Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32332d3233203d3e203532343535.roa
File:                     3139302e3131332e39322e302f32332d3233203d3e203532343535.roa (raw, json)
Hash identifier:          3tbg8+Y45boPC9VieaFBnkFKmj1w2BmH4WU+WEPSAfU=
Subject key identifier:   62:47:EB:C4:0C:03:D4:68:C0:23:EB:59:AE:39:2D:6E:D2:0B:95:A8
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       1CA5D58C46DA9EA60A050DDDA1FB3DE4871E9042
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32332d3233203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:06 +0000
ROA not before:           Thu 02 Oct 2025 12:25:06 +0000
ROA not after:            Thu 01 Oct 2026 12:30:06 +0000
asID:                     52455
IP address blocks:        190.113.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a5:d5:8c:46:da:9e:a6:0a:05:0d:dd:a1:fb:3d:e4:87:1e:90:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:06 2025 GMT
            Not After : Oct  1 12:30:06 2026 GMT
        Subject: CN=6247EBC40C03D468C023EB59AE392D6ED20B95A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:6b:71:f1:a9:ef:fb:69:f0:91:90:a2:23:
                    d3:d6:9f:df:4f:7b:d4:ae:f5:d6:cf:d1:51:aa:06:
                    57:32:1c:d4:3f:31:55:96:d0:77:e4:cd:19:d2:15:
                    ed:cb:93:21:87:67:af:38:e8:d7:8e:b8:d5:b5:e3:
                    ea:f6:1a:6e:1a:2a:66:47:26:da:ef:15:3a:65:96:
                    b1:40:3a:12:d4:5a:a6:9b:9b:54:64:e0:4e:fd:85:
                    8e:77:81:93:e7:d3:5c:1e:f5:f2:82:fc:ad:e4:17:
                    db:d7:c7:7c:c9:f1:6b:29:06:d8:e7:f1:7e:47:c9:
                    6e:e6:c6:93:ae:20:f7:72:15:12:02:c7:25:81:f4:
                    f1:2f:49:4c:20:7a:6f:89:c4:33:f9:5e:4f:40:a5:
                    7a:1b:67:12:a0:40:e3:32:99:f8:81:54:9c:ba:74:
                    35:c2:ff:07:e2:86:9e:96:28:58:d7:ea:03:fd:68:
                    56:ff:02:0d:6f:dc:bc:dd:88:02:d8:fe:55:c5:fe:
                    06:e2:61:21:63:02:0c:37:37:25:61:6a:74:24:d2:
                    ed:1e:9a:bb:03:db:46:ac:e6:ad:f6:01:76:38:cb:
                    5b:83:8c:67:af:80:9a:48:ea:5f:9f:44:28:c9:66:
                    2e:6f:90:95:76:f2:bf:16:4c:4d:82:be:b7:b9:e8:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:EB:C4:0C:03:D4:68:C0:23:EB:59:AE:39:2D:6E:D2:0B:95:A8
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32332d3233203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:d7:fd:e3:54:87:2d:0e:8a:19:06:0a:69:df:1e:9a:26:
         92:44:97:35:ce:17:66:b3:f6:37:00:7d:58:4c:c2:ec:76:78:
         22:f2:58:50:9e:d4:98:08:75:b7:19:0b:fd:98:7a:7d:c3:2b:
         67:1b:c5:c6:96:43:82:69:91:d7:bd:d8:c1:08:d5:09:e4:d7:
         06:25:42:34:72:57:19:50:d5:2b:8b:82:1b:bd:24:0d:35:64:
         00:8d:8d:f2:8c:87:d2:24:ed:22:ed:71:97:a0:c5:91:66:42:
         fe:25:6e:fe:d5:76:97:03:15:6e:fd:3a:d7:a8:dc:13:b3:c2:
         40:36:29:68:c1:0c:81:c5:67:41:30:fb:38:3d:9e:98:41:51:
         11:a5:85:ec:5d:de:8c:6c:92:24:24:af:a4:b9:54:49:59:92:
         be:50:c0:26:00:0f:66:94:b8:91:27:6b:66:2e:47:9b:3f:1c:
         11:51:5f:15:c7:54:d5:4a:01:20:42:b1:89:fb:9b:b3:df:d0:
         ca:56:11:cf:2d:19:46:55:58:f0:ae:8b:7d:46:97:30:6b:7e:
         c7:82:9c:36:7c:be:46:0a:72:bb:f0:b6:d8:65:cb:ff:c3:3a:
         8c:27:a1:2e:c4:48:30:f2:a0:a7:01:b7:b7:db:47:d3:39:8e:
         22:04:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:18 2025 by rpki-client