Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa
File:                     3136332e3234372e302e302f31362d3136203d3e203137313437.roa (raw, json)
Hash identifier:          C4Aaa1nV3BKJNk9dwqNWmQ5XtoFpCq2OCLSp/LsF8+Y=
Subject key identifier:   0B:38:F7:8B:C0:55:72:86:AF:2B:83:61:DF:1E:B7:59:C0:D5:86:8D
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       47B5B08440CC420C8054F56805F386E363FE3583
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:00 +0000
ROA not before:           Tue 04 Feb 2025 18:21:00 +0000
ROA not after:            Tue 03 Feb 2026 18:26:00 +0000
asID:                     17147
IP address blocks:        163.247.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b5:b0:84:40:cc:42:0c:80:54:f5:68:05:f3:86:e3:63:fe:35:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:00 2025 GMT
            Not After : Feb  3 18:26:00 2026 GMT
        Subject: CN=0B38F78BC0557286AF2B8361DF1EB759C0D5868D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:da:81:a5:69:b6:b4:64:40:5e:9f:69:80:
                    1f:1d:70:96:a9:4e:38:68:bc:a6:88:47:35:89:bf:
                    5f:36:b7:97:15:18:0e:c4:0b:0c:d2:89:d9:35:fb:
                    c3:03:2c:ef:3f:f7:35:c1:f7:a7:63:eb:22:b0:15:
                    be:c7:07:10:ba:0e:a1:d8:7d:9e:9d:2c:bb:00:10:
                    bb:11:8e:e3:e4:e5:6b:34:f6:68:a0:e4:47:74:69:
                    8c:b2:b9:a5:cd:8e:ac:17:d6:7d:8c:8f:82:bb:37:
                    ee:90:86:be:c6:17:82:50:f6:74:7d:81:89:0c:20:
                    50:b3:a5:3c:28:cb:7e:7f:01:0e:5c:fc:b3:54:55:
                    e7:3e:41:47:19:dc:7f:b4:9b:15:69:48:55:f1:e5:
                    38:33:1d:7d:d1:02:d8:90:d2:7a:98:98:7c:41:f6:
                    d4:87:01:98:3c:fc:b8:cf:54:01:1d:1c:c3:2a:b4:
                    7c:4b:d5:46:82:79:27:bf:40:bd:70:ee:af:6f:a3:
                    e1:d0:02:66:ef:5d:51:02:cd:97:f1:8f:44:d9:31:
                    8d:51:ef:be:11:e4:88:87:0e:aa:0c:32:d9:68:58:
                    83:a9:73:34:19:9a:72:3d:5d:18:f8:ff:16:7c:ef:
                    b3:e5:c1:cb:76:42:43:12:90:e1:9c:e6:bc:15:53:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:F7:8B:C0:55:72:86:AF:2B:83:61:DF:1E:B7:59:C0:D5:86:8D
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:cf:ce:4b:9f:d1:90:95:46:ba:a1:8f:d4:6c:fd:e7:72:
         9d:05:54:eb:dd:1a:7c:8b:ae:0e:61:63:e6:8f:42:60:00:de:
         66:3e:73:c3:70:e2:f5:e3:41:3d:2d:ed:4b:81:fc:5f:4c:b7:
         72:39:a0:0d:4f:f4:6f:8a:a3:b5:d9:fc:27:11:5c:86:f2:3c:
         da:dd:d3:b8:79:67:2b:17:c5:2a:6b:99:7e:ed:94:c3:19:df:
         bc:71:2e:e2:0c:56:95:d1:df:89:b7:00:63:9e:20:43:1a:e6:
         2f:61:cc:c9:3a:5c:70:82:d1:49:72:f3:ca:f3:78:aa:e1:94:
         48:10:28:09:91:7b:d3:98:a5:de:44:42:99:fe:0e:c3:8a:d1:
         f6:3f:46:ce:3b:e1:81:f7:ac:fb:57:db:a7:9f:24:90:2b:7a:
         1c:82:a6:61:58:85:dc:f0:64:e6:e7:35:06:32:f9:1c:45:27:
         cf:2a:db:d1:08:1c:d3:3e:51:4b:42:86:5d:99:26:e9:f5:e7:
         de:01:95:77:83:97:13:4b:dc:a8:58:a0:44:39:bb:55:21:6b:
         a3:7d:a7:e6:47:35:e7:71:bc:31:c5:13:fe:48:1a:80:e4:8d:
         b0:db:13:14:52:ab:52:ef:55:98:b5:ee:87:5b:49:18:90:c0:
         95:54:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:11 2025 by rpki-client