Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa
File:                     34352e3136302e32382e302f32332d3233203d3e20323636383732.roa (raw, json)
Hash identifier:          mGJdbZqfNiphArMXqFEs2AXngejk/EegBse83Lp8iyM=
Subject key identifier:   8C:F3:1F:CA:EA:FC:42:13:C5:07:1E:62:1A:C4:39:24:B0:8C:81:B7
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       32DE47435B1B986BB62B5B91BC0B812EC5D823D0
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa
Signing time:             Tue 05 Mar 2024 18:07:33 +0000
ROA not before:           Tue 05 Mar 2024 18:02:33 +0000
ROA not after:            Tue 04 Mar 2025 18:07:33 +0000
asID:                     266872
IP address blocks:        45.160.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:47:43:5b:1b:98:6b:b6:2b:5b:91:bc:0b:81:2e:c5:d8:23:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Mar  5 18:02:33 2024 GMT
            Not After : Mar  4 18:07:33 2025 GMT
        Subject: CN=8CF31FCAEAFC4213C5071E621AC43924B08C81B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:12:c4:77:3b:df:b4:3b:02:50:fd:1b:5e:
                    05:68:09:b2:1c:16:fa:08:1f:37:d1:5d:fd:55:33:
                    47:8f:6a:d6:e5:d1:56:6c:98:d6:00:ef:76:fb:6b:
                    dd:25:4c:4b:59:ea:02:39:4a:19:4a:96:92:f7:11:
                    e7:60:75:a8:4d:e5:27:e3:4b:83:81:4c:e2:e9:3f:
                    3a:e0:84:0a:42:6d:db:d0:5d:5c:98:74:94:d3:09:
                    00:04:b0:65:73:0d:67:75:96:8b:92:5f:53:00:b7:
                    c3:b7:92:06:67:a7:0e:7d:3e:fc:56:94:47:24:9e:
                    fa:2e:e8:2f:fe:99:84:13:c4:b1:3c:86:90:dd:1a:
                    54:e7:2d:7f:6f:4c:43:32:69:f0:c1:a9:28:23:9f:
                    47:ce:47:cc:9a:a8:bf:6a:0c:85:39:fd:ae:57:54:
                    7f:b6:1d:49:99:56:91:79:81:4b:93:f8:fb:dc:15:
                    90:60:80:8a:d3:7b:7d:cb:40:b8:bb:fc:c8:66:23:
                    60:3d:6e:c8:9e:69:f2:3c:77:bc:2e:0b:54:f4:b0:
                    b5:62:78:ae:60:bf:5e:08:49:c3:8b:4b:db:25:a5:
                    34:ad:ea:1b:6d:ec:c1:4b:a4:41:36:99:b6:a3:a0:
                    fb:61:c1:5f:e8:93:30:17:6a:ce:f1:30:15:fe:c5:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:1F:CA:EA:FC:42:13:C5:07:1E:62:1A:C4:39:24:B0:8C:81:B7
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:5d:7d:9d:80:ea:35:8a:26:e5:0d:6f:a6:86:d5:9b:90:
         c3:48:97:c0:b0:bc:45:3e:1d:44:74:94:fa:e3:ca:38:3b:6c:
         49:16:a1:cd:f7:01:05:a6:f1:01:30:62:52:dc:cb:9f:cd:e0:
         f8:85:ca:7b:48:98:3b:38:de:96:68:77:a5:4a:f1:63:c3:d8:
         25:6e:bd:61:15:88:cd:6f:90:89:04:41:dc:03:2e:d8:72:81:
         2c:02:78:d5:c3:02:c4:ce:f1:7c:72:c5:cd:5d:d8:58:9d:1c:
         1f:d2:b6:9e:2f:4a:49:ca:2a:35:d8:9e:47:2d:c8:c9:db:2b:
         df:b7:40:21:43:a9:05:83:57:64:26:18:75:8a:c7:bd:ea:95:
         28:c5:f5:1c:13:9b:c2:11:1f:80:f9:41:94:c2:2b:28:77:a8:
         ab:2c:b1:e9:34:15:5a:82:97:99:a4:d1:43:4b:f3:55:89:7d:
         80:28:45:e5:89:04:a0:81:b8:d2:e4:af:4b:72:aa:f6:f5:ee:
         c4:33:ef:1a:e3:98:bc:e6:28:99:f1:c5:15:56:2c:89:c2:11:
         d8:16:9f:72:d1:aa:25:2c:f3:98:0c:cc:f9:40:72:a9:a2:cd:
         9c:c9:07:8e:11:65:04:55:0c:c3:c3:ac:8d:ec:bd:78:a1:19:
         7a:78:41:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMt5HQ1sbmGu2K1uRvAuBLsXYI9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAwOTIyRDhCNTlBQzMyNkREMTM4RkVENTFCQzUwRDc1
OTBFMUYwQTAeFw0yNDAzMDUxODAyMzNaFw0yNTAzMDQxODA3MzNaMDMxMTAvBgNV
BAMTKDhDRjMxRkNBRUFGQzQyMTNDNTA3MUU2MjFBQzQzOTI0QjA4QzgxQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivBLEdzvftDsCUP0bXgVoCbIc
FvoIHzfRXf1VM0ePatbl0VZsmNYA73b7a90lTEtZ6gI5ShlKlpL3EedgdahN5Sfj
S4OBTOLpPzrghApCbdvQXVyYdJTTCQAEsGVzDWd1louSX1MAt8O3kgZnpw59PvxW
lEcknvou6C/+mYQTxLE8hpDdGlTnLX9vTEMyafDBqSgjn0fOR8yaqL9qDIU5/a5X
VH+2HUmZVpF5gUuT+PvcFZBggIrTe33LQLi7/MhmI2A9bsieafI8d7wuC1T0sLVi
eK5gv14IScOLS9slpTSt6htt7MFLpEE2mbajoPthwV/okzAXas7xMBX+xc8FAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjPMfyur8QhPFBx5iGsQ5JLCMgbcwHwYDVR0j
BBgwFoAUkAki2LWawybdE4/tUbxQ11kOHwowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjYxNDk4NDg5MjhFQjJBNzVBRkQ0MDVBM0IxM0EyNUEy
QkZGM0VGQjA1RDFBQThEMEU3RDg2OTUxOERGOEY4LzAvOTAwOTIyRDhCNTlBQzMy
NkREMTM4RkVENTFCQzUwRDc1OTBFMUYwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDA5MjJEOEI1OUFDMzI2REQx
MzhGRUQ1MUJDNTBENzU5MEUxRjBBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY2MTQ5ODQ4OTI4RUIyQTc1QUZENDA1QTNCMTNBMjVBMkJGRjNFRkIw
NUQxQUE4RDBFN0Q4Njk1MThERjhGOC8wLzM0MzUyZTMxMzYzMDJlMzIzODJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM4MzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2gHDAN
BgkqhkiG9w0BAQsFAAOCAQEAiyBdfZ2A6jWKJuUNb6aG1ZuQw0iXwLC8RT4dRHSU
+uPKODtsSRahzfcBBabxATBiUtzLn83g+IXKe0iYOzjelmh3pUrxY8PYJW69YRWI
zW+QiQRB3AMu2HKBLAJ41cMCxM7xfHLFzV3YWJ0cH9K2ni9KScoqNdieRy3Iydsr
37dAIUOpBYNXZCYYdYrHveqVKMX1HBObwhEfgPlBlMIrKHeoqyyx6TQVWoKXmaTR
Q0vzVYl9gChF5YkEoIG40uSvS3Kq9vXuxDPvGuOYvOYomfHFFVYsicIR2BafctGq
JSzzmAzM+UByqaLNnMkHjhFlBFUMw8Osjey9eKEZenhBrw==
-----END CERTIFICATE-----
Generated at Tue May 21 02:52:18 2024 by rpki-client on console-fra.rpki-client.org