Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e37372e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          H05Wx2KT5JpVZESI/5T1dc1kPm56jkBFzqvFvnCzyBw=
Subject key identifier:   C5:73:73:63:44:59:FD:8A:60:DB:CB:16:78:1E:C7:5F:19:46:CE:91
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       5469AE4BF65BF0A44BAD902F1450A4AB6FE501F4
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:12 +0000
ROA not before:           Tue 05 Mar 2024 17:44:12 +0000
ROA not after:            Tue 04 Mar 2025 17:49:12 +0000
asID:                     17147
IP address blocks:        163.247.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:69:ae:4b:f6:5b:f0:a4:4b:ad:90:2f:14:50:a4:ab:6f:e5:01:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:12 2024 GMT
            Not After : Mar  4 17:49:12 2025 GMT
        Subject: CN=C57373634459FD8A60DBCB16781EC75F1946CE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:a4:26:04:f8:c0:e8:56:c0:0a:be:f7:b2:
                    c9:59:c6:17:a8:0e:65:ae:b3:88:3d:a9:e3:f7:f8:
                    ac:e1:e3:49:e8:ca:ed:bc:3e:02:f0:0a:7d:05:c9:
                    ac:4d:e8:ca:e9:d4:c2:92:98:04:f3:3b:d6:e5:15:
                    c3:52:85:d7:95:c6:8a:94:7d:54:6b:8a:73:cd:9e:
                    66:42:20:77:ec:41:82:9d:22:59:e1:f8:17:d0:bb:
                    9e:16:d5:dd:c1:64:4a:6d:c1:20:77:ca:d1:b3:ec:
                    63:d8:07:d5:b9:37:ae:d2:8f:a6:e9:f9:8b:2b:2f:
                    71:d3:ce:9d:ab:e6:15:6c:88:c0:67:21:a1:b4:70:
                    aa:99:d1:31:5d:6a:59:bd:2b:13:de:5a:19:6f:8b:
                    0e:69:7b:6a:5c:21:ef:26:1f:c3:31:01:b4:22:58:
                    aa:50:b5:e6:e5:8b:e0:d5:45:15:49:4c:fe:59:16:
                    a4:b7:65:d5:17:55:9a:d4:9f:7b:b7:ce:51:21:25:
                    c1:26:cb:db:c2:7f:2e:f4:21:ab:cd:ed:33:05:d7:
                    ce:33:3b:83:32:e4:81:7b:6a:c7:d3:30:79:9c:cc:
                    2f:8d:f0:3e:05:af:13:46:60:71:43:d0:6a:56:15:
                    0b:5b:d8:19:f5:83:b1:ce:14:af:f1:7e:c8:12:ca:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:73:73:63:44:59:FD:8A:60:DB:CB:16:78:1E:C7:5F:19:46:CE:91
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37372e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:40:19:c3:d7:e5:af:96:15:72:34:7c:c8:b4:18:81:19:56:
         38:ce:19:bf:af:9d:ef:5d:1b:b6:08:b3:99:bf:b0:c2:18:e0:
         29:db:66:3b:f2:81:97:bb:9c:8a:81:74:19:ec:b6:c3:fe:ea:
         93:22:7d:2e:06:bc:00:7c:87:40:36:dc:5f:06:f8:2d:45:60:
         30:3f:70:37:78:62:e9:62:51:ec:5e:94:25:b1:94:cb:17:c9:
         5d:2f:b1:c3:4e:18:09:eb:af:c7:58:2d:31:13:f1:11:94:6d:
         2a:ae:37:c3:c4:e0:23:52:0e:f8:db:2a:a0:04:92:ee:ff:24:
         cf:84:6e:e6:34:f5:0a:78:41:e8:03:0e:e0:cb:a7:a4:a9:dc:
         ca:1a:bb:5a:7e:79:a6:b0:ed:3e:ff:0f:91:d5:71:7b:a1:1b:
         03:41:d0:4b:98:05:c7:d2:e8:c1:eb:c1:22:fe:13:da:08:ea:
         44:a4:01:a5:23:4f:f7:2b:3f:20:56:e2:9a:39:01:f9:0c:82:
         17:7e:12:26:65:c5:2e:7e:30:67:c5:bd:61:89:9c:71:fd:13:
         c3:91:2a:08:d0:91:44:d2:e5:de:05:f6:7d:3e:78:5a:dd:83:
         ba:ab:33:16:b1:36:bc:ab:fa:b3:4d:60:e0:d2:ca:02:94:16:
         3a:a6:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org