Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32352e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          p6l0L2YLU7YnaAE2OIS5DnPue0jXVAY8ldY+TfHQLUk=
Subject key identifier:   4A:8A:53:DC:06:6D:59:07:C0:09:44:44:D3:68:54:EB:43:73:AA:24
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       412A26CF68759A27CC54DA2A4E68171B9423799D
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:09 +0000
ROA not before:           Thu 02 Oct 2025 12:25:09 +0000
ROA not after:            Thu 01 Oct 2026 12:30:09 +0000
asID:                     52455
IP address blocks:        131.72.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2a:26:cf:68:75:9a:27:cc:54:da:2a:4e:68:17:1b:94:23:79:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:09 2025 GMT
            Not After : Oct  1 12:30:09 2026 GMT
        Subject: CN=4A8A53DC066D5907C0094444D36854EB4373AA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:63:ae:d1:f6:d8:f2:05:fc:88:61:74:b0:
                    af:8f:67:47:e5:42:81:88:08:ba:c5:93:19:ce:c3:
                    fe:5d:6c:ec:82:31:77:6a:a3:9a:b7:04:bd:b7:d4:
                    d0:c6:14:7a:0c:b3:32:b2:df:0a:ad:18:13:2a:e5:
                    80:21:47:56:80:3b:09:5a:7c:16:47:b5:dd:c7:27:
                    f2:c9:27:4d:32:24:d1:1c:72:13:7f:55:48:3f:f4:
                    0a:07:a3:1c:8c:66:7a:82:ae:17:0c:9c:49:f5:c9:
                    e9:aa:9b:5e:0c:a4:6b:d6:14:96:53:da:42:e0:70:
                    24:b2:55:07:22:1c:0c:d2:2b:d1:e7:d6:5f:4f:78:
                    f7:52:77:61:d6:8e:53:84:c7:99:13:c3:7c:6d:27:
                    34:91:75:54:5d:9c:9b:e5:c4:23:5d:96:8a:af:41:
                    a6:c2:d0:8c:35:0e:6f:dd:9d:d2:3d:c2:e7:60:46:
                    4e:d5:e6:47:53:24:61:03:ee:20:e8:5d:85:2e:db:
                    24:19:89:94:48:a3:09:16:97:df:1b:70:a1:c8:2c:
                    76:12:f5:bc:80:95:fd:4d:0d:91:da:72:e7:ce:28:
                    d6:0a:7d:86:07:f5:03:71:be:73:39:f4:51:16:b5:
                    51:74:65:a8:4c:f9:af:61:c4:e4:6e:74:27:bd:30:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8A:53:DC:06:6D:59:07:C0:09:44:44:D3:68:54:EB:43:73:AA:24
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:d2:e1:28:68:d5:a4:3e:1b:fe:1e:a7:e5:6d:87:c6:34:
         ba:d8:00:48:c0:f7:f5:34:d5:1c:e7:a5:c8:cc:ed:3f:5c:52:
         e8:37:43:54:8a:f1:d8:d5:4e:37:27:d8:10:a9:56:42:8d:ca:
         91:b9:84:0d:94:73:fb:1c:27:42:82:c5:ea:a4:56:c6:2d:73:
         8d:72:85:ca:73:ed:89:ee:68:e3:1b:d6:84:c5:48:85:29:f2:
         6a:3f:59:cb:aa:c9:d6:98:27:a3:92:07:90:0c:c6:97:b2:de:
         d6:d3:5d:9b:6b:3d:cd:61:2c:13:71:d4:e3:0e:5e:b7:87:d1:
         6e:81:8e:1c:2c:43:dc:e4:04:f6:8d:47:92:ce:4b:fa:8f:8e:
         85:cd:5b:3a:c4:83:78:67:06:ed:e0:6e:cb:80:8d:c1:ad:05:
         70:c2:fe:cc:b4:66:cb:f5:a0:bb:a5:36:49:60:f7:8e:1d:c4:
         8d:27:3c:7f:d6:99:f0:98:08:a6:c8:fe:db:3a:9c:65:31:84:
         14:2b:dc:22:77:6a:00:14:43:eb:79:09:db:1a:3d:cf:15:f7:
         73:81:97:ed:5d:fa:27:d3:55:1f:c1:90:be:68:ba:96:68:25:
         09:85:f6:78:9e:b2:1f:c3:a2:5f:00:2b:5b:cf:48:b9:56:1e:
         e8:15:da:d2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQSomz2h1mifMVNoqTmgXG5QjeZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTEwMDIxMjI1MDlaFw0yNjEwMDExMjMwMDlaMDMxMTAvBgNV
BAMTKDRBOEE1M0RDMDY2RDU5MDdDMDA5NDQ0NEQzNjg1NEVCNDM3M0FBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/GOu0fbY8gX8iGF0sK+PZ0fl
QoGICLrFkxnOw/5dbOyCMXdqo5q3BL231NDGFHoMszKy3wqtGBMq5YAhR1aAOwla
fBZHtd3HJ/LJJ00yJNEcchN/VUg/9AoHoxyMZnqCrhcMnEn1yemqm14MpGvWFJZT
2kLgcCSyVQciHAzSK9Hn1l9PePdSd2HWjlOEx5kTw3xtJzSRdVRdnJvlxCNdloqv
QabC0Iw1Dm/dndI9wudgRk7V5kdTJGED7iDoXYUu2yQZiZRIowkWl98bcKHILHYS
9byAlf1NDZHacufOKNYKfYYH9QNxvnM59FEWtVF0ZahM+a9hxORudCe9MDFbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSopT3AZtWQfACURE02hU60NzqiQwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMxMzMzMTJlMzczMjJlMzIzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSBkwDQYJ
KoZIhvcNAQELBQADggEBABuV0uEoaNWkPhv+HqflbYfGNLrYAEjA9/U01RznpcjM
7T9cUug3Q1SK8djVTjcn2BCpVkKNypG5hA2Uc/scJ0KCxeqkVsYtc41yhcpz7Ynu
aOMb1oTFSIUp8mo/WcuqydaYJ6OSB5AMxpey3tbTXZtrPc1hLBNx1OMOXreH0W6B
jhwsQ9zkBPaNR5LOS/qPjoXNWzrEg3hnBu3gbsuAjcGtBXDC/sy0Zsv1oLulNklg
944dxI0nPH/WmfCYCKbI/ts6nGUxhBQr3CJ3agAUQ+t5CdsaPc8V93OBl+1d+ifT
VR/BkL5oupZoJQmF9niesh/Dol8AK1vPSLlWHugV2tI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:14 2025 by rpki-client