Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231382e302f32342d3234203d3e203532343535.roa
File:                     3137302e3233332e3231382e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          tgSTlUJlTWvuyx7ZMGCcDSXGt78P95RN1svg/ppNZHE=
Subject key identifier:   9D:1A:A1:8F:7B:67:23:22:23:01:D3:47:CE:C4:F4:24:27:7B:CF:E5
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       53E5C6CF031608B08E82D636F0DADCA7E9C0D881
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231382e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:11 +0000
ROA not before:           Thu 02 Oct 2025 12:25:11 +0000
ROA not after:            Thu 01 Oct 2026 12:30:11 +0000
asID:                     52455
IP address blocks:        170.233.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e5:c6:cf:03:16:08:b0:8e:82:d6:36:f0:da:dc:a7:e9:c0:d8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:11 2025 GMT
            Not After : Oct  1 12:30:11 2026 GMT
        Subject: CN=9D1AA18F7B6723222301D347CEC4F424277BCFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:26:e0:10:66:1d:6b:dc:06:57:0d:12:a1:
                    63:29:0f:9c:f5:aa:19:c5:86:d2:b5:a8:37:1f:29:
                    76:06:90:7f:fe:f6:89:0b:b1:dc:63:3f:67:74:11:
                    25:4e:58:32:e5:64:fa:6b:fd:95:97:96:f2:87:50:
                    fd:65:d2:3f:5b:ad:57:84:56:44:3a:1a:d8:0a:b4:
                    28:0d:30:60:84:5e:2c:72:27:71:f9:78:8a:87:fe:
                    9d:ca:df:35:0e:fa:c1:df:37:33:38:e4:18:c8:0f:
                    40:e7:33:be:07:15:c3:f4:0a:db:08:8d:bd:28:7d:
                    ba:df:98:b4:97:7f:46:c5:1f:a3:13:73:fc:e0:09:
                    97:64:1f:4f:4e:7d:3a:17:83:92:4f:fc:d2:60:aa:
                    7c:68:a5:52:0f:5b:34:8e:7f:ba:89:da:56:00:13:
                    44:7f:15:f8:70:5a:bc:a6:f2:a8:2d:54:ef:15:9c:
                    45:e6:49:90:03:1d:b1:fb:1c:be:d0:8e:2c:7f:3e:
                    65:bb:ea:2f:46:a8:d3:da:e4:23:ea:1d:d1:4a:88:
                    8d:09:71:92:d4:ce:1a:5b:43:01:19:8f:d1:76:c1:
                    02:95:25:93:98:62:95:85:91:15:0c:42:05:c1:7b:
                    c9:38:1c:e1:0e:07:2d:96:b8:e7:f3:72:a3:17:00:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:A1:8F:7B:67:23:22:23:01:D3:47:CE:C4:F4:24:27:7B:CF:E5
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231382e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:21:df:2f:3d:44:3a:94:4d:9a:14:7f:93:ed:d2:9a:27:15:
         73:d1:5b:cd:4a:5a:a3:a6:95:2f:4a:0b:46:4a:c3:3d:12:04:
         00:ea:a0:58:f5:4c:8b:7b:28:a6:da:07:f8:9c:eb:00:94:40:
         e4:80:2c:dd:7a:13:9e:e9:b3:cd:7e:ed:0a:6f:11:b1:a0:6c:
         36:4b:f2:94:93:f3:9d:c5:d3:42:3f:25:3e:d0:50:4f:f6:ef:
         e8:07:78:a9:26:d4:b1:5a:34:09:03:c1:41:6f:8a:73:5c:d2:
         1b:c5:b3:20:ee:af:d4:f5:bb:60:00:11:f5:41:55:34:27:37:
         c6:a9:b7:5a:4a:d0:29:d0:80:25:50:9f:08:ce:a3:c1:f7:08:
         14:23:64:fe:af:e5:b3:9b:01:0a:aa:d9:99:5b:08:eb:d2:63:
         b5:3f:7d:72:91:9c:0c:27:91:ff:a0:ae:bf:35:3e:c3:63:72:
         55:1e:15:b1:25:b0:4d:68:73:75:98:aa:0e:44:2c:d6:03:af:
         69:f2:c6:17:59:62:5b:cb:3e:d9:00:58:6e:41:84:ac:e3:24:
         19:6b:23:f2:fe:32:78:81:9a:ea:17:c6:a1:43:89:bb:17:5a:
         4d:ed:0e:fe:80:12:d7:d9:55:1c:fe:97:f8:94:a8:84:72:ce:
         23:51:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:15 2025 by rpki-client