Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa
File:                     3133312e37322e32362e302f32332d3233203d3e203532343535.roa (raw, json)
Hash identifier:          78dJ/0Q0kk5gyEpBf3+Wu68/PsgcdG29TrRrDickla0=
Subject key identifier:   13:87:73:AD:26:86:8C:C4:09:70:A6:A9:27:7D:E9:55:AE:50:50:85
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       425391FA49476904CEAF05435D0DF32073410997
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:07 +0000
ROA not before:           Thu 02 Oct 2025 12:25:07 +0000
ROA not after:            Thu 01 Oct 2026 12:30:07 +0000
asID:                     52455
IP address blocks:        131.72.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:53:91:fa:49:47:69:04:ce:af:05:43:5d:0d:f3:20:73:41:09:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:07 2025 GMT
            Not After : Oct  1 12:30:07 2026 GMT
        Subject: CN=138773AD26868CC40970A6A9277DE955AE505085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:7c:85:b5:90:37:76:de:63:47:d0:cc:a1:
                    94:67:98:f9:0a:aa:63:80:26:fc:e4:f0:14:ea:c0:
                    70:7f:8a:2c:ec:fd:1d:29:c0:a7:f3:31:29:31:c2:
                    6e:66:9a:f3:20:0b:53:0a:2c:40:7e:d7:c9:dc:98:
                    c7:ab:12:9d:83:76:42:72:1f:26:aa:06:04:bc:48:
                    2e:eb:63:5e:d8:f7:b3:ec:57:bc:76:09:f4:7d:2b:
                    aa:99:ef:cf:df:5d:00:77:81:3c:57:b0:6f:e9:ee:
                    9c:bc:40:9e:06:e6:c2:28:7b:6d:bd:70:56:f8:c6:
                    b9:68:36:a1:fb:48:2d:5e:7d:c9:69:6b:3f:b2:b9:
                    83:d2:10:20:62:38:ae:38:d6:1d:99:ba:80:b7:fd:
                    f6:6c:3a:2a:08:63:32:21:49:76:70:d3:07:ff:6e:
                    9a:d4:c8:0a:f0:6e:8b:dc:75:db:f3:be:7b:ba:7c:
                    8c:4e:63:59:66:8e:11:80:b6:b8:a1:69:d7:d6:1b:
                    fa:a8:82:14:38:34:39:ac:75:d4:cf:65:b3:7b:42:
                    24:49:a8:f5:a5:79:f8:2e:36:20:7f:70:74:3e:44:
                    44:cb:02:fc:66:34:72:c5:8a:dc:27:c3:27:a3:92:
                    09:a2:83:9c:a4:e4:4d:8a:62:3d:7c:ae:51:81:6d:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:73:AD:26:86:8C:C4:09:70:A6:A9:27:7D:E9:55:AE:50:50:85
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:37:1a:1e:1a:a9:f4:aa:ec:67:30:f9:c4:41:47:f4:d4:94:
         b3:18:e5:70:c7:5b:14:65:83:58:9b:0c:e2:a6:46:b4:09:ca:
         d1:1d:cd:10:87:5d:92:be:72:fd:0b:ce:93:27:fa:51:99:f1:
         9d:b0:ea:f5:27:95:8f:eb:e5:f1:79:d3:86:61:9f:3b:95:52:
         23:33:7b:07:dc:f9:fe:cd:91:75:8d:31:81:c2:9f:be:5f:4e:
         00:e5:3a:70:3c:88:43:37:24:b1:46:5e:11:06:56:7e:9b:f1:
         03:70:7e:7b:f1:e0:8f:3c:6b:a5:c5:39:4e:15:6d:53:42:10:
         b3:86:88:9e:f6:13:11:6a:aa:f3:9c:9b:a3:2f:18:e9:f6:ff:
         01:d0:18:11:10:7e:e3:c6:07:4d:19:9e:a8:19:4f:26:5d:b5:
         2a:df:67:f3:19:4b:5a:fc:88:38:fd:52:45:33:2e:3f:e3:b2:
         54:4b:49:e2:b0:f4:13:3d:72:21:ef:86:0e:77:d0:b7:15:30:
         07:bf:db:d3:a1:ef:1b:87:ac:22:a4:f7:17:07:6b:9c:80:ce:
         77:aa:89:33:b7:c0:5b:cb:c1:4c:55:ec:c9:62:d7:a6:bd:45:
         b8:88:ef:2e:eb:8d:39:35:02:7b:e4:6f:8c:8b:c5:13:bd:72:
         99:0d:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:31 2025 by rpki-client