Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36332e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e36332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          34hOlFOSa+simiC9O1Naf6NrxIQmJHQuO3xGDo3L6ys=
Subject key identifier:   B1:F5:45:3A:46:41:B3:79:06:CE:DF:74:0E:88:3D:31:28:2D:59:96
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       41F9A01DA4B9E2C85A8253FC8A78246D5DC86376
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36332e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:11 +0000
ROA not before:           Tue 05 Mar 2024 17:44:11 +0000
ROA not after:            Tue 04 Mar 2025 17:49:11 +0000
asID:                     17147
IP address blocks:        163.247.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:a0:1d:a4:b9:e2:c8:5a:82:53:fc:8a:78:24:6d:5d:c8:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:11 2024 GMT
            Not After : Mar  4 17:49:11 2025 GMT
        Subject: CN=B1F5453A4641B37906CEDF740E883D31282D5996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:4b:25:92:0f:38:4d:f1:e0:a0:f0:2a:66:
                    f9:44:65:d8:12:3d:6a:1a:28:f4:fc:d2:b4:2a:f1:
                    8a:a5:2f:c1:52:55:eb:27:ff:f0:64:9e:2f:39:f3:
                    04:c9:37:51:8d:64:fc:28:f3:90:71:c5:cb:46:6f:
                    7d:96:13:6c:58:74:fd:a3:c9:e0:5a:b7:5e:30:54:
                    90:41:c4:0a:7e:07:ed:e3:c4:ae:8b:39:f7:ef:56:
                    a5:92:e1:9a:eb:d0:ef:17:9a:32:ed:fb:43:c6:5f:
                    62:34:bc:5f:65:af:09:02:ab:2e:02:6d:0d:48:4b:
                    1b:ee:d5:43:4e:44:64:2d:25:cb:c1:dd:b9:87:00:
                    01:97:ef:34:76:a8:ed:e3:21:68:65:3b:fe:c5:a9:
                    85:7e:04:85:2e:c6:9c:bb:ba:a3:fd:c2:1c:cb:63:
                    a4:6b:53:59:af:c4:01:5b:c2:2e:1c:c2:c5:2b:37:
                    f9:07:db:0a:bb:f8:99:62:6a:d5:9b:8e:84:b3:b9:
                    aa:d3:29:5f:79:84:4a:18:f9:59:56:e2:99:46:88:
                    61:2a:57:51:f1:41:1f:49:2c:ee:56:4a:bb:fc:f5:
                    2f:16:9a:73:45:55:29:f2:db:c3:e9:39:55:66:90:
                    cc:55:55:e2:fc:f5:30:44:6f:f7:e7:bc:fa:f8:d2:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:45:3A:46:41:B3:79:06:CE:DF:74:0E:88:3D:31:28:2D:59:96
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36332e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:b7:45:69:3d:7c:d5:3a:4d:19:c2:d9:e0:10:ba:da:e0:
         50:2b:8b:c8:95:16:23:85:be:65:a6:7f:4a:ef:7b:61:47:f6:
         37:eb:09:d6:a6:6b:bf:86:1e:60:ee:29:b9:99:ef:87:60:5c:
         e7:08:2c:8b:d0:cb:fb:e8:32:de:7f:b6:df:97:06:67:c3:1f:
         66:09:66:05:8b:0e:98:bf:fa:48:29:30:de:ae:8f:22:2e:4b:
         04:13:a5:ca:57:c5:e9:cd:12:d0:23:79:12:3f:98:d9:eb:88:
         af:c1:59:84:af:5d:19:7b:db:aa:5c:65:78:62:57:c2:25:91:
         fd:11:11:89:33:ef:de:34:02:bd:c1:94:ae:3a:bd:10:31:a5:
         72:a0:ff:2d:1d:b8:fb:3e:a7:62:7c:e2:41:ea:27:bc:80:51:
         34:c6:a9:91:b4:54:54:6d:9f:0f:00:93:2e:9b:bb:a8:92:f5:
         4e:5b:40:39:80:f4:c4:8e:cf:cc:6c:25:f7:d5:5b:84:91:8c:
         65:4a:f8:f9:b0:0e:c8:c3:40:2f:d3:df:2f:2b:32:6b:d3:45:
         93:8b:73:b5:4a:87:b4:e1:1c:9b:e6:82:f8:c7:f7:de:1e:09:
         da:41:80:52:59:55:ed:1c:51:43:04:20:23:69:74:f8:9a:55:
         7c:fa:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org