Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e37302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          sDgDIPx0C+eEYQdiZoirsrXo2QkkumZLi99qKVRKI4g=
Subject key identifier:   C0:A1:CC:9B:2B:A5:89:9C:D5:CE:EF:D2:F9:69:DC:AF:CD:AA:DC:40
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       792CB420707E2FE3F0B4A71DF5086B8E41F96374
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37302e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 05 Mar 2026 20:35:03 +0000
ROA not before:           Thu 05 Mar 2026 20:30:03 +0000
ROA not after:            Thu 04 Mar 2027 20:35:03 +0000
asID:                     17147
IP address blocks:        163.247.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2c:b4:20:70:7e:2f:e3:f0:b4:a7:1d:f5:08:6b:8e:41:f9:63:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 20:30:03 2026 GMT
            Not After : Mar  4 20:35:03 2027 GMT
        Subject: CN=C0A1CC9B2BA5899CD5CEEFD2F969DCAFCDAADC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:78:b5:ac:63:6f:54:e3:d2:96:3d:14:c6:
                    e0:bd:ed:2d:c0:ca:01:43:9c:e6:eb:9e:4d:14:87:
                    f0:5e:2e:11:73:dd:09:a6:18:23:a5:37:6a:1e:ee:
                    59:70:65:14:ce:11:ec:26:51:c1:99:28:c6:68:63:
                    61:14:a6:8f:d8:f5:34:7b:54:fb:db:2a:98:d7:61:
                    34:1c:e3:d7:74:59:67:2e:c8:c1:65:eb:89:d3:9c:
                    4c:b3:b9:c4:18:d6:6a:02:28:50:d7:cd:c3:6d:e1:
                    aa:fe:fc:d8:e6:45:2e:3b:1a:19:38:b6:38:b4:45:
                    73:12:d3:ed:5a:44:3a:a4:29:6e:4b:00:d7:31:e5:
                    3e:b8:97:3c:db:b3:57:d7:4b:00:b6:ee:f5:0e:51:
                    65:1c:fa:24:95:0a:c4:82:ab:c4:a4:aa:6d:6d:bb:
                    5f:17:f0:22:6b:80:6a:de:fd:3a:59:4e:4c:34:49:
                    cf:01:9a:6b:5b:e3:9c:c8:42:99:57:61:89:09:42:
                    01:58:83:41:9a:e0:73:bb:b6:4a:02:e5:60:43:65:
                    f6:a5:5d:81:e5:d4:bc:b6:36:d6:e4:7b:fe:f9:90:
                    e9:57:83:ec:e1:a6:3a:9d:64:b9:c8:55:06:df:e0:
                    0f:2d:17:b2:b8:51:c6:89:a9:5f:77:a8:5c:9c:71:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:CC:9B:2B:A5:89:9C:D5:CE:EF:D2:F9:69:DC:AF:CD:AA:DC:40
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:f6:b4:67:59:c5:0d:cb:61:cc:9c:e8:1f:d6:e4:17:70:
         26:08:7d:65:c2:f6:75:c7:0b:a3:db:8e:33:2c:3b:00:9e:95:
         f1:11:8b:1b:30:37:23:f4:94:f2:cf:d3:29:2e:f4:5f:6d:3b:
         0d:ff:6f:77:f6:69:e0:3b:45:ef:c9:0a:1d:c1:5d:50:9a:10:
         03:3c:1e:35:93:c8:75:ae:ea:45:bd:f5:2c:ca:d6:84:84:13:
         e6:b4:74:2c:1e:10:9e:c2:3b:25:4c:42:18:43:96:da:72:c8:
         05:a9:7f:fa:5e:4e:a5:76:a6:3e:90:e5:9d:7b:a0:d5:db:ff:
         78:bf:0e:06:5a:cf:20:31:86:96:84:24:88:d3:5a:bd:de:59:
         ad:60:a1:9f:c8:1c:be:a4:56:cd:d4:ee:89:e8:2b:35:c5:6f:
         a3:14:f1:fe:0b:cf:de:53:a4:e2:53:e6:a7:36:57:3e:37:1c:
         6c:07:bd:77:c9:f8:b4:e8:94:b3:7b:be:cc:8d:ed:eb:e9:f0:
         45:8d:df:b9:7b:3a:53:61:d8:fe:0b:6b:de:2a:3c:31:84:3d:
         72:97:1b:0f:c8:6e:86:7b:41:1c:e1:da:e6:a1:6e:f7:2d:72:
         19:bc:33:ff:9b:61:cc:5b:a0:db:f6:9b:c6:d5:45:0e:93:1e:
         27:4e:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:57:22 2026 by rpki-client