Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36362e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e36362e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          PGYr2Z8h9ErqvTWQuJiWVdA/EOptQZFAlmvGqqpsN1U=
Subject key identifier:   68:52:F1:F7:66:9B:40:03:54:4D:76:6F:9D:1C:6D:38:DC:19:58:3A
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       13C4F4FD1EB1942207DC38BB3E0DB21653DD5CF4
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36362e302f32342d3234203d3e203137313437.roa
Signing time:             Mon 13 Jul 2026 14:35:00 +0000
ROA not before:           Mon 13 Jul 2026 14:30:00 +0000
ROA not after:            Mon 12 Jul 2027 14:35:00 +0000
asID:                     17147
IP address blocks:        163.247.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:f4:fd:1e:b1:94:22:07:dc:38:bb:3e:0d:b2:16:53:dd:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jul 13 14:30:00 2026 GMT
            Not After : Jul 12 14:35:00 2027 GMT
        Subject: CN=6852F1F7669B4003544D766F9D1C6D38DC19583A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:c0:30:28:c9:37:d6:f9:ac:6e:ff:fd:99:
                    06:20:40:d6:17:37:1e:09:86:4a:9b:2f:de:1c:37:
                    23:28:28:d8:a9:72:2c:09:fd:73:9d:da:73:27:b8:
                    03:5f:b4:b4:d7:fa:7b:b5:76:e3:96:b7:73:ca:0e:
                    8a:92:b7:86:08:0e:ad:5b:fa:af:d0:06:0c:53:ab:
                    c0:f4:21:d3:14:e0:99:9b:47:fc:02:11:cd:ee:33:
                    32:0e:c1:99:2e:de:28:6b:8e:ae:ff:67:28:70:ff:
                    2b:d8:51:e7:3e:5d:cc:ac:2b:c0:81:8f:24:ea:b1:
                    e0:30:89:a7:9e:e5:4b:95:ec:e0:53:ab:1b:2c:2d:
                    bf:24:04:9e:8d:64:a9:7b:93:df:67:99:92:28:dc:
                    8b:40:0a:20:f1:04:a7:ab:df:8c:38:5b:20:18:ab:
                    2a:56:42:f9:b7:38:95:97:1d:d4:f7:e7:91:2d:6d:
                    37:14:9a:76:8a:b0:7f:c3:c1:de:64:69:5e:71:0b:
                    3c:fc:e4:cb:94:0d:32:db:7a:0c:77:fd:3a:b4:1e:
                    fe:ae:3d:da:11:6e:26:1c:aa:e5:06:09:4a:a7:66:
                    4a:c5:46:6a:a0:c7:89:5f:b2:73:c7:8e:18:92:2e:
                    59:82:32:41:c5:39:80:9f:96:d6:e9:21:48:8d:36:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:52:F1:F7:66:9B:40:03:54:4D:76:6F:9D:1C:6D:38:DC:19:58:3A
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36362e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:8b:0e:c4:f7:ac:25:39:d6:ca:a1:13:82:5f:22:c5:37:
         ab:0a:dc:27:18:bc:4f:fc:e4:52:fc:85:8d:e3:d4:ae:a0:8b:
         af:26:74:51:7e:31:e0:18:f8:44:00:fd:31:93:cb:22:a4:2e:
         70:c7:08:1c:0e:d9:41:a3:72:d7:bb:04:cc:a6:fa:1a:93:54:
         a9:f5:24:7e:a8:f2:45:e1:a4:89:25:6b:ec:6d:22:50:c6:bf:
         a1:c6:03:3c:ba:1a:89:d7:33:38:06:01:98:63:e3:19:37:42:
         d0:3f:4a:3c:46:cd:3b:65:07:4f:02:38:58:d5:2e:e5:56:10:
         19:b6:2b:c8:1d:fc:5c:92:dd:d0:ca:2f:98:49:b9:25:bd:dd:
         13:a0:4c:16:0a:06:9e:4b:2f:10:f9:e3:a5:57:b1:f9:ac:da:
         d7:95:01:d3:09:34:2e:28:ad:ee:3e:08:a9:c8:f2:be:40:75:
         d2:94:e3:a2:24:6a:4a:40:be:77:42:71:4c:07:6c:62:5a:cc:
         6d:03:59:1f:b6:b8:99:6e:61:3e:1a:7e:1c:fa:b2:8f:1e:13:
         7a:c8:86:01:d3:7e:13:75:8a:46:4c:59:46:93:59:93:fa:31:
         41:ae:98:cf:cb:0a:9e:e9:83:57:4e:a9:44:9b:66:8d:4d:c4:
         04:5f:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:11 2026 by rpki-client