Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          vbCNJnE/C92praO58EVNkRbk/7pGh/y1NTVz4JjErGg=
Subject key identifier:   B6:0E:5F:0B:11:2B:04:0B:02:8A:46:94:D7:D4:D3:AB:60:FA:24:A4
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       2F31C80AFCF3B2EF84B89C03B5FEE0CFBB6C82DC
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35302e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     17147
IP address blocks:        163.247.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:31:c8:0a:fc:f3:b2:ef:84:b8:9c:03:b5:fe:e0:cf:bb:6c:82:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=B60E5F0B112B040B028A4694D7D4D3AB60FA24A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:a5:7a:d8:b5:66:f6:c9:5a:a7:9d:73:3d:
                    4f:01:50:4b:ad:f3:e2:88:73:be:04:e7:ca:67:bd:
                    ab:ed:73:38:dc:1b:e1:8a:6c:f4:83:5c:b9:64:e5:
                    f0:6c:bb:60:fa:2b:b5:51:ee:5e:15:b8:70:4e:09:
                    56:28:64:e2:63:0d:1e:1f:5b:d3:c0:d8:9e:f0:4c:
                    71:79:d1:2b:b1:b4:0d:a8:02:e7:ae:ff:69:4c:9f:
                    a1:d1:7f:3c:de:7f:09:d9:c4:4e:6f:6b:bc:33:05:
                    cb:b3:35:47:f8:98:9a:0f:ba:08:5d:e9:2e:ba:30:
                    89:17:e5:97:b0:a9:f0:a3:c2:f4:dc:bc:6d:a7:b9:
                    5d:da:7f:da:02:c8:2b:bd:63:9d:33:ee:a0:94:92:
                    2d:b7:f8:b7:41:ea:ae:bd:bc:cb:fb:e8:8a:6c:5d:
                    75:35:76:d5:42:09:cc:e2:d9:56:4d:23:69:f0:df:
                    fc:d7:dd:74:a2:1e:8a:e9:6e:61:1d:94:4c:c3:55:
                    b4:46:cc:fe:45:6b:c3:03:15:e2:6b:7e:80:1d:bc:
                    77:68:d7:39:0c:9c:3d:2c:cf:50:4e:47:2e:72:d1:
                    d7:9f:9f:2a:c4:c6:1a:a5:e8:62:d2:fd:ce:c4:c5:
                    b3:13:cf:fc:a8:04:92:b5:67:c3:76:33:b7:42:8e:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:5F:0B:11:2B:04:0B:02:8A:46:94:D7:D4:D3:AB:60:FA:24:A4
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:b4:22:3f:52:04:2e:7c:c5:e7:45:a6:6d:b6:18:42:63:
         4d:d4:29:5d:6a:d7:31:aa:dd:1a:6f:47:28:d7:dd:15:79:65:
         71:14:75:9e:81:7a:97:af:89:fe:fc:b9:01:8b:97:97:ac:ee:
         1e:6a:9d:16:19:06:1a:12:c5:cc:c1:d6:53:01:15:e1:ec:18:
         5d:f1:92:ff:66:97:55:69:15:f5:4b:e9:e1:44:ac:a0:71:68:
         f1:05:88:d1:45:da:ae:03:e6:a8:c7:d8:35:ff:64:91:fb:be:
         3d:d4:4a:87:7b:d6:7d:d7:0a:94:a3:d9:55:13:a9:6a:aa:8b:
         ee:4b:45:b6:0a:0d:37:40:6c:2c:1c:ed:f0:bd:1d:0c:f8:5e:
         d8:15:49:81:54:3b:5c:2a:a5:03:6b:1d:06:18:74:b0:ef:56:
         6f:09:11:a6:7a:3b:b4:7a:44:9c:f4:9c:03:28:eb:99:d7:19:
         ba:22:bc:ba:0e:0b:fc:6e:ee:b9:ea:cf:a6:c4:17:fd:bc:0e:
         e4:00:94:5b:da:23:5d:1a:de:3a:10:6a:ec:e4:bb:6b:f4:b8:
         33:67:c5:d4:8a:19:b4:f1:aa:3a:59:23:bb:1c:4e:6c:3b:2a:
         42:e9:37:41:a1:54:53:aa:21:d8:9c:4d:1c:8a:5a:4e:32:95:
         d3:88:85:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULzHICvzzsu+EuJwDtf7gz7tsgtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNDAzMDUxNzQ0MTBaFw0yNTAzMDQxNzQ5MTBaMDMxMTAvBgNV
BAMTKEI2MEU1RjBCMTEyQjA0MEIwMjhBNDY5NEQ3RDREM0FCNjBGQTI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwKV62LVm9slap51zPU8BUEut
8+KIc74E58pnvavtczjcG+GKbPSDXLlk5fBsu2D6K7VR7l4VuHBOCVYoZOJjDR4f
W9PA2J7wTHF50SuxtA2oAueu/2lMn6HRfzzefwnZxE5va7wzBcuzNUf4mJoPughd
6S66MIkX5ZewqfCjwvTcvG2nuV3af9oCyCu9Y50z7qCUki23+LdB6q69vMv76Ips
XXU1dtVCCczi2VZNI2nw3/zX3XSiHorpbmEdlEzDVbRGzP5Fa8MDFeJrfoAdvHdo
1zkMnD0sz1BORy5y0defnyrExhql6GLS/c7ExbMTz/yoBJK1Z8N2M7dCjpzfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtg5fCxErBAsCikaU19TTq2D6JKQwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3MjAN
BgkqhkiG9w0BAQsFAAOCAQEAOn20Ij9SBC58xedFpm22GEJjTdQpXWrXMardGm9H
KNfdFXllcRR1noF6l6+J/vy5AYuXl6zuHmqdFhkGGhLFzMHWUwEV4ewYXfGS/2aX
VWkV9Uvp4USsoHFo8QWI0UXargPmqMfYNf9kkfu+PdRKh3vWfdcKlKPZVROpaqqL
7ktFtgoNN0BsLBzt8L0dDPhe2BVJgVQ7XCqlA2sdBhh0sO9WbwkRpno7tHpEnPSc
AyjrmdcZuiK8ug4L/G7uuerPpsQX/bwO5ACUW9ojXRreOhBq7OS7a/S4M2fF1IoZ
tPGqOlkjuxxObDsqQuk3QaFUU6oh2JxNHIpaTjKV04iFXg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org