Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36352e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e36352e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          d4DBLxRiMRc2lPyOWh+ausYnCKhaqzQ0o6wMZx1Xcw0=
Subject key identifier:   7B:16:0B:2D:E9:16:1C:9D:60:A9:70:23:92:79:74:62:78:CA:C0:D2
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       4728532ECA4006D8DA45F6AFC6257FADD6B1E863
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36352e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 05 Mar 2026 20:35:01 +0000
ROA not before:           Thu 05 Mar 2026 20:30:01 +0000
ROA not after:            Thu 04 Mar 2027 20:35:01 +0000
asID:                     17147
IP address blocks:        163.247.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:53:2e:ca:40:06:d8:da:45:f6:af:c6:25:7f:ad:d6:b1:e8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 20:30:01 2026 GMT
            Not After : Mar  4 20:35:01 2027 GMT
        Subject: CN=7B160B2DE9161C9D60A970239279746278CAC0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:e1:ae:40:3b:06:55:5b:70:6a:ed:ff:3a:
                    af:da:f7:fd:9d:57:49:8c:ad:ed:18:63:e8:b3:bf:
                    db:dc:7d:ef:ce:21:68:8e:cc:d4:6d:9b:47:1d:13:
                    b6:26:b5:c3:81:fc:b6:8a:bb:32:e6:fd:66:15:fb:
                    f7:cd:30:47:ec:44:cb:02:92:07:97:49:c9:b0:03:
                    81:82:58:94:ea:75:bb:82:25:00:88:be:a1:9c:b5:
                    0b:a4:97:91:b6:9d:a9:c5:1d:6f:92:8c:ca:98:de:
                    87:87:91:df:4f:da:64:c1:51:63:5e:83:ed:cb:6f:
                    63:a2:d9:fd:84:38:21:03:93:45:4e:a1:de:2b:ad:
                    fa:f7:a4:60:d7:92:c9:09:fa:81:fd:ff:c3:30:ab:
                    66:7c:3a:61:03:a7:e4:f2:31:a1:6a:ed:41:0e:13:
                    d8:0d:f3:1d:4a:2a:97:0c:7d:2c:00:e3:c6:bb:ea:
                    ba:60:92:c1:78:92:f9:79:6e:23:99:b2:db:40:40:
                    2e:8a:41:b9:51:9a:14:43:8e:eb:5b:0b:de:a7:06:
                    7f:03:e7:ce:16:63:65:98:13:d1:7e:c1:7a:42:0d:
                    96:66:1d:9c:32:5a:3c:a3:6e:31:38:48:c6:60:b7:
                    65:02:23:3e:24:1b:06:e1:31:62:0d:d9:88:4f:6f:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:0B:2D:E9:16:1C:9D:60:A9:70:23:92:79:74:62:78:CA:C0:D2
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36352e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:57:12:f7:86:2c:fb:ed:86:c9:9b:05:36:f4:b1:46:ec:19:
         c7:94:29:a6:f4:56:4d:4e:90:3b:63:cc:de:52:fd:29:c3:b3:
         98:c6:e0:ce:86:58:0e:d1:b9:5a:21:45:6e:21:5d:a8:0f:72:
         4a:5e:75:a9:3c:81:9b:17:cd:46:e4:ff:a3:47:65:72:84:1e:
         6b:4b:9d:6b:4b:b0:39:1a:ca:6b:7e:fb:fb:5a:6c:7c:a7:ef:
         47:c1:6b:d1:e3:21:bd:65:f5:35:2a:93:63:f2:11:e6:ad:03:
         37:01:cd:b2:22:91:dc:8b:d6:35:09:39:5e:49:3e:d2:d3:70:
         b7:44:3d:69:b6:7d:32:22:b7:b2:46:9b:02:78:da:39:92:96:
         b0:f6:01:7a:e2:db:2a:01:9f:86:3d:a9:29:0b:96:d5:b9:01:
         f7:fc:09:cf:ef:49:14:43:4a:7b:c0:48:57:a7:30:ad:e6:6f:
         3f:36:92:da:fe:89:1a:a4:ac:cf:4a:51:04:f7:af:8b:6a:a1:
         67:04:ba:1b:47:0b:e3:76:ec:62:40:a0:13:66:0a:a5:20:ee:
         76:66:30:f8:5e:22:78:5a:5e:07:4c:fd:89:d1:13:2c:4a:da:
         81:53:fe:b8:37:a0:84:34:dc:fe:83:63:d8:9c:be:ce:e5:8b:
         6d:c4:60:87
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURyhTLspABtjaRfavxiV/rdax6GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNjAzMDUyMDMwMDFaFw0yNzAzMDQyMDM1MDFaMDMxMTAvBgNV
BAMTKDdCMTYwQjJERTkxNjFDOUQ2MEE5NzAyMzkyNzk3NDYyNzhDQUMwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxeGuQDsGVVtwau3/Oq/a9/2d
V0mMre0YY+izv9vcfe/OIWiOzNRtm0cdE7YmtcOB/LaKuzLm/WYV+/fNMEfsRMsC
kgeXScmwA4GCWJTqdbuCJQCIvqGctQukl5G2nanFHW+SjMqY3oeHkd9P2mTBUWNe
g+3Lb2Oi2f2EOCEDk0VOod4rrfr3pGDXkskJ+oH9/8Mwq2Z8OmEDp+TyMaFq7UEO
E9gN8x1KKpcMfSwA48a76rpgksF4kvl5biOZsttAQC6KQblRmhRDjutbC96nBn8D
584WY2WYE9F+wXpCDZZmHZwyWjyjbjE4SMZgt2UCIz4kGwbhMWIN2YhPbzqNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUexYLLekWHJ1gqXAjknl0YnjKwNIwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3QTAN
BgkqhkiG9w0BAQsFAAOCAQEAV1cS94Ys++2GyZsFNvSxRuwZx5QppvRWTU6QO2PM
3lL9KcOzmMbgzoZYDtG5WiFFbiFdqA9ySl51qTyBmxfNRuT/o0dlcoQea0uda0uw
ORrKa377+1psfKfvR8Fr0eMhvWX1NSqTY/IR5q0DNwHNsiKR3IvWNQk5Xkk+0tNw
t0Q9abZ9MiK3skabAnjaOZKWsPYBeuLbKgGfhj2pKQuW1bkB9/wJz+9JFENKe8BI
V6cwreZvPzaS2v6JGqSsz0pRBPevi2qhZwS6G0cL43bsYkCgE2YKpSDudmYw+F4i
eFpeB0z9idETLEragVP+uDeghDTc/oNj2Jy+zuWLbcRghw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 09:57:22 2026 by rpki-client