Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa
File:                     34352e3136302e32382e302f32332d3233203d3e20323636383732.roa (raw, json)
Hash identifier:          uGLqtJjbYSLR0YKpkG3HkIzxFq6WO9rWYw995qKk2XM=
Subject key identifier:   5D:A1:CD:01:B9:44:F5:69:4B:9E:29:BA:A9:1B:45:D2:42:4D:00:58
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       406D1E4937E02F5C250C975FA3CDDB06F3976F26
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa
Signing time:             Tue 04 Feb 2025 18:38:12 +0000
ROA not before:           Tue 04 Feb 2025 18:33:12 +0000
ROA not after:            Tue 03 Feb 2026 18:38:12 +0000
asID:                     266872
IP address blocks:        45.160.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6d:1e:49:37:e0:2f:5c:25:0c:97:5f:a3:cd:db:06:f3:97:6f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Feb  4 18:33:12 2025 GMT
            Not After : Feb  3 18:38:12 2026 GMT
        Subject: CN=5DA1CD01B944F5694B9E29BAA91B45D2424D0058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2f:26:89:ef:3f:5b:07:26:9f:e6:23:9d:95:
                    f4:9a:28:40:e3:bc:2d:87:94:c9:2d:22:08:93:e5:
                    9a:f6:2e:b9:83:72:08:f6:12:d6:93:fd:8e:23:e8:
                    fd:f8:4c:2a:0e:fa:91:e9:5b:f3:1a:37:e9:a8:bf:
                    cb:31:54:60:d5:bd:52:d6:4d:24:8a:b1:84:20:ec:
                    97:87:4e:3b:2c:b2:a2:35:20:03:50:87:ff:0b:9d:
                    7e:19:ed:bc:0c:83:7f:79:8d:c3:21:79:91:84:b5:
                    80:94:fd:28:f1:c8:a6:9c:4f:e3:61:57:33:92:fc:
                    34:ee:36:65:56:e1:99:45:a3:af:dd:12:69:64:68:
                    1f:2a:bb:eb:dc:42:df:9f:35:74:82:dd:df:5d:03:
                    e1:f9:b0:15:ab:17:10:72:b5:44:50:f2:dc:aa:69:
                    00:a8:2a:6d:85:47:3d:9e:c0:b5:0e:80:5d:6c:07:
                    30:f4:22:8d:dd:93:29:88:f6:9e:7b:f7:4c:e4:69:
                    64:c1:ee:38:ef:c8:0c:bb:ea:2d:da:e5:b4:0f:65:
                    4b:2b:61:c5:b6:88:de:5f:75:6e:df:c9:cd:46:18:
                    4e:97:31:24:49:31:99:27:f5:16:5b:e7:87:9f:90:
                    30:b5:6c:1d:36:86:fb:b6:f1:92:8e:54:e5:b3:50:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:CD:01:B9:44:F5:69:4B:9E:29:BA:A9:1B:45:D2:42:4D:00:58
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32332d3233203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:51:e2:ef:59:0b:03:6f:6b:4f:29:d8:18:a7:da:09:d1:
         ff:11:d6:b2:4e:4a:ff:70:ea:d8:18:fa:0f:64:57:8c:9e:a4:
         21:24:f3:61:6e:8f:75:45:70:11:d0:d2:df:62:54:a1:4c:17:
         60:30:48:ef:f6:28:49:38:76:27:2b:77:da:a6:1b:8a:a3:9d:
         c6:38:a2:35:3e:67:ab:c3:b8:0b:2b:43:01:bd:01:8a:f6:5d:
         55:28:e3:c5:3f:d0:4b:56:c4:e5:95:50:66:3c:e2:62:6d:5d:
         d9:ef:ec:20:0a:e2:98:28:25:31:83:66:35:4b:0a:08:37:47:
         d0:16:95:5b:d7:5e:2f:ad:43:ae:e6:76:21:4c:09:e8:e3:59:
         46:60:de:5c:51:62:24:f0:55:80:ca:35:a0:ea:87:ab:b7:4c:
         4b:10:d5:38:5f:6a:da:5a:26:8f:f3:0c:42:44:a8:39:b6:73:
         e6:ce:c7:ef:0d:97:68:29:4e:84:8d:f0:a6:58:43:17:35:33:
         bc:63:70:1a:5b:70:b8:53:09:a1:fc:5e:27:24:16:94:51:d2:
         9d:7b:1f:9d:46:2e:ae:98:eb:39:14:21:f6:6d:1f:ec:9a:8e:
         55:6c:18:84:63:04:b7:5e:2b:80:92:1f:30:43:10:60:55:8f:
         34:26:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:58:26 2025 by rpki-client