Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3134302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e3134302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          XS59Nuxe0cNbzfVRjM43A1gSpFQzEwKCPxvLQsnzaRM=
Subject key identifier:   92:31:3E:E3:50:CC:E2:4A:F0:01:79:B5:28:D7:34:0D:EF:BC:70:0D
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       07B298D13D55C54531A81E223084C71C485E7FE3
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3134302e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 14 May 2026 22:20:00 +0000
ROA not before:           Thu 14 May 2026 22:15:00 +0000
ROA not after:            Thu 13 May 2027 22:20:00 +0000
asID:                     17147
IP address blocks:        163.247.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b2:98:d1:3d:55:c5:45:31:a8:1e:22:30:84:c7:1c:48:5e:7f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: May 14 22:15:00 2026 GMT
            Not After : May 13 22:20:00 2027 GMT
        Subject: CN=92313EE350CCE24AF00179B528D7340DEFBC700D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:7c:65:14:7c:5b:79:0e:3c:24:55:ef:6f:
                    3f:ad:af:02:d5:0c:87:3f:1c:0b:85:96:22:e8:1d:
                    4a:42:ff:c1:55:d3:0a:de:8f:48:cd:63:d4:92:ce:
                    fd:cd:f0:59:82:17:0a:70:b1:e2:27:15:fd:87:d9:
                    65:66:a7:3c:2b:ce:f5:f2:52:ae:2d:37:9b:90:65:
                    2a:2f:e7:ed:b3:21:b1:bd:28:8b:46:e2:0f:44:e7:
                    93:d8:a0:6d:36:6e:39:41:bf:62:74:32:4e:25:89:
                    a4:54:3d:81:50:8e:40:fc:fb:8c:b4:ec:03:fb:d6:
                    75:e1:44:72:57:95:d1:39:e3:26:57:d7:01:5e:98:
                    24:d8:4c:a3:82:51:6a:7d:6c:f8:85:cf:85:35:75:
                    e3:ad:bf:51:c9:5a:8b:d7:5a:aa:3d:b4:e4:fb:45:
                    66:f6:04:02:f2:56:9e:0a:47:bc:c5:8b:30:04:cb:
                    8c:3f:cd:aa:1b:39:ad:0b:7e:dd:1b:52:33:74:10:
                    8d:f1:f9:29:10:b9:10:a3:43:ae:43:40:e1:16:6e:
                    7b:ac:9f:ae:45:71:c4:47:6a:4b:07:5f:cd:49:55:
                    f6:13:d4:2e:2f:e2:36:6d:35:6f:b8:0d:82:37:47:
                    f3:76:fd:7a:99:d3:72:ea:7d:d1:02:e7:87:01:20:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:3E:E3:50:CC:E2:4A:F0:01:79:B5:28:D7:34:0D:EF:BC:70:0D
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3134302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:1b:60:28:7e:50:2d:48:55:ab:1c:cd:51:56:ea:74:a3:
         7e:60:ff:69:f9:1c:cb:7a:cd:68:3f:b9:ee:39:f9:c1:f2:2b:
         7a:67:86:54:d4:72:d8:1c:b1:3d:c0:74:f9:d4:bc:70:d0:54:
         67:f5:06:89:9d:c1:62:6d:59:1c:1d:45:c1:06:83:a1:32:c4:
         a2:eb:77:73:cf:a4:0f:3b:ae:6d:d4:61:e1:b6:11:4f:fc:36:
         e7:41:d0:6f:7d:37:33:1c:65:b2:5b:03:6b:9b:6c:02:89:f8:
         d5:45:81:c4:47:10:62:0e:f7:84:e0:45:0c:0c:e3:eb:de:e2:
         95:a9:5f:30:63:7f:05:f4:26:30:9c:f2:46:9c:b3:c6:11:73:
         2a:71:c2:a9:77:f9:7f:61:92:0e:19:37:f0:1c:51:73:43:f4:
         5b:6d:11:19:a9:06:61:15:b9:ca:22:e4:9d:08:4d:d5:de:b9:
         ae:56:35:b8:97:3f:19:36:21:30:53:b8:1d:58:ac:b2:e3:de:
         49:12:10:3c:69:0b:1f:81:98:cc:ef:9a:ae:08:2e:da:b4:a8:
         41:49:ad:6e:c7:84:9f:74:05:60:19:cc:96:1d:1a:9b:75:43:
         fe:98:32:1d:fd:83:93:e0:44:a2:98:75:bb:a9:eb:dc:40:af:
         01:ca:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:01:56 2026 by rpki-client