Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          7vs7o+t2sHX1dxxrOBQcHzGvlv1qg2OuQ+y2zh/9Q9M=
Subject key identifier:   AC:F4:68:E3:EC:1D:5C:BA:EF:B4:1B:C4:03:0F:79:CA:05:0E:DB:6D
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       1ACAA5520077E29446616ACF7A36D5F90B1EF6F1
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:14 +0000
ROA not before:           Tue 05 Mar 2024 17:44:14 +0000
ROA not after:            Tue 04 Mar 2025 17:49:14 +0000
asID:                     17147
IP address blocks:        163.247.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ca:a5:52:00:77:e2:94:46:61:6a:cf:7a:36:d5:f9:0b:1e:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:14 2024 GMT
            Not After : Mar  4 17:49:14 2025 GMT
        Subject: CN=ACF468E3EC1D5CBAEFB41BC4030F79CA050EDB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:13:31:8d:c6:6a:5b:24:69:91:28:69:c9:
                    23:fe:d6:44:be:c4:96:f2:2e:31:29:9c:35:da:a9:
                    a5:84:c3:e1:7e:53:0e:2c:d3:63:21:a4:a6:cc:48:
                    15:61:47:7e:38:02:d4:55:34:6d:1a:e1:d5:a4:0a:
                    44:1a:ab:6a:53:3b:45:3e:9c:cb:af:cb:4e:cd:00:
                    73:12:61:34:b3:2f:0a:0d:35:6f:0b:da:08:54:d6:
                    9b:08:99:43:39:4d:0d:e4:8b:8f:d0:64:03:86:de:
                    46:a0:e0:28:0c:b4:af:03:fb:b5:a0:6b:dc:89:88:
                    bd:f6:ca:2a:de:c7:0c:44:67:21:16:ae:ac:27:47:
                    67:93:fa:7d:29:ba:5b:53:86:6c:a8:b6:60:3d:ec:
                    6b:51:64:b3:42:20:be:c7:85:81:0e:d1:e1:27:91:
                    da:ff:d7:c0:fb:a5:a2:3d:52:28:d5:e7:71:dd:9b:
                    32:eb:a8:9b:9a:0d:48:68:8c:70:06:a5:fc:a1:40:
                    87:d8:ff:30:ce:32:62:03:8e:a5:cf:6e:d5:67:33:
                    16:eb:d6:ca:5c:1a:a4:0e:b8:7c:7d:98:ef:a3:ea:
                    52:57:77:36:65:9e:af:dc:4b:a4:9a:7f:d7:d4:8c:
                    3b:c6:8d:69:ad:55:48:37:ed:4b:09:89:c8:d5:fc:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:68:E3:EC:1D:5C:BA:EF:B4:1B:C4:03:0F:79:CA:05:0E:DB:6D
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:df:bc:c3:ba:7b:c3:5c:a2:d8:3a:fb:ed:bb:bb:82:89:62:
         8b:ed:3c:e1:e7:39:f3:8a:53:bb:c7:41:da:ea:e8:74:e5:38:
         28:44:ef:20:7e:8e:1b:00:11:08:68:f9:d4:e1:a7:ab:c2:cc:
         ee:7d:01:52:9b:cd:a6:28:3c:c6:1a:ed:15:6a:41:2e:a7:5b:
         69:78:59:11:7f:91:73:8d:48:44:27:f2:4e:88:10:a7:ff:99:
         02:c1:a6:25:5b:2e:66:a6:f3:12:e9:52:b3:26:2f:d8:a5:bc:
         35:be:26:7e:98:09:47:41:8a:d2:8a:b9:63:fd:f5:c1:cc:0f:
         b4:c6:2e:44:d7:0b:62:b5:86:a4:7f:ed:95:98:55:1d:8d:c4:
         02:ea:c8:3d:c6:ed:35:c1:15:0f:33:e7:f5:05:12:fb:c4:ec:
         8e:4e:20:2f:63:b9:5b:42:b3:6d:8b:90:b7:e5:0a:37:3f:8e:
         f9:81:49:75:03:6c:17:cd:c0:38:b1:20:de:3e:59:07:a0:15:
         a7:87:05:4e:b8:a2:71:9f:1a:d7:1a:3d:36:10:88:ad:7d:47:
         c9:75:1e:d9:7b:c9:b8:25:01:e6:2b:11:57:d7:da:d2:3d:2c:
         94:93:cf:9b:e3:ab:4a:41:1d:9a:23:c8:69:9e:30:45:29:0d:
         8b:19:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org