Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3132302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e3132302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          lmox2xM84/MO1Ff54peZ4OywAXjdY60+c44qB+n4u6Q=
Subject key identifier:   A6:9C:07:78:2F:A9:E9:C1:3D:D1:CC:4E:93:A8:13:D5:BE:9A:BF:6C
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       2EA35EC4034C03E37D0D8AAA3727426460DC9C78
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3132302e302f32342d3234203d3e203137313437.roa
Signing time:             Wed 03 Jun 2026 21:00:00 +0000
ROA not before:           Wed 03 Jun 2026 20:55:00 +0000
ROA not after:            Wed 02 Jun 2027 21:00:00 +0000
asID:                     17147
IP address blocks:        163.247.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 04:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a3:5e:c4:03:4c:03:e3:7d:0d:8a:aa:37:27:42:64:60:dc:9c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jun  3 20:55:00 2026 GMT
            Not After : Jun  2 21:00:00 2027 GMT
        Subject: CN=A69C07782FA9E9C13DD1CC4E93A813D5BE9ABF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:ae:04:80:14:b7:c9:26:bf:74:0e:e5:f1:
                    4c:45:dc:09:63:05:2d:a0:a5:bd:c2:b5:c1:dc:94:
                    38:80:4d:38:07:8f:40:18:c6:47:ff:fe:19:79:56:
                    76:39:e3:fc:5b:e2:6b:7a:f2:10:0f:c6:84:19:f3:
                    ff:2f:a8:bf:10:f9:07:d3:6e:4b:6f:66:4c:24:c6:
                    de:2c:33:60:39:1e:e7:ea:55:d0:4e:5d:6c:21:ba:
                    db:98:c3:af:51:0e:fb:3c:67:46:6a:c7:a7:50:2e:
                    5b:5e:93:e4:36:9a:79:39:ae:97:fc:8e:54:ec:49:
                    40:cd:66:35:f1:1d:8b:3b:79:01:8c:58:25:a1:8f:
                    17:04:4b:7d:e2:0c:39:1b:ce:6f:93:7f:58:4e:00:
                    1d:cc:a6:c8:45:75:37:f2:fe:f7:34:57:ef:f1:36:
                    a8:a8:05:0b:dc:da:5c:63:bd:68:cd:a1:24:77:d3:
                    c0:f1:f5:8c:06:dd:a5:12:7c:d5:f6:59:04:9b:b4:
                    80:af:84:08:a2:32:de:5b:cf:3d:74:a7:37:09:b1:
                    62:87:62:51:28:1c:2f:80:68:27:a4:4b:1b:bd:12:
                    9e:e0:9f:96:0b:5c:29:a6:ed:26:b9:d0:89:7b:28:
                    3d:56:20:a7:84:11:9a:49:69:c6:f2:f5:56:62:40:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9C:07:78:2F:A9:E9:C1:3D:D1:CC:4E:93:A8:13:D5:BE:9A:BF:6C
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e3132302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:d6:ae:08:6a:1a:42:72:c0:ab:00:df:38:7c:05:18:11:
         bf:9f:b6:cc:8b:6d:85:bd:80:d9:db:fc:43:34:1a:37:3c:e5:
         39:9c:ff:1b:f6:a0:31:b8:aa:fb:d9:e2:c3:c7:2d:11:5c:fc:
         95:05:21:ab:a6:91:cc:55:fb:6c:44:98:63:ea:35:c8:e0:25:
         e1:b9:6b:bb:c6:69:0e:a7:33:fc:3f:c4:1e:b3:4c:62:20:82:
         51:1d:da:f5:c5:1d:6a:0c:d5:89:a9:c3:28:b9:e8:ff:f0:c0:
         14:dc:55:5d:04:72:2a:72:cd:6e:3f:33:43:e7:02:53:28:7a:
         a2:78:ba:87:a5:08:1c:28:5b:a8:ab:a8:6a:ae:04:08:ed:d5:
         79:79:2f:1f:89:15:34:d5:86:ab:c3:4a:77:9d:66:7c:b0:d0:
         e9:55:d3:1f:fe:31:a5:7b:9e:76:8b:51:14:94:70:a4:ae:27:
         f3:31:24:99:5d:26:79:81:9e:9e:d5:bf:f2:a0:37:c0:c9:7d:
         f8:4f:a1:5f:9e:9e:cc:c7:42:bd:15:47:cf:0e:08:e8:7e:4e:
         72:1d:f2:59:6f:5a:7b:6a:f3:dc:db:e3:f8:3e:4c:5e:30:32:
         8f:ed:2e:e5:b5:73:a5:94:2b:13:76:9b:4c:22:da:32:2b:4b:
         8b:ea:2f:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULqNexANMA+N9DYqqNydCZGDcnHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNjA2MDMyMDU1MDBaFw0yNzA2MDIyMTAwMDBaMDMxMTAvBgNV
BAMTKEE2OUMwNzc4MkZBOUU5QzEzREQxQ0M0RTkzQTgxM0Q1QkU5QUJGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo164EgBS3ySa/dA7l8UxF3Alj
BS2gpb3CtcHclDiATTgHj0AYxkf//hl5VnY54/xb4mt68hAPxoQZ8/8vqL8Q+QfT
bktvZkwkxt4sM2A5HufqVdBOXWwhutuYw69RDvs8Z0Zqx6dQLltek+Q2mnk5rpf8
jlTsSUDNZjXxHYs7eQGMWCWhjxcES33iDDkbzm+Tf1hOAB3MpshFdTfy/vc0V+/x
NqioBQvc2lxjvWjNoSR308Dx9YwG3aUSfNX2WQSbtICvhAiiMt5bzz10pzcJsWKH
YlEoHC+AaCekSxu9Ep7gn5YLXCmm7Sa50Il7KD1WIKeEEZpJacby9VZiQMrxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUppwHeC+p6cE90cxOk6gT1b6av2wwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzMTMyMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzEzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/d4
MA0GCSqGSIb3DQEBCwUAA4IBAQA389auCGoaQnLAqwDfOHwFGBG/n7bMi22FvYDZ
2/xDNBo3POU5nP8b9qAxuKr72eLDxy0RXPyVBSGrppHMVftsRJhj6jXI4CXhuWu7
xmkOpzP8P8Qes0xiIIJRHdr1xR1qDNWJqcMouej/8MAU3FVdBHIqcs1uPzND5wJT
KHqieLqHpQgcKFuoq6hqrgQI7dV5eS8fiRU01Yarw0p3nWZ8sNDpVdMf/jGle552
i1EUlHCkrifzMSSZXSZ5gZ6e1b/yoDfAyX34T6Ffnp7Mx0K9FUfPDgjofk5yHfJZ
b1p7avPc2+P4PkxeMDKP7S7ltXOllCsTdptMItoyK0uL6i+A
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:01:56 2026 by rpki-client