Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34362e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34362e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          5yhCJ7V2H3u8uG1JxFemI9Z+VMZKsnEf7PLNzowKb2g=
Subject key identifier:   A4:08:0E:F7:14:DE:56:AF:C2:13:4F:E1:20:99:EE:B4:7C:6D:20:AF
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       7621428E5441AD5A217EFC7B7C3FE9861F6BA4EA
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34362e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:13 +0000
ROA not before:           Tue 05 Mar 2024 17:44:13 +0000
ROA not after:            Tue 04 Mar 2025 17:49:13 +0000
asID:                     17147
IP address blocks:        163.247.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:21:42:8e:54:41:ad:5a:21:7e:fc:7b:7c:3f:e9:86:1f:6b:a4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:13 2024 GMT
            Not After : Mar  4 17:49:13 2025 GMT
        Subject: CN=A4080EF714DE56AFC2134FE12099EEB47C6D20AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:54:62:4f:9a:9b:80:08:75:de:38:35:04:
                    05:d8:06:25:9f:8b:c0:5b:35:f2:41:64:f5:c0:fd:
                    99:85:77:80:37:d9:45:ae:32:9c:c3:53:bf:92:e4:
                    47:9c:10:19:90:cc:31:b3:ba:9d:e0:e7:70:7d:72:
                    b5:07:3c:7e:47:f5:f1:2a:ef:bd:11:fa:a0:b4:da:
                    e0:66:a5:db:eb:10:e4:96:c0:df:25:e6:c4:fa:d6:
                    34:77:50:d3:55:5f:d9:2b:f2:e2:b4:b9:63:25:23:
                    f8:79:e3:ab:6c:e4:c5:39:8d:63:0e:97:4a:c1:90:
                    84:35:99:b0:9b:8d:5e:6d:ed:cb:e3:b2:aa:a5:54:
                    81:22:9c:d4:52:5d:60:61:61:0c:c1:ba:3c:0d:96:
                    03:14:94:91:9b:ae:d8:b6:3e:60:53:fd:cc:ec:6e:
                    c7:41:94:55:3d:90:dc:77:b3:bc:ca:89:0c:dc:79:
                    d4:45:80:99:e2:a2:b8:1a:27:47:60:61:66:22:7b:
                    2f:41:0c:da:41:9e:3f:a2:6f:3e:26:e2:46:36:5c:
                    ce:62:38:56:72:99:26:db:45:8d:26:51:fd:09:65:
                    d5:8b:06:63:45:bc:bb:8f:4d:13:f1:d6:33:29:78:
                    d7:0e:de:ff:5c:2f:9b:b9:dc:91:2e:27:23:3c:b3:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:0E:F7:14:DE:56:AF:C2:13:4F:E1:20:99:EE:B4:7C:6D:20:AF
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34362e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:60:83:42:93:76:71:f1:e9:ea:02:04:7b:e9:42:73:7e:72:
         de:1a:67:5f:37:2a:8e:a4:ff:70:56:07:e2:ab:b4:a9:dc:1a:
         05:ec:71:ed:42:5f:ed:95:14:d1:11:1e:04:c1:97:3e:55:d8:
         29:be:7a:44:df:a9:3a:f4:7a:e9:48:2c:7d:74:6a:34:4f:08:
         38:26:bc:be:c9:5c:8d:44:2c:85:2a:57:9c:f9:93:22:4b:53:
         16:7a:20:d7:dd:14:34:a2:09:5f:97:24:73:45:37:7f:21:ef:
         32:bd:c0:1e:ff:01:11:5f:23:35:42:6a:95:6e:c3:c5:2b:fe:
         f5:22:07:c1:39:ae:d7:07:6a:19:af:ae:70:c8:6f:a9:1c:fa:
         ea:18:31:c9:76:cf:bc:5f:45:85:a4:20:a1:d3:cd:1d:5d:b2:
         e2:4c:99:97:97:8d:10:5d:5d:17:13:37:aa:6e:98:22:36:7a:
         74:09:ec:8c:6e:db:d9:af:d0:d1:2c:2f:67:bf:11:66:3e:1e:
         63:7e:9e:a4:44:d2:d8:b9:12:c3:31:fa:ff:82:06:87:d4:50:
         16:59:16:c9:14:2b:ab:ee:c0:56:67:c8:7b:13:79:eb:f1:c2:
         6a:a5:46:47:9e:9a:d1:9f:e2:44:97:e2:0c:ae:6c:69:aa:52:
         ea:1c:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org