Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32362e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          1wFTShwIqcGhjriteTBcehtj/pBtvUsyOdHhhZ+2dGo=
Subject key identifier:   2A:3F:D8:B5:BF:F6:A0:11:E9:0C:06:78:71:A0:93:D2:41:17:81:66
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       2B150CCA664555672DB086371ACD3B85E5DAB649
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:08 +0000
ROA not before:           Thu 02 Oct 2025 12:25:08 +0000
ROA not after:            Thu 01 Oct 2026 12:30:08 +0000
asID:                     52455
IP address blocks:        131.72.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:0c:ca:66:45:55:67:2d:b0:86:37:1a:cd:3b:85:e5:da:b6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:08 2025 GMT
            Not After : Oct  1 12:30:08 2026 GMT
        Subject: CN=2A3FD8B5BFF6A011E90C067871A093D241178166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:3c:17:09:93:d5:35:1a:a0:01:74:9a:ec:
                    9f:13:96:a9:0a:47:56:90:8d:13:d1:09:d2:d2:b4:
                    89:1b:b2:d9:d6:85:56:48:ff:b7:53:c0:32:5a:4a:
                    12:41:97:1d:fb:65:7f:2a:12:7d:be:ad:4b:91:d0:
                    53:9a:9f:7b:39:df:25:8a:10:7e:88:3a:92:28:69:
                    32:7e:7a:ef:a8:37:b8:45:8f:59:19:fc:ad:8c:1d:
                    8f:f7:b1:30:fd:22:34:29:9f:45:4d:24:4d:66:19:
                    5b:53:0a:d7:3d:a7:ca:60:2a:f8:d0:75:21:17:e0:
                    e6:a2:f1:54:3b:92:fa:4c:ce:56:b2:c5:f8:10:e6:
                    40:d6:b9:7d:40:cd:21:ea:87:19:ae:58:4c:74:6d:
                    7d:87:3e:58:a4:89:b7:33:91:65:7f:4f:66:44:14:
                    e5:3f:90:94:1a:a3:96:8b:eb:ed:5a:17:70:e3:fd:
                    b4:6f:7d:14:1a:41:4d:0b:ba:44:10:fd:a6:b2:56:
                    1c:22:32:29:1c:7e:b3:30:23:7f:5c:e4:b6:1b:68:
                    ba:ad:05:15:94:90:52:31:40:29:7d:b2:a1:3c:45:
                    87:8d:5e:a8:c1:82:d6:d4:00:41:c4:a6:b9:06:44:
                    48:0a:7f:8d:07:3a:0e:24:44:52:df:4a:ed:e1:a3:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3F:D8:B5:BF:F6:A0:11:E9:0C:06:78:71:A0:93:D2:41:17:81:66
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:d3:3e:bf:f9:1d:aa:3c:c8:5b:68:22:0f:e4:b4:89:58:
         f6:b0:84:1b:d5:ba:5e:f4:de:a6:16:38:e8:9f:bd:4a:9d:ed:
         bb:14:3c:e4:ab:7f:bb:7e:00:65:42:6f:cd:06:72:1e:6d:74:
         32:57:d1:d4:c6:b3:cb:f2:a5:12:e4:79:b9:aa:d6:1e:d8:a2:
         f0:35:2c:79:76:d4:4a:1f:b9:ff:23:4c:df:ca:d3:f3:00:c7:
         17:aa:ef:76:57:6a:ae:ec:c9:37:d5:36:66:3f:66:cf:07:2d:
         8d:ea:8b:3e:00:e3:76:58:6e:da:bc:c6:84:29:cd:76:ac:f9:
         f5:02:8d:f3:45:46:60:6d:98:8c:f1:e5:a2:61:94:07:69:09:
         c8:ba:5a:e9:08:2f:29:a3:58:39:c3:43:5a:54:ee:0a:8f:a9:
         03:b8:fa:b3:bb:08:e0:c2:ff:85:50:10:b2:51:20:4c:ca:8e:
         18:7c:bc:dd:0e:bf:55:7c:76:df:5d:a9:26:7b:22:36:47:de:
         84:51:bd:40:5c:2e:b3:c5:fd:e8:c7:b6:55:b7:ba:7e:2a:a7:
         7d:9b:57:b5:e7:bc:5e:0e:a5:e2:95:e6:50:78:27:dc:53:f0:
         0d:a1:b9:61:4b:b1:a3:3c:5c:50:88:fc:0e:43:69:9a:df:1b:
         9c:2d:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:16 2025 by rpki-client