Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e31322e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          rrHp0tlNy+5+dvsPLOAx2l75kCwONpDkoFLZTLuBjjk=
Subject key identifier:   67:9D:F5:6E:8C:F2:FA:00:AA:DA:44:40:F8:0F:B2:E5:58:70:23:AB
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       3629C63A9070725BD59C7B2ACF4FE4E31585776E
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:08 +0000
ROA not before:           Tue 05 Mar 2024 17:44:08 +0000
ROA not after:            Tue 04 Mar 2025 17:49:08 +0000
asID:                     17147
IP address blocks:        163.247.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:c6:3a:90:70:72:5b:d5:9c:7b:2a:cf:4f:e4:e3:15:85:77:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:08 2024 GMT
            Not After : Mar  4 17:49:08 2025 GMT
        Subject: CN=679DF56E8CF2FA00AADA4440F80FB2E5587023AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:0d:32:0b:56:62:16:1c:53:17:5e:cd:9a:
                    29:1d:1a:12:5e:d9:cb:65:cc:7b:2c:7b:39:ae:a3:
                    f8:49:9b:b7:74:4f:9e:51:ba:ee:20:9f:b1:d1:b5:
                    41:af:c2:76:80:d8:7f:c7:3e:77:9a:69:4c:fd:0a:
                    86:81:5f:46:91:25:71:a8:31:88:da:29:bb:3e:4b:
                    d4:73:14:b3:b4:25:d4:4e:f5:d0:ad:76:e9:ce:93:
                    ca:f0:4b:3f:5b:08:17:fb:ec:6e:b7:95:68:74:f3:
                    41:bd:01:05:29:c7:25:2d:a8:3c:c8:c4:0c:11:92:
                    df:2c:22:c3:d8:51:60:48:a3:6d:d3:9f:ff:05:15:
                    61:3f:e2:90:3c:6d:94:00:84:9b:3b:6c:60:01:71:
                    84:3c:c2:b7:03:27:ee:9f:5d:39:ba:8f:2e:2d:dd:
                    22:83:69:df:48:e9:b4:7a:b2:78:9a:3b:c7:a1:48:
                    67:4f:59:8e:e3:b3:be:29:fd:2b:ba:93:05:68:93:
                    09:fb:f3:22:f4:77:90:fa:08:de:82:c3:1b:30:2d:
                    f8:49:70:3f:6c:aa:65:52:1c:d0:4b:3e:1b:84:16:
                    d8:aa:be:6f:3e:d7:fd:6c:5e:3c:05:8b:92:4f:76:
                    74:40:2e:7a:8c:88:43:fb:cf:f6:fb:af:c4:20:ed:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:F5:6E:8C:F2:FA:00:AA:DA:44:40:F8:0F:B2:E5:58:70:23:AB
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31322e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:a9:00:66:5b:86:16:98:5c:b2:0f:d6:00:f3:63:d3:22:
         31:66:3e:66:55:70:2b:b5:06:97:9c:13:e7:b4:1e:73:a9:42:
         b2:4e:42:c0:0e:40:14:39:e6:2d:54:aa:97:80:fd:c1:fb:1a:
         9a:0a:1d:c4:7c:4b:0e:bb:06:93:e7:92:03:01:96:f4:4a:cc:
         bf:ea:95:4a:ec:20:62:4f:78:06:37:ef:c3:8a:8a:19:37:75:
         60:44:50:39:73:96:6f:61:22:ae:f3:5f:76:c0:05:23:73:5f:
         9d:3f:41:b3:02:3f:cc:95:35:26:38:7e:30:3f:2d:f1:17:94:
         b4:24:29:93:b6:f2:65:08:9d:79:4f:a2:0c:2b:71:1e:01:e2:
         7f:4f:66:92:f7:3d:7e:a8:59:c8:ec:7a:b4:8e:58:31:d7:3a:
         70:0f:56:7a:b3:33:21:bf:aa:13:12:c2:04:f8:61:01:29:ea:
         7d:26:a1:bf:6d:2b:10:cb:2b:a0:85:0f:8e:88:23:93:b6:92:
         c8:16:b3:53:76:1a:94:83:64:74:08:db:2a:46:c9:a9:9b:ba:
         03:61:bf:c3:19:99:55:32:2e:2f:3b:f6:e7:f9:39:97:d0:28:
         77:58:cc:40:2d:9a:a4:aa:36:d6:2e:31:7f:18:57:3d:be:34:
         fc:7e:82:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNinGOpBwclvVnHsqz0/k4xWFd24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNDAzMDUxNzQ0MDhaFw0yNTAzMDQxNzQ5MDhaMDMxMTAvBgNV
BAMTKDY3OURGNTZFOENGMkZBMDBBQURBNDQ0MEY4MEZCMkU1NTg3MDIzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnQ0yC1ZiFhxTF17NmikdGhJe
2ctlzHssezmuo/hJm7d0T55Ruu4gn7HRtUGvwnaA2H/HPneaaUz9CoaBX0aRJXGo
MYjaKbs+S9RzFLO0JdRO9dCtdunOk8rwSz9bCBf77G63lWh080G9AQUpxyUtqDzI
xAwRkt8sIsPYUWBIo23Tn/8FFWE/4pA8bZQAhJs7bGABcYQ8wrcDJ+6fXTm6jy4t
3SKDad9I6bR6sniaO8ehSGdPWY7js74p/Su6kwVokwn78yL0d5D6CN6CwxswLfhJ
cD9sqmVSHNBLPhuEFtiqvm8+1/1sXjwFi5JPdnRALnqMiEP7z/b7r8Qg7UmFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZ531bozy+gCq2kRA+A+y5VhwI6swHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3DDAN
BgkqhkiG9w0BAQsFAAOCAQEAN5OpAGZbhhaYXLIP1gDzY9MiMWY+ZlVwK7UGl5wT
57Qec6lCsk5CwA5AFDnmLVSql4D9wfsamgodxHxLDrsGk+eSAwGW9ErMv+qVSuwg
Yk94Bjfvw4qKGTd1YERQOXOWb2EirvNfdsAFI3NfnT9BswI/zJU1Jjh+MD8t8ReU
tCQpk7byZQideU+iDCtxHgHif09mkvc9fqhZyOx6tI5YMdc6cA9WerMzIb+qExLC
BPhhASnqfSahv20rEMsroIUPjogjk7aSyBazU3YalINkdAjbKkbJqZu6A2G/wxmZ
VTIuLzv25/k5l9Aod1jMQC2apKo21i4xfxhXPb40/H6CGg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:27 2024 by rpki-client on console-fra.rpki-client.org