Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35352e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35352e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          sXXHGQ/RIagEUggq9lyxjGuli7wkaMEb0iy3vGSiqwg=
Subject key identifier:   E5:97:9B:21:27:28:0F:84:10:3D:FA:A3:8A:E1:2B:C8:4C:29:4C:07
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       1570D5D8486EE522F699D97FB7FE688F646E1C5F
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35352e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:05 +0000
ROA not before:           Tue 04 Feb 2025 18:21:05 +0000
ROA not after:            Tue 03 Feb 2026 18:26:05 +0000
asID:                     17147
IP address blocks:        163.247.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:70:d5:d8:48:6e:e5:22:f6:99:d9:7f:b7:fe:68:8f:64:6e:1c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:05 2025 GMT
            Not After : Feb  3 18:26:05 2026 GMT
        Subject: CN=E5979B2127280F84103DFAA38AE12BC84C294C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:17:e3:fd:a0:60:69:76:b7:b1:c7:68:bd:
                    71:50:02:39:ea:38:93:ff:10:12:56:a5:17:ff:08:
                    cb:bd:f5:34:06:31:10:f4:e6:b7:91:32:79:63:dc:
                    19:41:b1:b0:aa:89:be:e1:cf:37:40:b8:64:7a:79:
                    d8:75:93:0f:6e:4f:50:a1:c9:97:cb:aa:ed:fe:15:
                    6a:e9:19:7d:a3:01:22:b0:60:ad:1b:bf:7f:ce:de:
                    37:25:bb:4d:0c:96:9a:3f:47:13:35:7c:60:43:1d:
                    9c:2f:b6:5f:0c:cc:b7:b7:84:8e:50:87:1f:cd:e7:
                    b9:76:56:0a:af:4f:27:6b:10:67:c0:de:41:5c:cc:
                    0d:96:e8:59:10:1d:a0:93:b4:fe:f1:9a:e4:18:27:
                    96:18:c1:87:15:86:49:b2:d2:7a:40:28:86:67:ad:
                    f0:e4:b4:59:fa:bd:90:e2:0d:d0:be:10:0a:6c:6f:
                    ef:47:a5:5a:f5:04:a3:f8:9a:66:b2:5a:9e:d4:46:
                    4d:ed:f1:ea:03:6a:fc:4d:b7:5b:69:a4:a4:89:53:
                    9e:62:75:1f:15:6c:62:9e:25:52:b4:93:b7:25:ea:
                    11:ac:d6:97:f0:d8:17:c5:40:49:29:58:ec:7f:98:
                    5d:76:03:3e:54:70:bf:09:ae:fe:25:48:0b:be:1f:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:97:9B:21:27:28:0F:84:10:3D:FA:A3:8A:E1:2B:C8:4C:29:4C:07
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35352e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:de:a9:47:4f:6b:f2:1c:9d:96:26:0d:ea:fa:54:33:d0:ab:
         a2:7b:d0:db:35:99:9d:43:21:7c:f4:fc:43:ff:11:09:99:29:
         4d:cf:9c:7c:8a:d1:8b:ad:e2:0c:10:6e:77:c5:96:ef:7d:64:
         a9:82:6b:5d:c3:8f:51:42:5c:61:47:53:4b:6d:3a:89:75:1f:
         8b:ff:95:1e:fb:f6:41:95:f7:47:01:20:bb:4e:df:ec:a1:3a:
         ac:1d:95:66:4c:c7:4e:7c:f8:fb:b3:a2:d6:ef:f9:4a:db:10:
         6c:6f:8d:3e:a5:4e:2d:14:d1:25:d2:96:cf:d1:ac:ca:74:98:
         21:f4:9b:f6:9d:ac:c0:b4:c1:ee:4d:48:df:c1:08:9c:13:eb:
         81:c9:1b:72:10:1e:fd:c0:e8:4e:ea:2d:51:23:51:34:1d:d1:
         07:6a:da:e9:69:a6:30:29:4b:fe:7b:74:23:de:69:e5:ca:43:
         dc:99:64:0a:d2:f9:9d:39:88:f8:52:8a:0f:11:fc:56:bc:e0:
         9a:c5:01:d4:63:49:d2:8b:a8:f6:9d:ed:f2:02:db:9f:1d:b6:
         07:0b:7c:aa:01:13:09:41:38:8c:73:9b:71:63:1b:93:b7:08:
         4b:9b:51:ee:a8:30:22:52:a1:3e:6e:49:60:73:b1:33:89:8d:
         0a:4f:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:23 2025 by rpki-client