Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          MyrqihW6AAoBl4K4rzS46B8mz5X4jwSzLaxgPWzJL0A=
Subject key identifier:   77:39:19:DC:57:4B:66:5E:EA:8E:1D:78:E9:D8:B0:94:FA:29:0E:10
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       2783E7F054AC11783A27267959BA4D104226B237
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:11 +0000
ROA not before:           Tue 05 Mar 2024 17:44:11 +0000
ROA not after:            Tue 04 Mar 2025 17:49:11 +0000
asID:                     17147
IP address blocks:        163.247.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:83:e7:f0:54:ac:11:78:3a:27:26:79:59:ba:4d:10:42:26:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:11 2024 GMT
            Not After : Mar  4 17:49:11 2025 GMT
        Subject: CN=773919DC574B665EEA8E1D78E9D8B094FA290E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:72:de:63:f3:7a:85:08:2b:c0:99:32:85:
                    59:74:f4:42:fb:60:57:03:2e:6e:0e:71:4f:7a:32:
                    97:31:d5:46:54:94:81:00:ba:a6:c5:38:83:a4:74:
                    20:63:cc:64:9f:98:5a:6a:99:a5:91:18:33:72:26:
                    a2:ad:4b:58:77:3d:6a:15:4c:78:d0:54:7c:7c:13:
                    93:9f:71:94:6e:4a:06:fc:bb:89:8d:88:98:ab:a4:
                    e0:08:28:2f:1a:9c:af:af:26:0a:40:fe:e9:08:24:
                    81:42:cb:d4:8d:fb:41:09:74:88:99:65:a6:8e:0a:
                    57:c0:7a:3b:7d:7c:4c:02:da:29:06:80:90:c8:50:
                    e9:93:1c:a7:82:00:0f:21:f8:85:46:89:ef:c9:0c:
                    ea:32:99:41:e8:7c:56:9f:0e:58:df:4a:90:42:e8:
                    b6:46:f2:96:66:57:a6:e1:7e:cc:d2:2c:6d:e1:38:
                    07:fa:8e:f2:fc:22:e0:72:b2:a4:7c:58:58:bc:82:
                    ff:f8:1f:a6:52:80:bf:f6:12:32:ea:d2:a0:c6:2c:
                    f4:b3:bf:89:b4:03:e0:55:d1:24:9e:f5:8d:05:a8:
                    1c:4e:8a:c8:90:62:41:41:06:76:82:dc:18:35:48:
                    39:d6:5d:35:7c:c1:ac:8a:64:0e:b9:eb:15:ff:cf:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:39:19:DC:57:4B:66:5E:EA:8E:1D:78:E9:D8:B0:94:FA:29:0E:10
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:d8:7b:de:a3:16:06:18:85:b5:2c:7a:fa:48:4a:81:a1:
         dd:54:25:2e:68:f9:a4:a4:a0:9f:f3:3c:15:fb:09:d6:6d:2c:
         22:b8:e2:b8:f4:75:14:05:11:a2:17:b0:16:fe:ad:7e:39:a3:
         0d:d7:21:69:f1:71:be:da:f1:93:93:4f:c6:a7:81:09:7f:c4:
         85:f8:c3:e1:d7:ea:21:80:40:46:41:d6:0c:ed:8d:04:89:07:
         de:69:68:f4:4d:4e:d5:17:ec:d2:29:b0:1e:b7:30:f4:9f:05:
         d1:59:fe:50:6e:d6:93:a9:a5:ff:c1:fd:5a:e5:0f:cf:8f:d6:
         58:f9:c3:bc:e3:8d:f0:4b:83:ba:3b:98:62:fa:b7:e5:8e:ea:
         2c:98:0b:cd:9d:02:6e:f1:24:68:5e:dd:d8:ee:18:d1:e2:ca:
         21:65:9e:43:cc:2a:99:e4:88:22:5c:5e:ed:ca:53:6d:40:b9:
         da:a8:cf:d7:a2:b6:b9:6c:3b:11:95:f6:6b:fb:43:a0:39:d3:
         e8:d4:4d:a0:e6:0b:02:6b:24:06:51:d0:af:00:26:01:dd:d4:
         d5:80:77:d6:c0:e7:a3:0c:65:6a:ba:00:77:a3:3f:d9:a0:5e:
         92:f4:c6:95:65:7f:0e:ad:9f:44:39:34:b1:e9:56:19:2e:b8:
         bb:a7:de:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ4Pn8FSsEXg6JyZ5WbpNEEImsjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNDAzMDUxNzQ0MTFaFw0yNTAzMDQxNzQ5MTFaMDMxMTAvBgNV
BAMTKDc3MzkxOURDNTc0QjY2NUVFQThFMUQ3OEU5RDhCMDk0RkEyOTBFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UnLeY/N6hQgrwJkyhVl09EL7
YFcDLm4OcU96Mpcx1UZUlIEAuqbFOIOkdCBjzGSfmFpqmaWRGDNyJqKtS1h3PWoV
THjQVHx8E5OfcZRuSgb8u4mNiJirpOAIKC8anK+vJgpA/ukIJIFCy9SN+0EJdIiZ
ZaaOClfAejt9fEwC2ikGgJDIUOmTHKeCAA8h+IVGie/JDOoymUHofFafDljfSpBC
6LZG8pZmV6bhfszSLG3hOAf6jvL8IuBysqR8WFi8gv/4H6ZSgL/2EjLq0qDGLPSz
v4m0A+BV0SSe9Y0FqBxOisiQYkFBBnaC3Bg1SDnWXTV8wayKZA656xX/zwA1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdzkZ3FdLZl7qjh146diwlPopDhAwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3NTAN
BgkqhkiG9w0BAQsFAAOCAQEApvHYe96jFgYYhbUsevpISoGh3VQlLmj5pKSgn/M8
FfsJ1m0sIrjiuPR1FAURohewFv6tfjmjDdchafFxvtrxk5NPxqeBCX/EhfjD4dfq
IYBARkHWDO2NBIkH3mlo9E1O1Rfs0imwHrcw9J8F0Vn+UG7Wk6ml/8H9WuUPz4/W
WPnDvOON8EuDujuYYvq35Y7qLJgLzZ0CbvEkaF7d2O4Y0eLKIWWeQ8wqmeSIIlxe
7cpTbUC52qjP16K2uWw7EZX2a/tDoDnT6NRNoOYLAmskBlHQrwAmAd3U1YB31sDn
owxlaroAd6M/2aBekvTGlWV/Dq2fRDk0selWGS64u6feGA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org