Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33302e302f32342d3234203d3e20323636383732.roa
File:                     34352e3136302e33302e302f32342d3234203d3e20323636383732.roa (raw, json)
Hash identifier:          lfBBmXnfKcmMwL9vA0L5TbD04r8Z5Rdt8hya+uwSzXo=
Subject key identifier:   5E:22:69:54:63:6D:C3:F4:ED:82:8A:79:47:DA:5D:58:C6:16:A7:65
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       28C69F6CABFDB8DF2CBAC0AAB74BB9A0CEB15195
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33302e302f32342d3234203d3e20323636383732.roa
Signing time:             Tue 05 Mar 2024 18:07:34 +0000
ROA not before:           Tue 05 Mar 2024 18:02:34 +0000
ROA not after:            Tue 04 Mar 2025 18:07:34 +0000
asID:                     266872
IP address blocks:        45.160.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c6:9f:6c:ab:fd:b8:df:2c:ba:c0:aa:b7:4b:b9:a0:ce:b1:51:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Mar  5 18:02:34 2024 GMT
            Not After : Mar  4 18:07:34 2025 GMT
        Subject: CN=5E226954636DC3F4ED828A7947DA5D58C616A765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:bd:4f:e8:53:d8:5c:22:f6:82:4a:40:89:
                    dc:e1:03:bc:87:e7:00:48:f4:e1:4e:8c:bf:35:4a:
                    71:1a:b2:d7:e5:65:80:fb:dd:00:08:7d:aa:1b:f1:
                    a8:d9:11:b8:10:9c:71:5d:34:c2:c8:35:af:6c:c2:
                    3b:8f:44:a2:ab:5b:63:47:fd:5e:68:7f:17:bb:c0:
                    d4:8c:70:24:87:db:05:9f:c7:2c:ec:05:f4:23:85:
                    7e:33:2c:87:bc:60:f5:17:68:71:8f:bb:1b:de:75:
                    5c:5f:81:c9:32:26:2a:aa:98:d9:23:1f:d2:52:d7:
                    13:f8:c7:2e:2b:16:84:ab:25:03:7e:01:b6:75:7d:
                    12:22:81:a7:a7:25:d4:4d:0d:0f:9d:5b:00:b3:52:
                    82:78:61:ce:11:dd:25:22:69:84:4f:66:ab:a1:12:
                    60:c5:90:1f:9d:be:42:cc:c4:23:ba:d1:70:55:ec:
                    fc:06:fd:c4:89:f3:77:b5:49:bc:0c:34:e7:59:bc:
                    ac:72:bf:97:b4:da:3d:99:23:d3:eb:2f:14:e0:8f:
                    d3:c3:6a:9e:64:9f:53:5b:52:ad:ca:ff:c3:75:a5:
                    f9:92:9a:ed:c7:79:7a:21:7b:13:d3:00:5b:a9:f3:
                    8e:f8:7b:7a:82:32:dd:8f:b9:b3:e7:df:a6:ea:8b:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:69:54:63:6D:C3:F4:ED:82:8A:79:47:DA:5D:58:C6:16:A7:65
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33302e302f32342d3234203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:bf:e6:4e:cc:90:f4:ad:36:f6:3d:9a:2b:a8:b9:66:58:
         81:38:cc:a2:d2:a3:d7:06:55:29:93:3d:3e:7e:69:9c:b0:9f:
         19:5f:d1:4d:03:78:d0:f3:99:85:b2:c3:58:53:ff:b5:20:68:
         f3:ad:08:4b:96:23:90:a1:2d:44:d8:65:f5:1c:7e:c2:06:b3:
         22:82:83:ae:c6:b1:ef:81:4c:fc:9e:4f:61:a1:04:14:ca:fe:
         ed:46:77:bd:a2:e9:ed:3d:ea:bc:b8:02:8e:a6:90:08:61:d0:
         11:3d:c9:67:92:8a:81:a4:65:e2:42:ac:1e:dd:47:1b:68:ee:
         3b:71:59:a8:7b:8b:e8:31:62:ea:1d:75:12:3b:7d:84:e3:f0:
         9f:58:be:37:dd:28:60:e6:a9:2e:33:a3:c8:ec:f6:4f:72:6d:
         50:a8:fd:db:e0:7a:f7:e3:03:d1:01:7c:32:2c:6b:8c:cc:f2:
         c2:e0:86:ef:af:4a:b9:b7:a3:a9:cb:f4:77:a2:ac:1f:40:de:
         2b:ea:16:7f:2e:dc:16:3d:55:2b:f0:ce:34:c2:f1:8c:ae:f8:
         28:be:6f:c0:60:08:8a:71:c9:d3:95:7e:93:de:12:f8:a8:df:
         50:46:74:c2:2c:3b:a6:3d:b6:52:d8:35:1e:65:14:bf:d2:72:
         76:87:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:52:18 2024 by rpki-client on console-fra.rpki-client.org