Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
File:                     34352e3136302e32382e302f32322d3232203d3e20323636383732.roa (raw, json)
Hash identifier:          eMTF6PwJOh7APoTdLxBNpQXqsFOy8l2mwGjfp2twq0o=
Subject key identifier:   EE:09:9B:FB:1A:11:7B:E8:2E:E8:9F:19:3B:78:B2:C1:AB:E1:3D:13
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       6DC4894396F9E466607F2382C952F02EF196FE57
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
Signing time:             Tue 04 Feb 2025 18:38:13 +0000
ROA not before:           Tue 04 Feb 2025 18:33:13 +0000
ROA not after:            Tue 03 Feb 2026 18:38:13 +0000
asID:                     266872
IP address blocks:        45.160.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:89:43:96:f9:e4:66:60:7f:23:82:c9:52:f0:2e:f1:96:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Feb  4 18:33:13 2025 GMT
            Not After : Feb  3 18:38:13 2026 GMT
        Subject: CN=EE099BFB1A117BE82EE89F193B78B2C1ABE13D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:8d:cc:72:1c:d1:f6:b5:89:f7:2e:40:c5:
                    59:b7:87:b3:aa:c5:11:05:76:0e:2f:05:10:65:70:
                    09:49:6b:8f:02:22:5f:5f:48:99:ba:d3:6a:0f:e0:
                    4f:29:2c:d5:80:fc:80:d3:f5:9b:e2:25:21:f2:61:
                    a6:fb:81:df:8f:0e:d4:fe:d5:44:ac:37:de:d4:7b:
                    6d:b3:50:05:5e:50:97:92:49:cd:7c:77:1a:ca:0b:
                    e1:f2:35:30:f5:67:94:07:e5:4b:b5:47:b0:21:97:
                    af:bc:8b:aa:79:a7:1e:cf:fb:31:57:aa:2f:55:f1:
                    e4:1a:02:9f:cc:5f:14:3e:3f:6a:f7:7f:81:91:94:
                    b9:c5:af:00:cc:48:47:fc:03:e0:ba:bc:7c:3e:00:
                    5f:da:72:d5:04:f6:53:c9:ca:a6:93:d5:3f:75:9d:
                    db:24:bd:0b:94:76:c2:de:6f:83:e6:ac:1e:b2:ee:
                    31:4a:a8:73:0e:b9:e3:7f:0b:a5:ee:b1:62:44:42:
                    60:fa:13:3c:79:75:66:db:73:ea:1b:c0:b7:9f:b1:
                    41:a8:a8:d9:77:62:82:ae:bc:5e:87:31:dc:79:7a:
                    b0:2b:d3:a4:0d:3e:0e:24:e2:d2:12:1a:62:ba:29:
                    a5:b4:0f:15:d0:bb:89:fa:fd:7a:40:b8:2e:34:ab:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:9B:FB:1A:11:7B:E8:2E:E8:9F:19:3B:78:B2:C1:AB:E1:3D:13
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:36:f1:e0:ce:91:df:6f:c1:35:91:e6:85:35:27:df:94:
         2d:52:3d:e6:f7:1d:ea:e0:6d:58:e7:86:20:e3:fa:1e:17:45:
         fa:f9:c6:ec:d5:cb:04:4c:c0:70:c9:3a:71:92:02:d2:b1:e8:
         39:e2:51:fb:1f:01:5c:73:7c:82:ec:68:c5:27:20:0c:4e:32:
         20:7e:a6:c1:27:b0:1c:2b:8b:3c:78:a7:bb:91:81:4b:95:8d:
         0d:e7:d7:5b:c0:28:0c:c5:a5:e1:0b:df:ed:f7:0e:82:ce:73:
         da:07:81:05:58:77:1f:be:01:34:ea:67:8d:6b:bd:f2:60:a2:
         ad:37:d2:2e:12:3b:67:47:ec:74:8f:7f:2f:3f:33:1c:58:dd:
         41:e8:61:cd:d0:5c:e7:33:d9:4e:ee:27:b1:b4:25:22:63:8c:
         a6:15:d8:4f:99:f4:5f:8a:c4:6a:39:91:da:5b:bd:97:82:70:
         6d:1a:2e:a5:79:c2:af:57:1e:6b:ff:b0:51:5d:eb:c7:1f:00:
         54:ae:ee:64:8d:d1:9e:c6:26:3b:ca:a0:fe:b5:ea:8d:ec:93:
         26:f9:b5:95:f5:a0:3e:63:44:ee:28:28:1e:ad:de:eb:05:20:
         47:20:dc:5a:6b:ce:62:ee:9d:cf:80:4f:b2:e0:36:6a:79:46:
         b2:a0:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net