Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33312e302f32342d3234203d3e20323636383732.roa
File:                     34352e3136302e33312e302f32342d3234203d3e20323636383732.roa (raw, json)
Hash identifier:          91XYot/OD02HqwtmEx9O19S8uldwSGXgYkxkekajyZU=
Subject key identifier:   5D:DF:5B:BB:7F:94:F8:BC:94:D5:F3:64:82:C3:F4:44:D4:F3:B8:2D
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       52FF1A8C7E438ACCA6379C7975A5C195213BB926
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33312e302f32342d3234203d3e20323636383732.roa
Signing time:             Tue 05 Mar 2024 18:07:34 +0000
ROA not before:           Tue 05 Mar 2024 18:02:34 +0000
ROA not after:            Tue 04 Mar 2025 18:07:34 +0000
asID:                     266872
IP address blocks:        45.160.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:1a:8c:7e:43:8a:cc:a6:37:9c:79:75:a5:c1:95:21:3b:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Mar  5 18:02:34 2024 GMT
            Not After : Mar  4 18:07:34 2025 GMT
        Subject: CN=5DDF5BBB7F94F8BC94D5F36482C3F444D4F3B82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:47:1a:a6:e7:39:43:0e:8b:3a:05:c8:e5:
                    56:ef:1f:db:14:6a:88:5a:52:16:40:eb:5b:7c:46:
                    da:13:ed:04:21:bb:55:98:59:1b:89:cc:cb:00:f8:
                    36:cb:d2:e7:cf:08:46:f4:7f:b9:1d:97:a6:99:58:
                    b8:b2:5f:bb:ed:d5:de:4e:8c:89:fe:89:89:89:a4:
                    ba:12:64:4f:41:0f:16:7a:bc:d4:28:3c:22:b5:f5:
                    5b:bd:79:19:06:47:24:96:b5:97:95:95:74:14:c5:
                    78:67:a8:78:97:31:cc:e3:45:2a:4f:76:af:c2:49:
                    ee:95:89:14:a7:93:8c:70:22:36:b6:bc:a5:72:29:
                    46:f8:fe:66:80:01:9b:a2:06:2c:b2:85:46:26:4e:
                    b4:61:76:a9:bd:5d:ba:bf:54:be:28:a1:80:a7:4c:
                    19:9c:a9:e5:3d:f1:12:68:a2:e4:93:d6:6e:ab:0d:
                    63:b3:1e:23:16:7e:51:a2:0f:7c:40:69:c6:c5:3f:
                    45:b8:02:65:aa:1a:59:5e:25:ba:1f:6e:4f:25:c5:
                    64:0e:26:31:06:0e:07:44:ef:b5:94:df:04:1f:6a:
                    fe:c9:f4:ab:4c:e4:af:76:3a:6e:08:b4:b1:9d:db:
                    d3:d8:a6:0a:63:66:f4:34:9e:89:e4:28:b3:12:dd:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DF:5B:BB:7F:94:F8:BC:94:D5:F3:64:82:C3:F4:44:D4:F3:B8:2D
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e33312e302f32342d3234203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:d7:bf:e6:4a:01:93:46:87:c8:32:b3:13:fd:e5:a8:54:b7:
         98:d0:76:f8:1e:35:e9:95:40:d5:71:62:15:b4:03:e2:88:d4:
         58:14:69:d2:ee:73:76:85:f0:d5:86:3a:80:84:10:7c:fb:1a:
         87:55:4a:f1:ae:37:fa:4d:d5:d1:21:8a:78:33:2d:54:77:8d:
         85:c7:dc:15:ed:1e:6e:ef:f4:a5:51:c3:ab:07:36:fd:11:07:
         4d:7e:b8:42:6a:02:ad:cf:4b:d1:dd:7d:bf:f7:f7:0d:ba:01:
         d2:71:c0:fc:98:95:08:cd:00:d2:3e:50:d7:17:aa:42:06:e8:
         78:24:22:be:38:16:7e:c8:43:db:7f:cd:1d:db:3d:23:d7:e2:
         ce:26:10:60:6d:e4:4d:ef:5c:b3:07:ee:55:b4:59:ed:14:72:
         9b:5d:94:56:5f:9f:e3:21:6d:ff:01:0f:12:68:ae:e0:c6:be:
         21:2a:e9:fc:1e:6a:a1:ec:88:f5:15:11:b8:29:31:cf:9b:84:
         b0:4a:21:b2:65:3f:9a:ad:a6:20:2a:f6:c9:50:97:14:cd:85:
         72:1d:c9:d6:e6:cf:f0:5d:fb:5e:46:b3:a4:bd:36:5c:10:ca:
         e4:32:87:76:8b:00:54:a2:8e:ce:1b:8b:98:e4:38:63:42:af:
         23:6a:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:37:37 2024 by rpki-client on console-ams.rpki-client.org