Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231392e302f32342d3234203d3e203532343535.roa
File:                     3137302e3233332e3231392e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          ppmBFdgnf/DcRlwjCtbVNRAI06XmrMzgCwfBX7SB9AE=
Subject key identifier:   4D:E2:1B:3F:94:15:D9:15:48:A0:E7:12:12:09:8E:81:3C:2C:D0:22
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       4A9710064DC293B5760F26DC68883A29EF25DAED
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231392e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:04 +0000
ROA not before:           Thu 02 Oct 2025 12:25:04 +0000
ROA not after:            Thu 01 Oct 2026 12:30:04 +0000
asID:                     52455
IP address blocks:        170.233.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:97:10:06:4d:c2:93:b5:76:0f:26:dc:68:88:3a:29:ef:25:da:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:04 2025 GMT
            Not After : Oct  1 12:30:04 2026 GMT
        Subject: CN=4DE21B3F9415D91548A0E71212098E813C2CD022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:0c:5e:bb:a7:1a:29:e9:24:54:0f:5a:0b:
                    4f:b9:e9:86:85:f7:c3:57:3f:23:44:31:0f:16:f3:
                    77:c0:37:60:86:34:7f:52:7d:f0:6b:be:90:e6:d9:
                    eb:eb:75:dc:03:19:b5:3a:4a:07:e1:51:da:0e:78:
                    4f:ae:03:2c:1e:7f:f4:6a:63:dc:3b:e5:d0:44:de:
                    a0:e6:80:82:f1:4d:8d:ab:fc:93:23:cc:12:dd:8b:
                    ba:ea:84:ad:34:89:cb:76:cb:5f:13:f3:a3:ab:42:
                    85:79:bf:ac:66:bb:59:4c:e4:97:30:e9:63:10:62:
                    ab:0c:04:5a:6d:b2:6d:d4:bc:0e:ac:1e:15:60:b6:
                    f6:05:e8:16:58:5a:0c:71:a1:ac:18:c0:55:84:77:
                    76:2f:95:fb:d7:18:0c:f7:68:c1:4b:eb:42:eb:e1:
                    aa:59:a2:d8:05:90:2d:e1:fd:4e:cc:15:0e:12:40:
                    8e:df:3c:2e:16:fd:28:8d:4a:31:08:4f:3b:6f:fc:
                    2d:2d:ee:85:28:6e:1e:47:23:8d:42:d4:30:1a:4c:
                    39:91:8c:e9:5b:88:b0:cc:99:dd:37:12:1b:cd:14:
                    7c:a0:c2:31:81:0f:c4:76:96:07:5f:96:39:9f:a2:
                    00:85:b7:1c:75:6f:8c:a4:f7:d4:74:cf:d1:03:7f:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:1B:3F:94:15:D9:15:48:A0:E7:12:12:09:8E:81:3C:2C:D0:22
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231392e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:ad:5a:4b:46:cc:92:31:ed:8d:c1:a8:20:60:8a:e4:73:
         9d:d0:a6:7b:fb:01:f3:13:e9:60:49:a3:b3:f6:83:90:0c:93:
         98:c7:8e:e3:31:30:2d:58:5a:2e:1b:cc:28:81:6e:ea:e4:09:
         d2:22:2e:97:11:a3:8a:3c:8b:1b:79:12:50:d0:40:17:88:47:
         85:b9:f5:eb:2a:3e:30:d3:08:a8:a4:cb:b9:9a:f7:f6:4c:f9:
         91:f2:8e:c4:78:c7:3e:45:73:ec:f6:ad:18:c3:c4:06:10:08:
         22:1d:3b:d7:10:3b:63:82:a2:a8:56:16:a5:25:80:4e:7a:4e:
         f7:fd:96:a4:bd:79:37:3d:87:6d:88:d9:65:67:00:cf:71:4c:
         d4:c1:2b:b2:72:90:98:5d:fc:c6:f4:10:ec:b5:7b:d1:1e:2e:
         2e:bd:88:3b:b7:62:1b:91:f8:e4:b8:e7:cd:83:0a:74:0d:95:
         20:ab:ba:b8:1d:07:8b:a7:cf:57:db:9b:69:0d:f5:8f:8a:5f:
         fc:c3:e8:2e:c1:b0:67:cd:9c:05:9b:c7:c8:fe:26:00:d6:2a:
         27:53:78:18:b2:be:13:98:e3:f5:2b:54:6b:4a:9d:d0:30:99:
         93:cf:4d:1e:7a:38:20:b4:0d:6e:4d:d8:0f:86:b2:10:57:34:
         e1:14:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:14 2025 by rpki-client