
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
Signing time:             Tue 05 Mar 2024 18:07:34 +0000
ROA not before:           Tue 05 Mar 2024 18:02:34 +0000
ROA not after:            Tue 04 Mar 2025 18:07:34 +0000
asID:                     266872
IP address blocks:        45.160.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:49:d0:0f:db:e1:b3:3a:d3:2b:2d:7c:f1:2c:cc:5c:9f:f1:5c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Mar  5 18:02:34 2024 GMT
            Not After : Mar  4 18:07:34 2025 GMT
        Subject: CN=16C23BDCA6EAEBF7A6DDC1D80101452B158F6937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:2f:0d:a5:49:01:f8:b7:dd:53:ef:ed:59:
                    20:ec:8f:e3:92:48:88:6a:74:99:c1:a3:3d:2f:22:
                    21:00:03:ff:b0:29:ad:64:60:01:8d:b1:af:c8:d0:
                    f2:6d:ef:81:fe:4b:e6:48:c0:44:3d:55:79:fe:1a:
                    60:3e:0b:12:32:c8:34:43:db:9f:7b:ff:c3:2f:6c:
                    1d:14:a3:c7:16:07:df:a9:46:ce:b5:99:7b:ea:ff:
                    32:6a:46:ba:b0:59:85:35:8f:3b:f9:31:fc:ea:32:
                    6f:5a:17:5a:c0:c3:e0:69:7e:47:33:de:55:e4:6e:
                    34:51:b4:76:a8:f2:c1:e7:49:5a:73:4f:ad:d1:74:
                    f9:e2:36:5b:c3:14:bb:87:af:3c:db:04:16:91:ac:
                    85:b9:36:29:90:36:de:12:c4:7a:4c:63:e8:e1:87:
                    c3:e1:bb:7c:fe:4f:45:6b:38:81:3d:96:66:33:55:
                    20:55:7b:71:9e:9b:e1:da:55:2a:f7:ea:30:ff:7b:
                    e7:42:1e:a0:29:53:38:36:47:73:a4:39:6a:64:9b:
                    e3:c9:32:99:04:31:b4:f8:16:3a:a6:b1:eb:f3:eb:
                    0d:2c:38:92:98:5e:0b:f7:93:20:e7:a2:b1:40:0d:
                    d0:7e:58:8f:6f:e7:68:15:bd:01:55:ef:63:de:e1:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C2:3B:DC:A6:EA:EB:F7:A6:DD:C1:D8:01:01:45:2B:15:8F:69:37
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:26:30:f2:20:44:3b:94:15:cb:2e:06:4b:19:89:d8:cf:87:
         e1:9f:2c:5e:3f:7b:d9:17:49:c7:11:f9:8d:ca:2e:5b:bd:46:
         bf:bd:79:f1:13:3f:e6:1a:16:51:dd:2f:71:47:f6:2d:80:c7:
         6a:ec:cc:ea:04:99:e4:32:f8:19:8b:87:86:dd:cd:ca:01:0f:
         da:a1:28:7a:5f:a8:c4:ac:1d:48:6a:c8:d9:a1:09:8c:38:d4:
         66:b3:71:25:d5:88:36:cf:94:c9:2c:83:55:6a:8b:48:a9:8f:
         9e:84:82:8c:a9:5c:43:2b:f4:85:5a:91:02:eb:fd:43:9c:89:
         a9:94:29:30:1f:9e:d0:62:3d:32:a8:3c:e8:33:e0:fb:ea:52:
         52:8e:48:8b:58:07:d0:e0:b3:9b:6b:79:56:6c:3a:74:17:b9:
         bb:21:08:df:0d:49:d6:28:3e:4c:61:5e:b2:65:20:0a:2a:ce:
         90:08:a1:67:08:0e:01:ed:e1:20:a2:81:d8:e8:e1:76:a6:3a:
         85:ee:c6:f4:a3:6a:d1:78:99:ed:4c:e6:21:9d:f7:1b:02:10:
         c8:11:64:ca:96:d2:79:6e:ce:ea:91:e7:c7:cf:44:2d:21:fc:
         e9:73:ab:9b:04:e1:22:4d:d7:16:48:b9:0b:96:9c:36:8b:79:
         ab:6a:a9:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUc0nQD9vhszrTKy188SzMXJ/xXMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAwOTIyRDhCNTlBQzMyNkREMTM4RkVENTFCQzUwRDc1
OTBFMUYwQTAeFw0yNDAzMDUxODAyMzRaFw0yNTAzMDQxODA3MzRaMDMxMTAvBgNV
BAMTKDE2QzIzQkRDQTZFQUVCRjdBNkREQzFEODAxMDE0NTJCMTU4RjY5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Di8NpUkB+LfdU+/tWSDsj+OS
SIhqdJnBoz0vIiEAA/+wKa1kYAGNsa/I0PJt74H+S+ZIwEQ9VXn+GmA+CxIyyDRD
2597/8MvbB0Uo8cWB9+pRs61mXvq/zJqRrqwWYU1jzv5MfzqMm9aF1rAw+Bpfkcz
3lXkbjRRtHao8sHnSVpzT63RdPniNlvDFLuHrzzbBBaRrIW5NimQNt4SxHpMY+jh
h8Phu3z+T0VrOIE9lmYzVSBVe3Gem+HaVSr36jD/e+dCHqApUzg2R3OkOWpkm+PJ
MpkEMbT4Fjqmsevz6w0sOJKYXgv3kyDnorFADdB+WI9v52gVvQFV72Pe4WxbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFsI73Kbq6/em3cHYAQFFKxWPaTcwHwYDVR0j
BBgwFoAUkAki2LWawybdE4/tUbxQ11kOHwowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjYxNDk4NDg5MjhFQjJBNzVBRkQ0MDVBM0IxM0EyNUEy
QkZGM0VGQjA1RDFBQThEMEU3RDg2OTUxOERGOEY4LzAvOTAwOTIyRDhCNTlBQzMy
NkREMTM4RkVENTFCQzUwRDc1OTBFMUYwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDA5MjJEOEI1OUFDMzI2REQx
MzhGRUQ1MUJDNTBENzU5MEUxRjBBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY2MTQ5ODQ4OTI4RUIyQTc1QUZENDA1QTNCMTNBMjVBMkJGRjNFRkIw
NUQxQUE4RDBFN0Q4Njk1MThERjhGOC8wLzM0MzUyZTMxMzYzMDJlMzIzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM4MzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2gHDAN
BgkqhkiG9w0BAQsFAAOCAQEAVCYw8iBEO5QVyy4GSxmJ2M+H4Z8sXj972RdJxxH5
jcouW71Gv7158RM/5hoWUd0vcUf2LYDHauzM6gSZ5DL4GYuHht3NygEP2qEoel+o
xKwdSGrI2aEJjDjUZrNxJdWINs+UySyDVWqLSKmPnoSCjKlcQyv0hVqRAuv9Q5yJ
qZQpMB+e0GI9Mqg86DPg++pSUo5Ii1gH0OCzm2t5Vmw6dBe5uyEI3w1J1ig+TGFe
smUgCirOkAihZwgOAe3hIKKB2OjhdqY6he7G9KNq0XiZ7UzmIZ33GwIQyBFkypbS
eW7O6pHnx89ELSH86XOrmwThIk3XFki5C5acNot5q2qpGA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org