Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa
File:                     3139302e3131332e39352e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          qbGV2hVVYcDdPQurgFP5Scf4O6jBQqW1BwO2+/IKeM4=
Subject key identifier:   5D:F9:61:4D:7C:7A:9D:2A:D5:79:7C:1F:73:32:0A:8E:83:85:45:CF
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       577AED90E036C7DD7C6388521737D81C06A46A1F
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 02 Oct 2025 12:30:10 +0000
ROA not before:           Thu 02 Oct 2025 12:25:10 +0000
ROA not after:            Thu 01 Oct 2026 12:30:10 +0000
asID:                     52455
IP address blocks:        190.113.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7a:ed:90:e0:36:c7:dd:7c:63:88:52:17:37:d8:1c:06:a4:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Oct  2 12:25:10 2025 GMT
            Not After : Oct  1 12:30:10 2026 GMT
        Subject: CN=5DF9614D7C7A9D2AD5797C1F73320A8E838545CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:6e:88:eb:2a:22:14:8f:4a:1c:a6:a5:ec:
                    ab:5d:64:f3:a9:be:64:c0:d7:9c:b9:87:87:71:1d:
                    69:2f:f4:82:56:57:9c:ab:93:dc:96:0b:a5:58:26:
                    32:32:08:19:e5:71:ba:9a:95:b6:3f:da:31:79:34:
                    32:5c:25:51:c3:01:1f:b0:86:ae:72:1a:38:ba:03:
                    2a:16:e2:73:96:fb:f7:9d:7c:be:1d:8b:2d:22:e2:
                    10:22:7a:5d:4d:b1:11:27:83:f4:65:7d:9c:ec:04:
                    2a:d0:9e:66:8f:29:a2:0c:4a:02:bc:d8:e3:48:14:
                    5d:bc:19:c0:11:d2:4a:71:69:6a:28:0c:4b:96:6e:
                    7e:dd:68:36:3c:49:f4:d8:69:87:bf:3d:b4:74:d8:
                    cd:0d:81:87:d7:cb:0e:72:0a:74:69:30:3a:cf:7e:
                    95:a8:56:1e:4c:f0:3d:ba:ea:65:6f:29:e7:01:21:
                    93:65:29:28:1c:fe:8e:45:a9:3a:15:68:a8:05:1f:
                    7c:6b:27:06:05:74:4b:b7:b9:27:be:98:db:bf:5b:
                    1a:5d:a6:ca:87:8f:e8:a9:09:ff:f9:46:2e:df:78:
                    76:0f:65:9b:66:fb:ea:14:c8:50:2c:89:af:a2:f2:
                    32:07:b7:c4:c7:15:df:a6:1b:4e:42:d7:dc:96:24:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:61:4D:7C:7A:9D:2A:D5:79:7C:1F:73:32:0A:8E:83:85:45:CF
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:29:91:f5:10:d2:76:ca:80:15:03:f0:e0:9c:95:2e:4f:ee:
         92:76:60:4d:90:fd:5b:fd:9f:f2:b2:d3:9c:9d:69:52:bf:05:
         48:a4:27:39:bf:26:4d:b2:bd:76:bc:cf:04:a3:41:a2:53:47:
         68:1a:7a:40:20:a8:85:36:91:12:bb:52:46:9c:d8:eb:4f:51:
         8b:a5:34:2d:23:77:95:e2:c3:57:40:48:bf:d4:50:93:f6:5a:
         d3:a5:54:2c:29:f5:48:8d:1c:ee:ee:5e:cc:d9:4b:22:6a:58:
         63:a2:aa:de:30:fa:fd:e9:20:57:29:ff:4c:33:70:65:a0:7d:
         1a:4a:c2:52:23:57:2a:bf:30:6a:91:f0:15:2e:b7:57:60:59:
         b9:f0:bd:69:b1:3a:f6:93:2d:bc:2b:21:4a:83:99:d2:2c:4c:
         00:72:91:c9:d2:09:5f:9c:11:27:cd:b4:c1:0b:5b:dc:91:65:
         d0:c7:1f:dc:d1:fa:61:9f:4a:6c:36:ac:b9:0d:c5:e7:b0:b6:
         10:70:65:09:9a:d6:7a:70:0a:c4:8d:16:df:ce:57:f2:62:42:
         0f:ef:f4:ab:ca:df:6c:d1:23:5a:a6:94:16:0e:54:9f:0b:c4:
         0b:1d:89:1a:a0:62:24:20:12:a5:f1:0e:33:0c:56:a9:98:47:
         86:be:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:16 2025 by rpki-client