Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37362e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e37362e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          YosNMcr6cxz4LQ5AsIWIVACyUDeVgXuAMdvSc19bRpM=
Subject key identifier:   76:EC:27:0F:24:B7:8C:AF:3C:FE:78:9E:20:90:25:F4:DD:85:00:33
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       6C9D5F79A1111B657640B650C637FADFFD72952D
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37362e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:06 +0000
ROA not before:           Tue 04 Feb 2025 18:21:06 +0000
ROA not after:            Tue 03 Feb 2026 18:26:06 +0000
asID:                     17147
IP address blocks:        163.247.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9d:5f:79:a1:11:1b:65:76:40:b6:50:c6:37:fa:df:fd:72:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:06 2025 GMT
            Not After : Feb  3 18:26:06 2026 GMT
        Subject: CN=76EC270F24B78CAF3CFE789E209025F4DD850033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:15:1c:00:29:eb:99:3b:bd:ac:86:90:84:
                    61:58:00:99:32:a6:01:27:b5:05:e7:45:ea:d9:4a:
                    e4:65:6e:c2:b9:39:b4:23:05:08:7a:5a:63:2f:b3:
                    1e:68:c8:16:a7:be:06:79:1b:71:b8:a4:44:e5:24:
                    00:10:96:e1:22:fe:d3:e4:89:f3:86:ca:8e:ff:4d:
                    c2:85:8d:5b:14:52:9f:15:d2:33:37:9d:51:78:f3:
                    48:0c:76:8e:7e:28:ae:28:6b:3f:97:9e:a0:13:18:
                    8d:3f:7f:ee:29:d8:be:89:c1:42:a0:c5:20:01:a6:
                    6b:89:fc:62:fd:0e:1c:b2:e1:01:78:03:5b:48:65:
                    a6:fb:88:ec:88:62:35:cc:70:12:27:e0:b7:f8:75:
                    cd:73:05:ea:8d:7c:05:dc:8b:71:b5:89:dc:b8:80:
                    0b:fa:7b:4c:72:2d:ed:2d:85:c4:5c:7f:2f:7f:12:
                    92:28:59:49:98:7d:89:14:ec:85:5c:c3:52:a7:26:
                    2b:3c:d1:0e:69:97:8e:cb:9d:6d:b0:f1:68:71:11:
                    56:eb:c4:70:96:a6:6f:42:35:ef:56:5e:97:22:5d:
                    48:32:30:68:dd:e1:86:92:62:29:d2:c3:e3:74:5b:
                    b9:20:cc:08:07:76:5b:93:ed:91:13:15:da:3d:d4:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EC:27:0F:24:B7:8C:AF:3C:FE:78:9E:20:90:25:F4:DD:85:00:33
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37362e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:c6:4f:5f:6b:83:96:77:4c:9c:1a:78:67:87:bc:07:35:
         fa:8a:98:06:e2:eb:4a:94:47:e6:7c:f7:23:93:73:34:44:0a:
         a2:13:cb:60:7f:c8:8e:29:41:61:c0:23:a2:f6:85:d4:de:25:
         20:c7:f1:91:0f:67:fa:48:92:c7:c2:04:1a:f6:20:e7:40:a5:
         55:f2:46:7e:02:06:ab:f5:3c:a3:86:11:8d:9a:95:49:4d:ff:
         65:f6:41:27:1f:79:37:70:49:6d:17:84:d9:d3:63:41:26:59:
         3e:ec:50:c4:03:1d:e7:bf:f9:27:70:86:09:45:b2:2a:71:84:
         92:01:fe:a8:e3:70:ac:c2:76:f1:ea:94:d7:14:3c:a5:72:b5:
         e6:a2:cb:f9:c5:43:39:0e:fa:71:87:2e:fc:f4:51:49:f4:69:
         9d:9f:88:ae:3d:2d:81:9f:b5:a2:f0:18:2e:c1:6d:5a:99:1b:
         bc:9e:05:53:77:b1:d1:e2:fb:1d:e6:0c:b7:fb:9e:05:31:89:
         ee:80:c3:18:f4:34:36:12:62:73:4d:5b:39:b4:0f:27:85:81:
         c9:61:e5:31:f6:32:1b:72:52:41:d9:dc:cf:65:bb:b3:26:50:
         24:95:b3:d3:59:a3:26:72:f9:95:30:9e:cf:f6:75:f5:a4:2e:
         80:cc:65:5d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbJ1feaERG2V2QLZQxjf63/1ylS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNTAyMDQxODIxMDZaFw0yNjAyMDMxODI2MDZaMDMxMTAvBgNV
BAMTKDc2RUMyNzBGMjRCNzhDQUYzQ0ZFNzg5RTIwOTAyNUY0REQ4NTAwMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0BUcACnrmTu9rIaQhGFYAJky
pgEntQXnRerZSuRlbsK5ObQjBQh6WmMvsx5oyBanvgZ5G3G4pETlJAAQluEi/tPk
ifOGyo7/TcKFjVsUUp8V0jM3nVF480gMdo5+KK4oaz+XnqATGI0/f+4p2L6JwUKg
xSABpmuJ/GL9Dhyy4QF4A1tIZab7iOyIYjXMcBIn4Lf4dc1zBeqNfAXci3G1idy4
gAv6e0xyLe0thcRcfy9/EpIoWUmYfYkU7IVcw1KnJis80Q5pl47LnW2w8WhxEVbr
xHCWpm9CNe9WXpciXUgyMGjd4YaSYinSw+N0W7kgzAgHdluT7ZETFdo91JTBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUduwnDyS3jK88/nieIJAl9N2FADMwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3TDAN
BgkqhkiG9w0BAQsFAAOCAQEAWevGT19rg5Z3TJwaeGeHvAc1+oqYBuLrSpRH5nz3
I5NzNEQKohPLYH/IjilBYcAjovaF1N4lIMfxkQ9n+kiSx8IEGvYg50ClVfJGfgIG
q/U8o4YRjZqVSU3/ZfZBJx95N3BJbReE2dNjQSZZPuxQxAMd57/5J3CGCUWyKnGE
kgH+qONwrMJ28eqU1xQ8pXK15qLL+cVDOQ76cYcu/PRRSfRpnZ+Irj0tgZ+1ovAY
LsFtWpkbvJ4FU3ex0eL7HeYMt/ueBTGJ7oDDGPQ0NhJic01bObQPJ4WByWHlMfYy
G3JSQdncz2W7syZQJJWz01mjJnL5lTCez/Z19aQugMxlXQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:07 2025 by rpki-client