Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e39302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          bbUHjEgw2XAQU6UsgdoK3IvrYtAd31oQz06wKaGiU+k=
Subject key identifier:   0B:95:77:A5:1E:63:0F:E3:0F:51:04:58:5A:6D:C1:19:73:F0:CE:81
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       4F1C11EFC0E87BD9495BA8A923562A13632E9A59
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39302e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:01 +0000
ROA not before:           Tue 04 Feb 2025 18:21:01 +0000
ROA not after:            Tue 03 Feb 2026 18:26:01 +0000
asID:                     17147
IP address blocks:        163.247.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1c:11:ef:c0:e8:7b:d9:49:5b:a8:a9:23:56:2a:13:63:2e:9a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:01 2025 GMT
            Not After : Feb  3 18:26:01 2026 GMT
        Subject: CN=0B9577A51E630FE30F5104585A6DC11973F0CE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:76:96:e3:f4:3e:f7:46:3b:62:26:f0:f3:
                    58:e0:52:0e:d6:4d:b6:f4:72:52:92:2c:cb:43:f3:
                    c7:ed:09:55:56:39:46:58:3d:a9:68:0c:a4:4b:41:
                    a0:c0:d1:e9:71:d3:4f:b3:0a:f6:79:d1:80:10:33:
                    cc:12:71:9e:68:07:13:24:1e:5a:b0:80:4b:f2:c8:
                    ab:d2:d5:01:fb:f2:1b:ad:1a:3e:53:db:bb:18:ab:
                    0f:c5:64:ab:a3:aa:ba:81:e8:bb:0e:22:48:2c:02:
                    57:27:08:6d:75:64:9f:3f:18:27:3a:8b:10:51:5f:
                    63:6d:2b:37:ef:77:19:fd:bf:7a:13:09:f5:e2:bc:
                    99:0a:a8:1e:8c:10:a7:f3:da:40:a3:05:4a:e5:01:
                    16:51:f9:b5:df:71:ff:1d:63:50:74:b8:7a:fd:9f:
                    eb:3d:6c:38:f0:20:04:91:9e:67:73:aa:b1:b1:f9:
                    9a:44:38:3b:4e:ef:b7:a4:68:ae:d5:74:9f:2b:85:
                    e0:0d:ec:b0:3f:7e:85:dc:a1:0a:7f:74:59:87:de:
                    2c:e2:cd:79:94:22:2e:3e:22:f3:e2:db:7d:f0:87:
                    e2:88:47:14:2f:c3:88:c2:db:69:70:dd:e3:2e:0a:
                    cd:15:d5:a7:34:b9:8d:68:d5:c7:ed:fe:e4:5b:82:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:77:A5:1E:63:0F:E3:0F:51:04:58:5A:6D:C1:19:73:F0:CE:81
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:85:05:91:79:9c:8e:1a:48:41:8d:89:72:dd:31:ac:20:
         ef:8d:86:7a:a2:bd:70:20:93:b9:7c:d4:33:14:41:17:6c:1d:
         bc:87:85:a8:dc:3b:3b:45:e4:d8:e5:fc:50:88:9c:2c:15:08:
         d5:90:02:b9:e5:af:34:ab:69:0a:f6:27:11:44:b6:17:81:ce:
         69:11:a3:bd:6a:65:f8:e3:af:8d:45:59:9e:87:50:c1:71:0e:
         01:bc:d0:a6:d1:6e:62:06:63:dc:0d:e6:42:3d:7c:09:bc:21:
         d2:ea:ac:e6:d2:f2:70:ec:5c:97:72:ce:18:c9:b5:09:f5:a1:
         d6:da:ee:4f:1a:89:4a:9e:68:43:dd:21:76:2f:fd:04:d6:e9:
         2e:ab:a1:2e:3a:9e:8f:0a:f9:a5:2c:ec:b2:a7:f9:a9:ea:d1:
         81:af:dd:a0:97:f8:93:f7:b7:fe:ba:23:3c:d9:e3:c2:f0:7e:
         c1:24:21:72:0f:88:31:eb:9a:28:e7:3c:f2:4d:86:ed:31:41:
         39:1d:dd:64:9e:7b:56:be:c5:cf:bb:9a:3c:e0:70:9b:e6:d0:
         52:e7:e1:9a:f7:2f:26:67:c3:f6:e1:9f:9c:d0:a6:47:81:5d:
         d2:3b:28:f5:c9:aa:19:28:09:69:d3:fe:9e:e4:62:b4:95:95:
         63:7a:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:23 2025 by rpki-client