Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32342e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          6vwSLxym7THE+bV4/VSCNrOCesd9OtmVXBY20U7pzjE=
Subject key identifier:   A6:78:DC:9E:8A:3E:93:AB:95:55:52:4E:D3:CB:9D:2B:E3:E3:D9:B7
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       3FCCF9ED5CB72C8884C552EAA9318ED3546171E3
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:09 +0000
ROA not before:           Thu 02 Oct 2025 12:25:09 +0000
ROA not after:            Thu 01 Oct 2026 12:30:09 +0000
asID:                     52455
IP address blocks:        131.72.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:f9:ed:5c:b7:2c:88:84:c5:52:ea:a9:31:8e:d3:54:61:71:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:09 2025 GMT
            Not After : Oct  1 12:30:09 2026 GMT
        Subject: CN=A678DC9E8A3E93AB9555524ED3CB9D2BE3E3D9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:09:63:6e:fb:9c:40:3a:26:05:3b:5e:7b:
                    d4:1e:e8:f1:59:f6:6f:ce:6b:8a:21:fd:b7:5c:67:
                    8a:86:18:1e:2a:90:25:43:d0:99:33:4a:9d:a2:dc:
                    2c:12:4e:1c:f6:a9:5f:5c:ad:c4:a3:3e:f1:44:3f:
                    92:c8:ef:ff:e3:8b:56:02:f1:49:82:09:3d:d4:1f:
                    e5:24:12:d6:1d:ee:c4:c7:1f:9f:67:63:da:71:08:
                    a9:05:01:f3:49:00:32:bf:43:5d:12:d9:6d:42:4f:
                    3a:6b:65:82:86:a2:7d:c0:63:9a:ee:38:3d:4e:cc:
                    f2:1d:e5:05:a3:12:1c:ce:e6:36:7b:c6:2e:2e:95:
                    19:a7:d2:98:1b:c0:8a:1e:fe:00:55:d2:be:0b:58:
                    7e:19:0b:9d:cb:ba:2c:fb:bd:90:91:2c:62:ca:41:
                    e1:01:23:09:e3:8b:1f:f6:b1:b7:16:de:8a:88:c5:
                    ac:c2:a0:c7:81:8e:ef:6a:4f:3b:01:9b:82:0b:29:
                    b2:cc:cd:9d:26:3c:db:50:c8:9b:3d:3b:b7:94:55:
                    05:06:47:a6:bd:84:a8:d2:d1:03:23:3b:49:e2:8c:
                    5e:4c:4a:7b:57:73:25:21:79:93:41:ae:c5:8e:bd:
                    3c:15:4c:fa:c0:dd:02:4a:a2:82:1b:af:9f:c6:37:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:DC:9E:8A:3E:93:AB:95:55:52:4E:D3:CB:9D:2B:E3:E3:D9:B7
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:81:6c:4b:d6:0a:57:ef:17:ad:de:93:de:ef:80:40:e5:a6:
         ff:47:9f:ec:46:18:20:a1:a8:86:c5:7f:0a:66:87:3f:13:5e:
         5c:13:34:c5:fd:3d:f0:1d:69:6f:c9:5d:5f:91:ff:92:8d:6d:
         a3:37:53:bb:77:4f:08:b1:33:15:5d:9b:e2:5d:1f:6c:d8:01:
         2f:86:a2:2b:a3:a1:d3:a9:37:2f:38:7a:a2:39:be:84:56:71:
         6d:44:e3:42:76:9f:19:7e:73:8b:fa:de:65:cf:6c:5f:d6:8a:
         e7:64:59:1c:14:ba:85:6c:6a:8b:27:76:76:21:0d:a9:27:00:
         a9:6a:23:52:7c:54:d6:21:a4:f0:e7:0d:02:8d:ce:c5:8c:14:
         57:30:4a:11:4d:e9:0f:b2:c1:7b:75:5b:85:d7:dd:81:36:c1:
         aa:c0:c0:c5:2a:ac:78:9b:3a:2d:32:7c:a6:d4:46:07:5f:51:
         59:98:5b:09:b4:35:12:b5:1e:57:b3:e9:ae:31:2d:67:60:79:
         1c:74:5e:6b:b1:11:82:d1:01:33:e9:ce:65:de:05:fb:5d:ae:
         92:a8:ed:1d:cf:b4:b7:73:5c:d7:7c:06:78:bd:98:18:68:18:
         ea:20:a3:30:76:69:8c:89:a6:1a:ff:95:dd:65:2a:d3:81:6d:
         ea:d5:15:a7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUP8z57Vy3LIiExVLqqTGO01RhceMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTEwMDIxMjI1MDlaFw0yNjEwMDExMjMwMDlaMDMxMTAvBgNV
BAMTKEE2NzhEQzlFOEEzRTkzQUI5NTU1NTI0RUQzQ0I5RDJCRTNFM0Q5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0AljbvucQDomBTtee9Qe6PFZ
9m/Oa4oh/bdcZ4qGGB4qkCVD0JkzSp2i3CwSThz2qV9crcSjPvFEP5LI7//ji1YC
8UmCCT3UH+UkEtYd7sTHH59nY9pxCKkFAfNJADK/Q10S2W1CTzprZYKGon3AY5ru
OD1OzPId5QWjEhzO5jZ7xi4ulRmn0pgbwIoe/gBV0r4LWH4ZC53Luiz7vZCRLGLK
QeEBIwnjix/2sbcW3oqIxazCoMeBju9qTzsBm4ILKbLMzZ0mPNtQyJs9O7eUVQUG
R6a9hKjS0QMjO0nijF5MSntXcyUheZNBrsWOvTwVTPrA3QJKooIbr5/GN59TAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUpnjcnoo+k6uVVVJO08udK+Pj2bcwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMxMzMzMTJlMzczMjJlMzIzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSBgwDQYJ
KoZIhvcNAQELBQADggEBABCBbEvWClfvF63ek97vgEDlpv9Hn+xGGCChqIbFfwpm
hz8TXlwTNMX9PfAdaW/JXV+R/5KNbaM3U7t3TwixMxVdm+JdH2zYAS+GoiujodOp
Ny84eqI5voRWcW1E40J2nxl+c4v63mXPbF/WiudkWRwUuoVsaosndnYhDaknAKlq
I1J8VNYhpPDnDQKNzsWMFFcwShFN6Q+ywXt1W4XX3YE2warAwMUqrHibOi0yfKbU
RgdfUVmYWwm0NRK1Hlez6a4xLWdgeRx0XmuxEYLRATPpzmXeBftdrpKo7R3PtLdz
XNd8Bni9mBhoGOogozB2aYyJphr/ld1lKtOBberVFac=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:18 2025 by rpki-client