Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e36342e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          aSi8XRVOt7VYvBy+Z5iPN+puVWB2tYBTe1IwDLregcY=
Subject key identifier:   9C:56:64:8A:64:24:13:A8:59:87:D7:AE:02:C6:A9:6C:5C:57:31:71
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       6BB8D2B6A5048DCA9B95A3D151FD7641AD089115
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     17147
IP address blocks:        163.247.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b8:d2:b6:a5:04:8d:ca:9b:95:a3:d1:51:fd:76:41:ad:08:91:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=9C56648A642413A85987D7AE02C6A96C5C573171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:92:aa:68:fd:42:fb:17:25:3d:0e:1c:22:
                    f1:2c:30:f8:bd:76:d1:85:17:3d:73:48:48:54:de:
                    6d:cd:81:ad:75:3e:94:56:f7:39:eb:7b:58:6a:f2:
                    88:56:1e:0d:04:92:fa:04:d6:91:92:bd:9b:3a:3d:
                    26:93:90:32:5e:48:d0:ba:4f:8f:1e:c6:06:46:1f:
                    c5:b6:fe:78:c8:6b:b9:ff:ac:f8:e3:f3:3f:02:52:
                    bd:17:a7:f4:93:44:8e:59:b8:09:6b:b8:4a:f2:a7:
                    aa:5b:cf:8a:43:27:45:85:29:d4:30:3a:9d:a7:39:
                    a6:a0:f4:78:51:d1:25:ec:5e:01:87:fd:64:6b:c1:
                    f9:04:3b:c2:6c:15:ee:20:bf:6f:f8:90:85:1d:61:
                    cd:cf:83:0d:5b:3c:4e:1f:1c:7c:2b:94:58:c5:0d:
                    e3:f1:5a:af:ac:b5:c0:55:91:48:e1:11:9d:db:c5:
                    cc:2b:fd:ce:a4:4c:b1:91:1a:a9:b5:79:68:8f:54:
                    c7:fd:0a:09:07:fb:c7:27:18:1d:29:0c:a4:56:3e:
                    36:dc:34:e6:36:2a:45:db:3d:0b:d1:29:91:57:6f:
                    2b:f6:90:2f:15:49:e7:2c:26:78:cd:b3:90:1d:8e:
                    ff:c5:13:07:c3:f4:47:0d:a4:0e:dc:cf:32:99:ab:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:64:8A:64:24:13:A8:59:87:D7:AE:02:C6:A9:6C:5C:57:31:71
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:41:9d:22:50:97:fb:f9:35:f2:be:41:f6:78:95:9b:a7:
         b3:09:03:e7:7b:0c:67:c7:44:2a:8c:7f:53:7b:0e:61:7e:96:
         54:e9:5d:f1:b0:81:e5:ed:e3:99:e3:d8:ef:a3:e1:09:f3:0b:
         8e:36:43:2d:2d:3a:05:fd:49:e0:38:17:7d:38:fd:a6:85:bb:
         83:98:cd:9c:b6:c8:7f:17:0b:bb:0b:cb:26:46:cb:a7:1e:94:
         22:d0:c7:9d:c6:cc:b6:dd:30:95:53:fa:10:c4:bb:88:52:aa:
         1e:e6:a6:02:cb:22:de:ce:60:3b:3f:54:e1:e4:1d:55:7a:b4:
         4d:f2:df:f0:6a:09:79:07:38:61:53:3f:39:98:98:1b:45:8a:
         70:18:23:3e:e9:93:39:68:23:cd:1f:9f:50:04:12:5d:98:ee:
         dc:e3:77:74:57:f8:1a:25:7c:69:c6:94:ee:49:7f:ea:8c:b7:
         4d:ea:dc:b3:13:ed:52:24:fe:a4:4c:b6:d2:58:b6:97:3c:7f:
         61:4e:e4:d7:dc:1f:a9:71:2f:7b:40:6c:07:0c:ad:7e:1c:a7:
         39:c2:4d:39:86:84:cf:a1:d7:dd:bc:9d:43:cb:e4:db:ce:d0:
         a9:0e:78:68:ce:87:55:a3:1f:48:c8:ac:5f:33:0f:a9:96:e9:
         cd:4c:0b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:28 2024 by rpki-client on console-fra.rpki-client.org