Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
File:                     34352e3136302e32382e302f32322d3232203d3e20323636383732.roa (raw, json)
Hash identifier:          GQgVO/jU5/m0JW0vKRn24s+wk+1F4Nzlcys8oBNkvAU=
Subject key identifier:   A0:C8:0E:DE:02:4E:C4:E9:44:DF:A7:5A:59:E1:0C:12:4D:05:33:C1
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       6386CCAE6D0BAC075E2BE875D98E2B0FA6E84FC7
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa
Signing time:             Tue 28 Apr 2026 14:25:02 +0000
ROA not before:           Tue 28 Apr 2026 14:20:02 +0000
ROA not after:            Tue 27 Apr 2027 14:25:02 +0000
asID:                     266872
IP address blocks:        45.160.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 18 May 2026 06:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:86:cc:ae:6d:0b:ac:07:5e:2b:e8:75:d9:8e:2b:0f:a6:e8:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Apr 28 14:20:02 2026 GMT
            Not After : Apr 27 14:25:02 2027 GMT
        Subject: CN=A0C80EDE024EC4E944DFA75A59E10C124D0533C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:ff:90:02:42:cf:82:92:13:9d:08:8b:ef:
                    c4:a2:8e:7d:95:01:3b:6c:de:ab:93:8c:00:bc:ca:
                    32:0c:0c:06:d1:76:11:75:7c:cd:04:c9:9b:05:34:
                    65:88:cf:ca:5c:18:26:ee:51:45:11:cb:75:29:99:
                    a2:da:07:f8:e1:5d:81:74:f0:c5:3d:37:66:24:e4:
                    48:03:44:e1:78:61:f1:5b:58:a5:14:c1:2f:c7:f6:
                    70:33:ac:b0:e1:03:f2:39:1a:ee:d1:89:3d:c5:bf:
                    b6:62:8d:7b:b0:18:07:e7:d1:a1:ef:89:49:93:3a:
                    2d:ec:25:44:58:b4:6e:86:50:33:f6:d4:d7:7d:73:
                    08:28:18:f9:f7:f1:68:7f:7c:75:51:bd:62:8f:9d:
                    7a:bc:10:9b:f5:ca:bf:c6:76:d4:de:1e:9b:9d:5d:
                    b3:51:4a:d7:08:90:7f:b9:64:a0:89:80:34:6c:9a:
                    67:9c:69:91:ac:d4:25:c2:17:b1:92:0f:11:97:29:
                    2b:05:a2:29:a5:74:87:23:a6:36:55:e1:a0:01:ef:
                    b8:4f:eb:d2:44:21:fc:80:4a:6d:4d:11:f2:b0:8f:
                    0c:e8:d5:3c:7b:7e:c3:4e:56:3a:1a:a6:d2:10:ca:
                    18:b4:12:a8:97:ae:fe:53:bf:3a:42:ad:c0:b5:a9:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:0E:DE:02:4E:C4:E9:44:DF:A7:5A:59:E1:0C:12:4D:05:33:C1
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/34352e3136302e32382e302f32322d3232203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:91:c8:e5:8c:04:76:90:0d:56:89:0b:7b:47:20:d5:ab:4a:
         1f:97:b4:f5:5d:c1:d6:74:68:a4:61:ca:91:7e:fc:80:79:77:
         8a:0d:8e:0e:16:b8:49:97:81:95:93:11:1c:5e:72:c8:af:7c:
         12:2f:89:85:6b:a8:c5:9f:3d:c6:07:12:7b:07:e0:4b:c1:85:
         fa:c2:19:fa:4b:55:72:27:36:bc:77:26:f4:f9:d1:c1:8a:e9:
         d5:9c:a5:7a:cc:69:88:e0:e1:73:a8:ad:42:40:46:dd:ef:bf:
         35:0e:0e:0f:f7:79:69:40:9c:e7:9c:ca:a9:b3:ea:23:84:73:
         b7:5c:9b:41:69:94:59:96:a0:e3:a9:b3:0b:07:3e:f3:c0:72:
         39:fc:07:cf:bd:b2:e2:f5:54:1d:df:4e:56:d9:9b:d6:23:76:
         20:7f:19:5a:03:19:15:e3:29:bf:55:1e:c6:41:1b:f8:61:4a:
         36:32:c3:8d:4d:98:9b:f9:16:55:c9:86:24:e5:e0:28:37:a4:
         7f:ad:44:74:57:4f:c2:73:09:1d:7c:0f:dc:fc:40:12:9e:9b:
         39:05:c6:fd:de:b8:77:4d:f6:8a:f3:07:2b:4a:4b:b3:4d:87:
         bd:c7:9d:49:b6:fd:24:ef:0f:9b:19:23:ce:28:2f:62:5d:57:
         e5:63:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:43:02 2026 by rpki-client