Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e38342e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e38342e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          Zj1x3Wb38ATyAeycJLKhkulvuSNoxoczZMFbKf9HMqE=
Subject key identifier:   15:CC:90:F2:E4:9A:D4:C9:EA:AF:FD:79:E0:F5:67:91:02:62:BC:69
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       5A283AB92A6516D02E56EF6F19CEEAB75CCCB507
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e38342e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:03 +0000
ROA not before:           Tue 04 Feb 2025 18:21:03 +0000
ROA not after:            Tue 03 Feb 2026 18:26:03 +0000
asID:                     17147
IP address blocks:        163.247.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:28:3a:b9:2a:65:16:d0:2e:56:ef:6f:19:ce:ea:b7:5c:cc:b5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:03 2025 GMT
            Not After : Feb  3 18:26:03 2026 GMT
        Subject: CN=15CC90F2E49AD4C9EAAFFD79E0F567910262BC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:a0:da:92:cd:62:b9:0d:de:e7:7d:34:5f:
                    9c:6a:4c:77:c9:68:6c:be:0d:21:66:b9:01:11:03:
                    6c:9e:fd:f4:4c:8b:b1:2a:5a:4b:87:6a:fb:b4:56:
                    95:1c:e7:71:a9:0e:8c:13:45:c2:8d:91:73:07:0f:
                    2f:53:b0:6e:a2:91:d8:88:10:65:c6:5a:45:74:6f:
                    9f:09:9a:9d:07:2e:89:27:ec:b9:1b:0a:37:ac:ae:
                    fb:55:37:d7:c8:e5:5d:58:5a:b3:20:83:8e:56:ff:
                    47:e0:a5:79:ab:38:d8:af:fb:b6:30:d4:14:93:59:
                    b0:43:81:85:03:10:36:1f:1b:23:d1:58:65:50:7a:
                    ca:6c:b4:e1:68:da:4f:06:c6:f4:f0:75:d8:87:13:
                    a9:3f:1d:58:a5:50:31:3f:81:1c:f9:c5:a2:be:c4:
                    2d:25:7e:15:aa:cb:49:0c:e5:58:09:fa:d2:69:6f:
                    70:d0:64:b1:80:02:fd:b2:76:c1:fe:a5:d3:19:1a:
                    49:90:ff:3c:8c:13:4b:5f:87:da:0d:75:0c:7d:ed:
                    2b:14:00:7c:47:6d:5b:2b:10:dd:b2:42:e7:b4:4b:
                    d1:91:c8:a7:a4:71:5c:14:f3:69:9c:46:27:2e:38:
                    11:9d:d2:3e:ee:0e:65:cd:b0:2d:ab:73:11:0d:75:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:90:F2:E4:9A:D4:C9:EA:AF:FD:79:E0:F5:67:91:02:62:BC:69
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e38342e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:6f:9a:7d:7d:42:74:2e:de:fb:28:36:48:c3:b4:e4:f7:
         a6:29:60:75:d7:1d:24:5f:28:93:c9:42:fa:3f:2b:8e:6d:8e:
         7c:4f:95:2e:fa:e6:dd:6f:43:a2:d2:bf:41:ec:a4:ce:3d:73:
         aa:48:92:e9:52:82:d1:ec:61:fa:46:42:cc:eb:b9:f2:29:86:
         6e:62:51:d4:08:62:58:6b:4a:8d:5e:a9:df:0e:27:ca:03:eb:
         a7:02:03:50:3b:d3:7b:cf:e6:1c:ea:d6:15:69:1a:e0:53:df:
         bc:2b:d4:7b:b9:1f:04:62:db:77:fa:d2:a0:2f:0b:d4:7f:82:
         54:57:e8:9f:70:de:25:57:76:0a:f3:55:b0:0c:58:2d:e9:72:
         de:9e:cb:4e:cb:9c:58:5d:07:ad:a6:1e:33:e5:a8:af:9c:2f:
         f7:66:fc:38:06:c1:17:39:8c:29:2f:55:fb:9f:96:8c:ae:56:
         64:78:58:00:87:c5:a1:e4:7e:f8:b4:cf:f2:e2:87:71:90:a8:
         ed:b4:5e:ce:a8:22:b8:e2:f2:04:45:ba:22:75:45:9f:2a:ca:
         94:56:26:57:12:22:97:45:a7:e5:e8:98:7e:5c:0b:83:b9:82:
         c5:fb:b2:f9:ba:71:3e:fa:f8:26:d1:1c:03:94:38:04:f3:77:
         8f:ec:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client