Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39332e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e39332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          MHfNYpGUd0ntpsopslnaoY1MBbuYo/+2graOfxQ+gI0=
Subject key identifier:   77:2C:48:74:50:BA:5A:C3:F8:B8:72:51:4B:78:5A:FD:1D:0A:28:32
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       1697FA2BE47210B26E2C23C9D7CEE5D18D37E125
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39332e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:02 +0000
ROA not before:           Tue 04 Feb 2025 18:21:02 +0000
ROA not after:            Tue 03 Feb 2026 18:26:02 +0000
asID:                     17147
IP address blocks:        163.247.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:fa:2b:e4:72:10:b2:6e:2c:23:c9:d7:ce:e5:d1:8d:37:e1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:02 2025 GMT
            Not After : Feb  3 18:26:02 2026 GMT
        Subject: CN=772C487450BA5AC3F8B872514B785AFD1D0A2832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:5e:80:62:1e:a4:86:ac:fb:30:e5:66:eb:
                    d2:f0:68:d5:b4:08:25:bd:e6:f9:f4:bc:a4:0c:c2:
                    c5:f6:28:6d:97:53:28:5b:fc:9c:b7:7e:9d:25:d5:
                    d8:1a:89:19:7d:12:f0:d0:b2:ed:18:3a:a3:a6:bb:
                    98:e0:92:df:8c:f9:c1:9d:cd:9c:68:c2:97:05:ad:
                    3b:ff:dd:34:dd:67:05:09:52:87:6c:99:8a:ae:76:
                    9c:01:11:11:b0:09:8b:90:be:36:f6:86:55:9d:61:
                    98:0b:84:88:9f:8f:9c:f9:a6:91:1e:a3:ff:8c:e8:
                    a8:97:df:00:32:6f:eb:1d:62:45:c2:db:c0:75:03:
                    f5:df:f0:1a:61:56:9e:19:76:32:ec:09:54:48:2c:
                    2b:99:c7:1d:fb:a8:af:2f:68:31:be:88:a7:25:df:
                    09:76:75:7a:82:88:b5:d5:6d:61:75:6b:a7:0e:fc:
                    2e:6a:ce:bb:6a:97:fb:39:90:fb:bc:e6:3f:77:4b:
                    cb:de:f6:b1:a9:fa:06:0a:67:76:cd:a1:a9:00:f3:
                    f7:f6:f5:0c:c5:11:c8:f0:fb:4c:d9:fe:9e:87:92:
                    b4:74:41:d1:6b:5a:cf:48:be:7c:aa:3a:88:47:7e:
                    ff:38:50:af:01:0a:dd:de:c3:2b:33:72:27:51:ad:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:48:74:50:BA:5A:C3:F8:B8:72:51:4B:78:5A:FD:1D:0A:28:32
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e39332e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:f0:5e:a6:ab:c5:95:2c:7e:e8:34:b7:a7:68:7c:57:68:
         3a:9d:74:90:09:5e:95:92:8a:f2:50:02:0e:6c:77:f8:58:22:
         70:38:af:8c:e2:d4:7a:8a:5a:fc:85:d1:ba:eb:8b:37:70:89:
         c1:f9:2e:10:e0:82:bd:f8:66:80:de:0d:17:77:bf:39:38:52:
         d0:51:cb:1d:92:a3:69:b3:86:fc:62:ec:dd:9c:67:d3:2c:8d:
         13:34:5a:db:5e:e7:56:d4:fd:ac:be:6c:63:bc:c3:9c:6f:13:
         00:1b:aa:23:7f:21:cc:d2:d2:0c:5e:59:0c:de:d7:39:1d:6a:
         73:00:2d:eb:41:da:4f:7f:20:ea:b3:d3:9f:20:23:ad:1e:b0:
         c4:61:a8:cf:a2:0c:43:56:18:42:6d:47:6c:5f:6d:89:3d:d9:
         cf:ab:ed:31:3f:36:7c:20:8e:f6:49:d3:97:c9:99:bb:4a:89:
         7f:5d:9b:88:06:5a:4e:3c:1c:bb:df:7c:15:de:18:fc:30:e8:
         d0:22:11:9d:8a:c0:0d:90:c4:18:89:4e:9b:55:80:b6:ac:49:
         9d:76:35:02:fa:db:d4:c1:c0:92:e5:6e:95:e4:88:62:54:d6:
         67:19:ee:5a:94:af:9e:31:30:6a:d7:e0:88:37:2a:c6:e4:43:
         03:1f:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:04 2025 by rpki-client