Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e37372e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          9kMtI7aZMlQ/KRHfyTPr8C6k0BGQdmHiS7ahcgwZpVA=
Subject key identifier:   3E:17:3D:90:20:51:E0:8A:98:DA:E9:16:7D:D9:1D:4F:38:1E:EB:43
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       2D3CAA39F110B322783C0B3748DF12FE8D33FF76
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:16 +0000
ROA not before:           Tue 06 Jan 2026 19:16:16 +0000
ROA not after:            Tue 05 Jan 2027 19:21:16 +0000
asID:                     17147
IP address blocks:        163.247.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3c:aa:39:f1:10:b3:22:78:3c:0b:37:48:df:12:fe:8d:33:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:16 2026 GMT
            Not After : Jan  5 19:21:16 2027 GMT
        Subject: CN=3E173D902051E08A98DAE9167DD91D4F381EEB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:71:6d:4c:25:12:09:e8:38:81:c9:d1:9a:
                    56:56:15:ce:0e:22:ae:d4:b4:ff:b2:c6:ca:0d:fb:
                    c8:98:6f:6e:b2:50:26:30:35:de:7e:c9:23:8d:9f:
                    b8:bb:14:ea:55:d3:37:a5:e2:16:a9:82:d6:a2:e7:
                    75:02:83:9a:f8:d2:19:19:c4:f0:ce:1b:26:40:d7:
                    7c:48:4c:8a:bf:7b:66:97:5f:77:0a:0d:c6:80:07:
                    88:f8:c2:c6:5c:d8:34:4d:dc:01:5a:44:52:94:1f:
                    ab:96:3e:51:2f:82:78:99:48:ee:70:7b:2c:54:f4:
                    30:d3:0d:ee:be:4b:97:4b:5a:34:53:c5:7f:99:e1:
                    61:3c:db:98:2d:a8:fa:a6:9a:ec:67:a3:9b:13:f5:
                    46:b8:4b:a4:40:4d:1a:bc:ee:c4:17:fa:e5:f7:6f:
                    b4:97:6e:a6:fe:f7:f3:51:8c:58:51:9f:9f:6c:d6:
                    db:1e:70:2f:2f:c1:2a:5d:5e:0e:7b:19:e7:eb:dc:
                    dc:c4:7f:42:b8:76:0b:6b:aa:2a:6a:89:de:46:f8:
                    d9:7f:08:09:26:7d:11:e5:61:85:e5:9c:24:51:80:
                    d4:f8:62:bc:61:1d:95:8d:c2:60:83:28:1b:73:df:
                    22:8c:92:55:b3:58:50:86:71:2e:68:31:c9:9e:53:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:17:3D:90:20:51:E0:8A:98:DA:E9:16:7D:D9:1D:4F:38:1E:EB:43
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:cf:ad:35:b7:be:74:df:78:7e:0b:3c:3c:8a:7c:20:04:
         26:e0:39:66:20:bc:58:93:1b:3d:e7:fa:a9:0f:28:a5:93:d4:
         b9:10:e2:d7:b9:8a:16:01:be:d6:2a:5d:80:c5:24:f9:d4:c2:
         93:36:22:2d:9c:a3:4d:fd:6f:fb:e3:51:98:60:7c:f1:5b:81:
         2f:b3:2d:0e:82:a2:93:ca:5d:1c:37:d2:82:79:cd:c6:a0:e8:
         01:33:ea:63:8e:6f:9b:5c:70:b8:3a:fc:a8:35:1c:b7:25:30:
         85:e8:2b:27:74:74:b1:c8:f1:ae:2d:8c:ab:bc:d9:3a:15:a1:
         93:b6:1c:0e:ca:bb:65:a5:f8:0f:7c:24:df:0d:7c:91:e0:66:
         5b:91:da:66:a7:ae:d3:16:c6:35:cb:d8:b2:0a:a7:b6:36:58:
         27:f3:00:be:81:f3:da:1c:1c:a3:c3:62:b2:6c:f2:2c:be:13:
         97:8a:de:cd:07:9b:90:a1:45:1c:18:74:18:ba:d2:53:8e:65:
         89:f1:73:15:74:1f:52:55:68:5a:5a:b6:de:22:bd:44:d7:ca:
         56:b0:47:9c:ae:b7:a6:c8:3f:e1:d4:10:22:70:cf:05:3d:b5:
         6b:6e:7f:82:fd:2f:bf:94:28:2c:bf:2e:9e:05:4c:2b:f1:17:
         6a:0c:32:ae
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULTyqOfEQsyJ4PAs3SN8S/o0z/3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNjAxMDYxOTE2MTZaFw0yNzAxMDUxOTIxMTZaMDMxMTAvBgNV
BAMTKDNFMTczRDkwMjA1MUUwOEE5OERBRTkxNjdERDkxRDRGMzgxRUVCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhXFtTCUSCeg4gcnRmlZWFc4O
Iq7UtP+yxsoN+8iYb26yUCYwNd5+ySONn7i7FOpV0zel4hapgtai53UCg5r40hkZ
xPDOGyZA13xITIq/e2aXX3cKDcaAB4j4wsZc2DRN3AFaRFKUH6uWPlEvgniZSO5w
eyxU9DDTDe6+S5dLWjRTxX+Z4WE825gtqPqmmuxno5sT9Ua4S6RATRq87sQX+uX3
b7SXbqb+9/NRjFhRn59s1tsecC8vwSpdXg57Gefr3NzEf0K4dgtrqipqid5G+Nl/
CAkmfRHlYYXlnCRRgNT4YrxhHZWNwmCDKBtz3yKMklWzWFCGcS5oMcmeU7eZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPhc9kCBR4IqY2ukWfdkdTzge60MwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3TTAN
BgkqhkiG9w0BAQsFAAOCAQEAaC7PrTW3vnTfeH4LPDyKfCAEJuA5ZiC8WJMbPef6
qQ8opZPUuRDi17mKFgG+1ipdgMUk+dTCkzYiLZyjTf1v++NRmGB88VuBL7MtDoKi
k8pdHDfSgnnNxqDoATPqY45vm1xwuDr8qDUctyUwhegrJ3R0scjxri2Mq7zZOhWh
k7YcDsq7ZaX4D3wk3w18keBmW5HaZqeu0xbGNcvYsgqntjZYJ/MAvoHz2hwco8Ni
smzyLL4Tl4rezQebkKFFHBh0GLrSU45lifFzFXQfUlVoWlq23iK9RNfKVrBHnK63
psg/4dQQInDPBT21a25/gv0vv5QoLL8ungVMK/EXagwyrg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:20 2026 by rpki-client