Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37352e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e37352e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          C/HpGU9K08fuJEmyM0TvmpDdldTgv21bu4fOiyxlof8=
Subject key identifier:   BE:5B:CB:D9:31:74:D6:77:7D:1B:43:D1:1D:DC:BE:15:7A:A9:F2:54
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       5398865C742CEB1ECEB64E8CFE70F0E15785B3D2
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37352e302f32342d3234203d3e203137313437.roa
Signing time:             Thu 05 Mar 2026 20:35:01 +0000
ROA not before:           Thu 05 Mar 2026 20:30:01 +0000
ROA not after:            Thu 04 Mar 2027 20:35:01 +0000
asID:                     17147
IP address blocks:        163.247.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:86:5c:74:2c:eb:1e:ce:b6:4e:8c:fe:70:f0:e1:57:85:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 20:30:01 2026 GMT
            Not After : Mar  4 20:35:01 2027 GMT
        Subject: CN=BE5BCBD93174D6777D1B43D11DDCBE157AA9F254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:ed:a6:cf:19:08:90:9e:f4:f2:83:a2:87:
                    c3:eb:2e:fe:49:c9:c6:62:1d:27:29:9d:b9:2d:40:
                    77:2c:14:b8:7f:b0:c2:00:b2:42:d3:a3:b6:06:f8:
                    e4:4e:b0:10:04:0a:52:65:e8:aa:64:64:55:d8:51:
                    d4:19:1d:24:97:d9:f3:5d:89:84:85:ab:cb:13:d7:
                    1e:33:1c:eb:31:c1:88:f5:2b:0b:72:21:3e:03:1c:
                    81:3e:85:6e:15:12:e4:ad:ac:b5:e3:53:03:d9:61:
                    93:23:67:98:c3:75:7d:56:61:8e:fd:4e:84:8a:50:
                    1d:81:c6:e5:cc:8a:d0:c7:0b:eb:c1:8b:e1:0e:38:
                    f0:78:80:5e:7c:be:82:e5:04:b9:25:09:cf:b1:7c:
                    7c:75:b7:aa:f5:ca:0d:5e:a4:55:3e:80:77:17:c6:
                    32:43:90:1c:2c:e4:bd:b4:90:ab:bb:6e:91:31:fe:
                    ff:83:97:5c:29:47:07:6a:36:6e:b1:93:3d:df:b3:
                    fd:32:de:72:21:33:2b:80:7c:5b:66:a7:5b:0d:5b:
                    28:91:03:51:8e:bd:16:2c:db:a0:c2:45:49:17:2a:
                    f2:d1:d4:7d:f4:78:24:0c:99:38:8f:ac:61:ed:88:
                    32:c5:8b:9d:57:76:7d:71:9c:e3:09:a0:4d:dc:2d:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:CB:D9:31:74:D6:77:7D:1B:43:D1:1D:DC:BE:15:7A:A9:F2:54
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e37352e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:6f:a3:fe:14:ce:89:f2:74:04:51:a4:ff:a6:03:a5:39:
         46:f3:e6:ed:38:8a:42:8e:50:f2:f8:52:70:c7:09:57:67:bf:
         2d:d2:b0:3e:28:64:bb:9d:63:47:56:3a:c5:63:f4:ee:64:ef:
         49:da:3e:2e:09:b3:5b:56:a3:23:ab:a1:02:68:d8:b9:39:42:
         99:9c:54:15:05:76:c7:27:f5:fa:26:8d:3d:93:ca:b5:0c:0a:
         df:b7:b7:e2:00:6b:0a:ec:61:17:f2:7a:69:5a:f0:85:b2:61:
         c9:d3:eb:e7:b2:76:3f:8c:c9:35:ac:d8:2f:35:26:62:dd:2d:
         dd:6f:1f:ee:8c:bc:40:69:23:3b:d1:54:e3:82:8e:ad:dd:34:
         31:e7:73:91:3a:60:ef:f1:ac:c8:9e:d0:5a:b7:07:54:7e:36:
         e1:07:cb:4a:1a:9b:7d:d3:77:80:2f:1d:b7:dc:e0:90:02:35:
         81:c1:b6:59:3a:28:a8:ab:17:6a:13:3f:74:1d:20:bb:96:86:
         a0:2f:3e:14:46:79:40:f4:62:6f:95:ea:a5:06:03:cb:94:c9:
         6e:9a:8b:94:a8:56:6a:12:21:f9:ec:71:4f:c5:16:c1:83:42:
         5b:3c:f1:8a:ed:a7:22:cb:20:fb:3a:51:90:83:7c:dd:71:d5:
         42:78:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:56:42 2026 by rpki-client