Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231372e302f32342d3234203d3e203532343535.roa
File:                     3137302e3233332e3231372e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          eWRZ/2bWWIyGXigtNPaCTX57zX/zjYhRAxTmr72f1Ko=
Subject key identifier:   B1:C1:93:5D:B8:BB:63:5D:00:91:40:5B:DF:01:BE:D4:6C:07:79:66
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       202E78138168ED920FC452180641B0C0D574435D
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231372e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:06 +0000
ROA not before:           Thu 02 Oct 2025 12:25:06 +0000
ROA not after:            Thu 01 Oct 2026 12:30:06 +0000
asID:                     52455
IP address blocks:        170.233.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2e:78:13:81:68:ed:92:0f:c4:52:18:06:41:b0:c0:d5:74:43:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:06 2025 GMT
            Not After : Oct  1 12:30:06 2026 GMT
        Subject: CN=B1C1935DB8BB635D0091405BDF01BED46C077966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:bb:5f:8d:05:ad:e7:ac:19:db:d3:96:78:
                    f6:65:49:1c:23:75:4c:cf:79:01:e7:22:69:c7:c3:
                    a4:5e:ca:8b:c2:d9:a7:c3:96:ed:60:7b:e5:96:9b:
                    32:aa:6d:aa:95:75:b9:6e:5c:13:27:e4:66:b0:0b:
                    47:e8:cb:43:36:87:25:10:a5:d5:63:2b:e9:2b:28:
                    79:76:ab:04:39:c8:28:b6:70:b1:00:5a:cf:90:6a:
                    a9:25:90:e6:7e:32:ac:3f:14:4d:27:5b:23:a5:84:
                    83:b7:37:cc:60:33:82:66:f2:ba:25:42:e9:7f:19:
                    84:68:62:a9:43:af:48:2d:20:68:89:20:4c:74:12:
                    b3:73:9a:f8:0b:49:99:73:16:eb:a0:df:b9:a7:7c:
                    f4:da:1f:a0:5c:2f:ae:0b:ce:29:38:f4:42:4f:68:
                    6f:d6:c6:67:f7:3d:58:4d:95:62:4d:e7:6a:39:7a:
                    7f:09:bb:16:6d:14:e0:8e:88:12:2a:b9:e8:c2:72:
                    5b:a3:52:07:c4:96:e4:bd:81:6f:3c:04:21:cf:c4:
                    1e:93:f8:a3:ff:80:95:e2:f6:bd:d0:47:e9:a6:95:
                    af:64:0a:ba:95:60:4e:66:f0:c4:c5:e9:7d:88:8a:
                    5e:b3:6d:0d:9c:db:e6:0d:7c:53:cd:7c:db:3d:d5:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C1:93:5D:B8:BB:63:5D:00:91:40:5B:DF:01:BE:D4:6C:07:79:66
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231372e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:f2:c3:5d:7a:1d:36:21:52:84:57:9d:c3:ec:c8:f4:10:
         c9:1d:24:bd:e4:e0:86:bd:e0:e9:33:e7:16:cc:d6:bf:24:5a:
         36:79:e9:63:38:4e:23:9d:45:04:d8:f4:11:e8:f2:ef:f0:bc:
         57:d0:43:84:9b:b2:a3:26:ec:b2:75:33:f7:c8:c1:ea:62:5e:
         3d:e7:96:e5:7f:5d:eb:1c:0c:72:49:b6:05:d4:1d:8b:6e:e8:
         1a:9f:f5:69:a1:a8:0d:4f:33:c3:cc:63:9d:64:e3:60:e0:5b:
         36:2a:07:60:81:12:e0:0a:36:18:d4:97:c4:89:40:68:3c:16:
         00:fc:bd:9a:9c:10:86:ee:7d:df:39:73:e0:1f:d5:a2:d4:98:
         38:56:01:e9:e0:c8:bb:e0:a7:6c:a7:4d:35:da:e3:94:86:da:
         09:8c:38:23:53:3b:17:a9:e0:65:61:57:06:15:00:a9:eb:67:
         01:3d:a8:9c:a6:1c:3b:0f:6b:eb:f5:48:d3:5c:9f:b9:72:6a:
         80:6f:f1:ed:b7:af:ee:cf:d7:1c:98:1c:64:67:3c:a6:2a:c0:
         ea:2c:30:2c:06:b2:67:5a:b9:2d:db:b9:13:72:b4:57:63:24:
         b7:99:a4:e4:a8:ba:3f:0f:97:31:1d:07:f1:fa:1f:5d:20:51:
         d7:6c:15:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIC54E4Fo7ZIPxFIYBkGwwNV0Q10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNTEwMDIxMjI1MDZaFw0yNjEwMDExMjMwMDZaMDMxMTAvBgNV
BAMTKEIxQzE5MzVEQjhCQjYzNUQwMDkxNDA1QkRGMDFCRUQ0NkMwNzc5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjobtfjQWt56wZ29OWePZlSRwj
dUzPeQHnImnHw6ReyovC2afDlu1ge+WWmzKqbaqVdbluXBMn5GawC0foy0M2hyUQ
pdVjK+krKHl2qwQ5yCi2cLEAWs+QaqklkOZ+Mqw/FE0nWyOlhIO3N8xgM4Jm8rol
Qul/GYRoYqlDr0gtIGiJIEx0ErNzmvgLSZlzFuug37mnfPTaH6BcL64Lzik49EJP
aG/Wxmf3PVhNlWJN52o5en8JuxZtFOCOiBIquejCclujUgfEluS9gW88BCHPxB6T
+KP/gJXi9r3QR+mmla9kCrqVYE5m8MTF6X2Iil6zbQ2c2+YNfFPNfNs91eFtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUscGTXbi7Y10AkUBb3wG+1GwHeWYwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMxMzczMDJlMzIzMzMzMmUzMjMxMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqunZ
MA0GCSqGSIb3DQEBCwUAA4IBAQBuj/LDXXodNiFShFedw+zI9BDJHSS95OCGveDp
M+cWzNa/JFo2eeljOE4jnUUE2PQR6PLv8LxX0EOEm7KjJuyydTP3yMHqYl4955bl
f13rHAxySbYF1B2Lbugan/VpoagNTzPDzGOdZONg4Fs2KgdggRLgCjYY1JfEiUBo
PBYA/L2anBCG7n3fOXPgH9Wi1Jg4VgHp4Mi74Kdsp0012uOUhtoJjDgjUzsXqeBl
YVcGFQCp62cBPaicphw7D2vr9UjTXJ+5cmqAb/Htt6/uz9ccmBxkZzymKsDqLDAs
BrJnWrkt27kTcrRXYyS3maTkqLo/D5cxHQfx+h9dIFHXbBXb
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:20 2025 by rpki-client