Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32342d3234203d3e203532343535.roa
File:                     3139302e3131332e39322e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          I3JiSTDQ5lV319RToKVOtm89FJMeONbRvbpYlSEZI78=
Subject key identifier:   07:23:6F:20:07:04:58:6B:18:72:A2:5F:D2:8D:ED:9B:07:A4:6D:18
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       60495F8E7CDE545E55E0CB4D45D96187CC78619E
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:09 +0000
ROA not before:           Thu 02 Oct 2025 12:25:09 +0000
ROA not after:            Thu 01 Oct 2026 12:30:09 +0000
asID:                     52455
IP address blocks:        190.113.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:5f:8e:7c:de:54:5e:55:e0:cb:4d:45:d9:61:87:cc:78:61:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:09 2025 GMT
            Not After : Oct  1 12:30:09 2026 GMT
        Subject: CN=07236F200704586B1872A25FD28DED9B07A46D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:d5:fe:80:1b:04:84:62:44:13:d9:5d:be:
                    df:db:7c:b9:19:48:f6:8e:97:18:26:74:77:fe:e5:
                    1c:19:25:93:6e:ff:a1:5d:3d:3e:8f:af:b7:87:07:
                    06:ae:c7:03:3b:3f:31:da:f9:7f:c1:e6:e6:87:65:
                    6c:76:9d:35:d9:5b:56:7f:6f:3e:07:ad:f6:e1:f3:
                    eb:e8:8c:ef:aa:2d:8b:4a:6a:2f:9c:8d:5c:1d:18:
                    85:da:77:1c:7b:73:8f:78:67:a3:2c:57:7f:e6:3e:
                    2b:10:b1:07:96:73:37:c2:8c:03:99:f3:5a:da:f4:
                    b0:09:0f:c1:96:bf:be:88:15:c1:b5:53:af:34:1c:
                    51:0f:41:ed:68:66:ef:fe:ef:53:cc:db:b0:4f:da:
                    bb:af:11:d8:c2:7a:6c:04:61:04:30:82:41:51:29:
                    17:ab:7d:43:e9:18:12:bc:a6:dc:9c:6f:08:4e:26:
                    1f:db:11:2d:25:e7:85:d3:1d:42:56:08:cd:8b:90:
                    3a:a0:20:34:ca:32:32:b3:7a:7b:fe:a7:f8:fc:45:
                    9d:2b:6d:43:11:6f:1f:c1:49:73:dd:e3:76:35:ec:
                    e7:5b:11:91:d3:c5:dc:4c:3b:44:38:0b:03:21:1c:
                    2e:50:4c:03:6d:2f:0c:2d:f6:0c:70:7d:cf:e3:5c:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:6F:20:07:04:58:6B:18:72:A2:5F:D2:8D:ED:9B:07:A4:6D:18
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:04:b7:d1:6f:85:4a:93:77:56:a4:f9:0a:94:99:ae:0c:b5:
         d5:b0:ef:15:c9:4b:3e:d3:93:20:fb:88:54:96:22:a1:1c:cf:
         1d:b8:6b:63:0e:ff:37:96:b0:a5:ce:04:b6:f0:c3:e0:54:ca:
         9d:2c:31:b2:ff:20:4a:90:04:e5:38:e4:61:0c:c4:08:e1:17:
         01:82:80:d9:14:29:a2:27:41:73:3f:35:0a:65:f6:25:e5:c5:
         26:4f:c9:28:8a:62:d3:93:2d:90:77:9f:4a:81:82:66:7f:89:
         13:6d:23:54:89:d5:71:2c:9a:09:95:cb:1d:d5:ba:49:24:a0:
         29:76:ef:71:a4:64:30:f3:37:4e:6f:2c:21:21:21:1d:68:d4:
         b6:67:d9:19:34:f6:b9:03:d8:e4:b9:d1:a4:3e:9f:06:d2:9c:
         c9:d8:d3:95:41:ad:61:e7:a7:a2:82:de:3b:ef:87:61:4a:7f:
         80:48:7d:0a:92:b2:17:71:8f:e2:f3:ed:86:d3:af:54:61:0f:
         7b:fa:1d:f1:a4:d1:c5:bf:76:ec:36:b6:76:cd:42:10:b7:89:
         54:3b:3f:27:bc:d3:b5:b2:3d:54:7e:c7:1d:f3:5b:8b:c3:7e:
         18:a3:6f:b0:43:cc:7b:c8:29:de:ad:c8:19:41:e1:88:a2:a3:
         db:61:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:09 2025 by rpki-client