Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34392e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34392e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          pdfk08pYaKOjdb+lDQy3NCMuf7JbeeoItKAG8TcPXng=
Subject key identifier:   46:42:84:50:57:3D:61:0A:6C:5D:FE:35:43:9C:9D:86:54:04:AE:15
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       24B222B3CF2664D9D0E7A2494E5B9C41579356A0
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34392e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 05 Mar 2026 20:35:05 +0000
ROA not before:           Thu 05 Mar 2026 20:30:05 +0000
ROA not after:            Thu 04 Mar 2027 20:35:05 +0000
asID:                     17147
IP address blocks:        163.247.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:22:b3:cf:26:64:d9:d0:e7:a2:49:4e:5b:9c:41:57:93:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 20:30:05 2026 GMT
            Not After : Mar  4 20:35:05 2027 GMT
        Subject: CN=46428450573D610A6C5DFE35439C9D865404AE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:26:fd:63:ec:1f:04:17:dc:8f:71:8c:1f:
                    e1:f8:10:6a:fb:96:26:6d:ef:1a:e3:03:52:68:b1:
                    65:2d:6e:34:3b:1f:0a:fe:08:98:08:09:0c:9b:11:
                    6b:22:72:5d:7c:34:58:9a:15:e7:ca:19:c8:09:ac:
                    53:0e:b8:b1:c1:85:25:23:7d:01:b0:86:9b:8f:a3:
                    87:95:d8:fb:5a:be:c3:8b:6e:69:72:b0:25:f5:98:
                    07:db:b0:c3:a2:d2:98:75:9f:14:57:59:8c:ef:85:
                    f6:59:ee:76:4d:1f:f4:a5:19:70:81:90:05:15:6a:
                    61:9d:ca:54:3c:53:22:64:13:ca:9e:87:20:b5:f3:
                    52:31:15:ed:72:91:f5:55:78:0a:0e:18:aa:f1:4f:
                    b7:77:e3:20:1d:b8:da:d3:52:f5:81:85:e9:18:1f:
                    47:a9:69:c0:c3:e7:1e:a1:e5:28:94:ec:38:5f:c0:
                    01:e2:18:5e:37:8c:d5:da:53:35:d5:9c:65:ea:61:
                    1a:7d:96:79:c3:88:fc:6d:ee:cd:51:dd:30:0b:83:
                    ce:10:f9:7b:d2:7c:c7:a4:a6:81:d1:e7:ce:44:9b:
                    3c:94:c5:ec:3a:6c:d3:f3:ed:46:41:7d:61:17:b5:
                    16:03:eb:46:93:79:ed:ba:25:08:9f:cf:60:d9:f2:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:84:50:57:3D:61:0A:6C:5D:FE:35:43:9C:9D:86:54:04:AE:15
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34392e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:a3:b6:a3:ff:2e:38:59:6d:b7:ca:19:a8:13:8f:ea:1f:
         2a:4d:0f:e3:35:38:c7:c0:2a:b5:8a:45:41:fa:5f:22:45:6b:
         b3:0e:77:8c:93:55:78:23:b1:c6:22:2e:f3:25:03:56:bb:aa:
         ce:60:44:91:7d:b9:87:2a:c9:ca:df:23:db:6e:0a:57:bb:77:
         cd:51:b5:80:5d:5f:5c:23:e5:19:dd:0b:1c:d2:86:1a:11:88:
         7a:21:3f:23:0f:39:5b:b6:10:e8:34:83:7a:d9:8a:94:ca:43:
         58:ca:df:82:93:1a:31:05:61:0f:a4:48:65:67:c0:06:8a:cc:
         43:d8:ef:cd:0a:6a:d0:dc:40:e0:0b:09:f2:27:51:b7:5d:18:
         fa:86:5c:16:52:91:9d:dd:ce:e2:3a:c1:a6:52:59:5e:67:d8:
         17:f9:8e:d1:ef:11:0b:be:8a:15:c5:a5:58:72:b3:d1:82:81:
         ce:1f:29:45:09:03:60:95:85:97:7a:c6:06:cb:55:64:30:84:
         19:18:b1:22:77:bd:88:7c:9c:8c:70:9e:0e:f0:c5:f8:92:ab:
         1d:c0:b5:24:c0:e5:9a:6a:3b:0e:e8:d8:43:1e:10:dc:bb:70:
         b1:76:41:5c:63:3f:a4:75:37:09:c8:b7:0f:5d:ac:37:c0:75:
         86:76:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:57:20 2026 by rpki-client