Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32372e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32372e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          xwmWoEmnbZGvwugUVhAcV4tce4Hza6ksFPtrBV5qL6E=
Subject key identifier:   36:37:69:DA:74:5E:4B:6E:0A:9B:1A:78:3F:1D:15:61:DD:3F:4E:0A
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       3FB79E0B6906CA81E7706FEBF785B2266394566E
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32372e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:04 +0000
ROA not before:           Thu 02 Oct 2025 12:25:04 +0000
ROA not after:            Thu 01 Oct 2026 12:30:04 +0000
asID:                     52455
IP address blocks:        131.72.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b7:9e:0b:69:06:ca:81:e7:70:6f:eb:f7:85:b2:26:63:94:56:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:04 2025 GMT
            Not After : Oct  1 12:30:04 2026 GMT
        Subject: CN=363769DA745E4B6E0A9B1A783F1D1561DD3F4E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:fe:f3:43:13:a8:54:a7:de:cf:3d:7b:dd:
                    78:fa:53:41:6b:f0:f3:93:f4:62:9d:a1:6c:4a:6c:
                    ca:93:5c:49:90:90:dd:a2:fc:bd:e1:71:2b:62:ba:
                    9e:df:d0:9d:a5:ba:29:b1:0f:f5:ba:20:2f:cb:64:
                    2c:20:1b:83:f4:d3:60:92:2a:1c:a7:43:c1:ac:b6:
                    c4:11:8b:9f:9f:3d:15:d7:97:83:74:dd:b1:74:89:
                    79:51:70:9e:4c:94:41:81:38:1b:e7:a6:b8:04:55:
                    c9:15:ed:c2:e4:49:fa:b0:82:88:c6:e3:cb:57:0b:
                    ea:03:0d:16:6f:5b:79:ba:01:da:66:2e:90:75:84:
                    ad:81:36:82:19:48:e2:77:d4:90:8f:63:eb:b7:84:
                    c4:97:99:9b:84:32:f2:03:53:db:f2:6f:3e:46:8c:
                    4d:9c:bf:56:eb:55:fc:1c:d2:c7:74:18:14:73:f4:
                    1f:7a:c2:c0:5f:34:b3:26:c8:6e:39:0e:92:04:46:
                    f6:87:82:3d:81:77:f6:15:e5:99:8d:8f:82:07:63:
                    81:a4:fe:da:87:cc:e9:24:e0:bd:eb:c3:5c:eb:fa:
                    9e:7e:a1:85:61:af:5c:cd:f2:eb:7b:ab:1e:59:d3:
                    30:21:6d:0c:cd:e5:e0:24:c8:c0:83:8f:fc:e5:01:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:69:DA:74:5E:4B:6E:0A:9B:1A:78:3F:1D:15:61:DD:3F:4E:0A
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32372e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:67:d3:26:8c:d8:04:a0:b3:a1:97:46:4e:c1:7d:f3:35:
         d6:15:f0:cb:e8:50:20:46:c2:57:cb:06:a1:6a:03:72:9a:4a:
         a3:85:4b:37:ec:5b:9f:ab:3b:58:6e:b5:14:2c:66:51:5f:cd:
         03:e6:3e:71:e3:5a:fb:0e:f0:ca:2d:82:19:63:34:eb:4f:61:
         89:90:9b:da:85:71:f6:50:b1:69:0d:ba:24:64:e3:e8:69:43:
         99:35:cc:d3:be:f2:3b:f9:0f:a5:9f:05:68:67:07:5e:24:09:
         b3:7a:40:50:fc:ed:87:19:9b:50:68:82:f1:fc:8e:a5:f8:a0:
         db:9e:d3:3e:e7:29:ec:97:81:a4:ce:67:e8:38:d1:91:95:1d:
         49:9b:97:93:bc:e1:47:0e:e9:15:0b:c3:47:96:70:ef:16:82:
         e3:0f:e6:6d:d7:03:c3:db:73:43:7a:f6:e0:32:20:49:40:3c:
         1d:de:a8:ee:8a:bd:8e:e0:aa:3c:58:3b:64:94:da:4d:42:69:
         1e:81:f7:71:81:a4:fe:bb:9a:7b:e6:63:86:91:c2:f5:8b:ac:
         be:5d:4a:67:1a:0f:09:77:98:af:8a:5d:db:97:bd:ff:d8:10:
         f4:7b:7e:dc:33:c2:06:d0:11:1d:d6:f6:52:a0:b9:48:2a:92:
         d6:85:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:20 2025 by rpki-client