Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35362e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35362e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          k9RJom7H7/FWw+dK+qyUxnor8PAdmLntiF88wKq46Co=
Subject key identifier:   D7:62:66:F6:89:E1:C5:79:77:41:09:E2:09:AF:4F:3C:71:35:9B:76
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       51FC406CA6AC114B04BE5AEF0732F3EBE16241FC
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35362e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 05 Mar 2026 20:35:02 +0000
ROA not before:           Thu 05 Mar 2026 20:30:02 +0000
ROA not after:            Thu 04 Mar 2027 20:35:02 +0000
asID:                     17147
IP address blocks:        163.247.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fc:40:6c:a6:ac:11:4b:04:be:5a:ef:07:32:f3:eb:e1:62:41:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 20:30:02 2026 GMT
            Not After : Mar  4 20:35:02 2027 GMT
        Subject: CN=D76266F689E1C579774109E209AF4F3C71359B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:1c:db:2b:be:11:01:0f:0d:83:a3:9a:0d:
                    d8:ef:24:3f:1a:de:96:d8:fa:fa:c0:49:43:74:6a:
                    67:19:47:08:c1:f2:39:46:54:74:2a:75:79:1a:a5:
                    57:9e:ac:70:a7:a7:8b:17:02:43:5b:48:62:e6:f2:
                    b2:92:d1:2c:f8:8b:59:29:ff:5f:9f:5d:66:23:3a:
                    57:aa:ce:4d:6d:14:3a:df:ba:f6:e2:75:13:64:29:
                    87:e9:e3:14:ea:14:8d:23:fa:e9:d5:e1:36:74:df:
                    95:95:32:76:41:60:bf:f6:00:69:2f:b3:c1:6e:e8:
                    1f:9b:32:d3:8b:2d:d3:1a:b7:08:cd:03:08:19:a0:
                    5a:26:e5:d9:36:00:30:75:90:46:3a:4e:3c:4c:fc:
                    7f:d5:2f:04:74:42:c3:33:f6:21:7b:e5:9b:89:c8:
                    d0:65:d3:9e:c2:6d:19:ba:b0:57:84:58:0e:69:0f:
                    a4:51:c4:54:10:d1:c7:3b:59:91:5a:96:fa:2c:33:
                    11:ec:43:d5:6f:32:fb:fa:47:3d:7c:ee:ac:f8:d0:
                    1b:ff:aa:7f:6d:0b:6a:e4:97:d4:45:e9:33:0b:18:
                    9a:3a:5f:b2:6b:02:4e:a4:ae:1c:f7:48:69:07:2f:
                    e5:88:b1:d2:98:7b:b4:8c:49:fe:e4:23:2e:c8:25:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:66:F6:89:E1:C5:79:77:41:09:E2:09:AF:4F:3C:71:35:9B:76
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35362e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:69:19:6c:b3:7e:86:21:33:d4:eb:71:77:74:7f:0e:e9:
         bd:17:ce:a7:5e:6e:96:a5:44:a3:89:4e:6e:80:9e:f2:bb:f8:
         12:ec:f2:ac:d1:21:61:23:22:33:98:1e:96:10:4f:47:8c:d7:
         70:04:80:e9:83:6e:fa:67:95:b7:9a:9a:3c:a7:b8:f6:61:81:
         43:25:ab:d0:55:f7:28:1a:70:55:fb:73:d3:f4:8e:a0:08:9c:
         7f:63:75:48:90:50:c6:5f:4a:6f:d5:75:07:8f:e4:8f:e3:3d:
         32:cf:e7:47:5d:00:d8:f7:6e:a8:53:81:45:67:94:c4:21:b7:
         59:94:a0:58:c4:7e:be:77:42:8c:ea:ec:24:54:a3:17:92:77:
         a1:52:74:bb:bb:af:8c:af:a7:1f:74:c2:7f:7a:8e:09:4e:e9:
         60:b9:5e:ff:9e:9e:aa:af:9f:ab:8c:57:c4:62:90:ef:78:31:
         91:28:45:78:d4:7b:09:43:6e:e9:80:d7:62:ce:65:d8:2e:a7:
         7b:7b:5a:cd:95:58:49:9d:0c:65:a3:15:ae:c3:35:fb:d9:0b:
         70:70:fe:d4:a3:a7:2c:c4:13:5c:6d:e3:6a:7c:44:6a:dd:76:
         9e:61:1a:41:9f:2a:ee:db:b1:51:3f:5e:06:17:3e:72:f2:ea:
         77:d6:a1:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUfxAbKasEUsEvlrvBzLz6+FiQfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNjAzMDUyMDMwMDJaFw0yNzAzMDQyMDM1MDJaMDMxMTAvBgNV
BAMTKEQ3NjI2NkY2ODlFMUM1Nzk3NzQxMDlFMjA5QUY0RjNDNzEzNTlCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vxzbK74RAQ8Ng6OaDdjvJD8a
3pbY+vrASUN0amcZRwjB8jlGVHQqdXkapVeerHCnp4sXAkNbSGLm8rKS0Sz4i1kp
/1+fXWYjOleqzk1tFDrfuvbidRNkKYfp4xTqFI0j+unV4TZ035WVMnZBYL/2AGkv
s8Fu6B+bMtOLLdMatwjNAwgZoFom5dk2ADB1kEY6TjxM/H/VLwR0QsMz9iF75ZuJ
yNBl057CbRm6sFeEWA5pD6RRxFQQ0cc7WZFalvosMxHsQ9VvMvv6Rz187qz40Bv/
qn9tC2rkl9RF6TMLGJo6X7JrAk6krhz3SGkHL+WIsdKYe7SMSf7kIy7IJQwjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU12Jm9onhxXl3QQniCa9PPHE1m3YwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3ODAN
BgkqhkiG9w0BAQsFAAOCAQEAm/dpGWyzfoYhM9TrcXd0fw7pvRfOp15ulqVEo4lO
boCe8rv4EuzyrNEhYSMiM5gelhBPR4zXcASA6YNu+meVt5qaPKe49mGBQyWr0FX3
KBpwVftz0/SOoAicf2N1SJBQxl9Kb9V1B4/kj+M9Ms/nR10A2PduqFOBRWeUxCG3
WZSgWMR+vndCjOrsJFSjF5J3oVJ0u7uvjK+nH3TCf3qOCU7pYLle/56eqq+fq4xX
xGKQ73gxkShFeNR7CUNu6YDXYs5l2C6ne3tazZVYSZ0MZaMVrsM1+9kLcHD+1KOn
LMQTXG3janxEat12nmEaQZ8q7tuxUT9eBhc+cvLqd9ahVA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 09:57:21 2026 by rpki-client