Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32322d3234203d3e203532343535.roa
File:                     3133312e37322e32342e302f32322d3234203d3e203532343535.roa (raw, json)
Hash identifier:          KXiQ7Qf9TyXx72r/ermIQJfZfCTM4/QmRCJLoscWfUA=
Subject key identifier:   53:18:63:4F:FB:3E:4A:BB:17:1E:DF:ED:F8:3A:E8:E6:67:DD:47:C3
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       35B014EEEFF757CF96F156773EFA98A7678A1014
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32322d3234203d3e203532343535.roa
Signing time:             Tue 04 Feb 2025 18:54:56 +0000
ROA not before:           Tue 04 Feb 2025 18:49:56 +0000
ROA not after:            Tue 03 Feb 2026 18:54:56 +0000
asID:                     52455
IP address blocks:        131.72.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b0:14:ee:ef:f7:57:cf:96:f1:56:77:3e:fa:98:a7:67:8a:10:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Feb  4 18:49:56 2025 GMT
            Not After : Feb  3 18:54:56 2026 GMT
        Subject: CN=5318634FFB3E4ABB171EDFEDF83AE8E667DD47C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:71:bf:2f:e2:f3:b5:f6:13:b2:2f:a8:d4:
                    82:8c:c4:46:30:20:ef:d6:23:1e:c5:fc:ff:0e:3e:
                    c0:5e:f0:60:aa:3f:4e:93:2e:df:0f:52:95:b6:e3:
                    f3:83:f4:7b:c9:79:ec:0b:53:e3:03:c4:f4:31:cd:
                    77:b2:8a:01:a7:77:61:b1:a9:97:be:5f:de:bc:81:
                    95:69:33:22:ec:b6:73:ae:1a:c8:38:22:f2:73:4d:
                    11:40:f2:26:4e:9a:1c:0d:b5:d0:11:b7:60:d1:54:
                    2d:35:75:6d:57:ac:6c:20:87:5e:63:83:e8:39:03:
                    03:8f:cf:15:e3:c1:1d:9d:60:fa:fd:11:50:23:15:
                    f4:cd:c0:78:30:ae:6b:bc:33:bc:e1:51:fd:77:d3:
                    36:67:65:73:37:71:86:40:1d:fc:51:92:58:ec:73:
                    bc:b2:0b:30:07:24:c3:71:12:5d:05:53:90:f9:ed:
                    ac:9a:a3:f8:7d:41:38:cd:d6:e8:ad:7c:a3:b6:1f:
                    a3:da:5c:46:8b:48:62:48:23:0a:74:1c:bd:9f:27:
                    0c:b8:fa:e5:3a:95:76:54:17:85:0a:aa:78:40:17:
                    97:14:99:94:cf:1b:d4:98:26:4b:47:25:de:b6:00:
                    e7:6b:48:04:2e:31:b8:72:46:3e:19:4c:65:2e:44:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:63:4F:FB:3E:4A:BB:17:1E:DF:ED:F8:3A:E8:E6:67:DD:47:C3
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32322d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:65:01:5d:10:d6:73:44:e3:44:6c:d8:7a:e3:17:83:71:
         e6:c3:85:fa:7b:5e:95:52:58:32:15:22:2c:90:12:8f:da:ad:
         66:e2:20:09:3e:c2:09:ee:3a:55:1e:09:b2:a0:2f:a2:18:1e:
         ff:58:17:6d:86:6d:e0:7f:40:48:9b:76:ff:11:a6:77:5a:cb:
         38:35:d4:cf:0f:aa:93:1e:b5:4f:d5:1c:81:5f:cd:b1:86:91:
         e9:ca:e0:7a:8c:86:d2:8a:23:66:a3:00:42:e3:59:ea:2b:38:
         de:a8:91:dd:b2:53:41:67:65:e8:a2:07:61:4d:cd:aa:81:87:
         c0:2c:ce:77:3c:15:ac:b4:83:3b:05:16:da:f8:44:10:a2:dc:
         7f:b1:f9:d2:b3:7a:67:24:cc:28:34:1e:7a:47:b0:c5:8d:0e:
         fa:c0:7c:7b:d5:54:6c:42:26:c6:c2:b2:53:36:26:ad:a4:94:
         86:ad:df:bc:9c:b4:55:0e:49:0a:f7:04:90:a4:b5:68:61:0b:
         b4:a1:3e:1e:ab:a2:1f:e5:d3:3f:0d:71:7b:bb:c6:15:3e:ee:
         7a:97:0c:02:fb:c7:69:94:0f:b5:32:c1:d0:f2:71:78:74:91:
         bf:69:70:a2:2e:cb:2b:d5:24:08:e3:59:1f:f8:52:44:23:ba:
         af:84:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:29 2025 by rpki-client