Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32332d3233203d3e203532343535.roa
File:                     3133312e37322e32342e302f32332d3233203d3e203532343535.roa (raw, json)
Hash identifier:          EuveIAqOS1eeKnADUZhoHlmjE00zbKH3k/YkSsd3gAw=
Subject key identifier:   A4:FA:1C:69:A0:BC:04:CB:E9:2C:8B:6B:D7:9E:76:3C:D4:46:EB:58
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       44B22CDB04BEB79B7123ABDFBDBF68344B8BE93B
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32332d3233203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:12 +0000
ROA not before:           Thu 02 Oct 2025 12:25:12 +0000
ROA not after:            Thu 01 Oct 2026 12:30:12 +0000
asID:                     52455
IP address blocks:        131.72.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:2c:db:04:be:b7:9b:71:23:ab:df:bd:bf:68:34:4b:8b:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:12 2025 GMT
            Not After : Oct  1 12:30:12 2026 GMT
        Subject: CN=A4FA1C69A0BC04CBE92C8B6BD79E763CD446EB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:cc:0b:ea:29:d4:d8:82:b7:79:e8:5b:99:
                    cc:86:99:14:9d:13:d8:75:e5:97:7d:66:ca:25:19:
                    db:a4:32:e5:5e:f3:0f:67:d4:b5:0f:17:6b:51:97:
                    23:cf:7e:19:0f:c4:ce:62:f9:a8:49:85:41:78:77:
                    19:de:e8:53:48:99:34:d6:69:b7:b8:1a:91:8d:ba:
                    8a:59:09:6c:3f:d3:85:7d:e6:bd:a6:71:f4:33:ad:
                    ff:3b:12:b4:fe:c5:9e:7a:6a:11:9d:f6:c0:87:4c:
                    6f:a2:66:1b:3e:73:46:18:46:60:04:b5:93:79:0e:
                    7d:bc:c9:92:e1:ca:63:20:5f:33:6f:22:18:bf:6f:
                    44:de:e1:df:5b:0e:cf:c0:35:39:98:cc:12:44:fb:
                    08:e2:2c:91:ac:49:78:66:89:c6:2d:47:c6:e5:cf:
                    85:e3:bc:b6:10:d8:ae:6a:ed:fb:21:0e:5f:ee:36:
                    e6:b9:0c:ef:ec:0e:6c:ca:13:10:3e:fd:df:d3:cc:
                    52:30:04:5f:a5:69:0f:49:2d:3b:90:80:9c:ec:56:
                    42:89:13:74:6f:28:25:f5:9c:9c:88:d4:0f:d6:87:
                    93:63:22:03:23:48:35:fe:1c:af:a5:bb:68:9c:e5:
                    62:0d:ed:6c:80:40:2a:9e:48:04:5d:30:93:14:d9:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:1C:69:A0:BC:04:CB:E9:2C:8B:6B:D7:9E:76:3C:D4:46:EB:58
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32332d3233203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:83:7f:4b:df:4a:71:42:f3:a0:d7:e1:be:9e:c0:2f:09:
         5d:aa:45:77:8b:be:72:79:2b:db:01:0c:8d:4f:80:53:af:d9:
         5f:20:35:ab:28:f1:b8:65:d1:29:4b:73:e5:74:61:22:2c:04:
         96:9f:f8:ee:e5:9d:ed:92:f0:43:61:1f:44:ac:a6:f3:84:06:
         8e:8a:95:0d:7c:45:2b:9c:8e:f7:52:c0:f6:eb:97:da:d0:ad:
         62:ba:b8:bf:8f:6d:00:04:24:04:84:be:ec:5a:41:30:db:de:
         7a:67:2d:db:85:85:2c:c7:cb:c6:56:c3:fc:f2:0d:0a:d7:d0:
         df:0f:59:64:3e:b4:af:5b:e1:d9:a8:41:32:b5:25:d8:d5:32:
         02:e2:c6:a4:e6:6f:29:1f:1f:d4:93:13:7b:06:ba:3d:5a:64:
         c9:73:b2:9f:3e:18:68:fd:f4:f2:f1:be:7e:6d:8d:7b:ae:3c:
         b1:d6:a4:b5:cd:f3:03:55:62:bf:f6:09:fb:45:a9:ea:5c:12:
         7b:20:76:7b:06:b2:51:df:08:89:58:01:28:92:79:91:7b:c7:
         01:90:c0:3f:84:70:b8:fe:e0:06:00:5f:ff:ad:78:31:7e:50:
         00:5f:ca:df:86:44:09:1a:cb:19:4e:f1:e3:6b:d6:4c:3c:ac:
         51:fa:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:33 2025 by rpki-client