Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32342e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          PV1WtT8DnThSj/hOxKRyxMhRZbzgfkRgOKHlZDqiUfU=
Subject key identifier:   9C:63:65:E7:75:49:F8:32:C3:CC:8A:B3:9F:98:3F:04:15:51:08:E9
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       6951BA63B3027C513A44B016BBE73AE015964E2B
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 03 Sep 2026 12:33:34 +0000
ROA not before:           Thu 03 Sep 2026 12:28:34 +0000
ROA not after:            Thu 02 Sep 2027 12:33:34 +0000
asID:                     52455
IP address blocks:        131.72.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:ba:63:b3:02:7c:51:3a:44:b0:16:bb:e7:3a:e0:15:96:4e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Sep  3 12:28:34 2026 GMT
            Not After : Sep  2 12:33:34 2027 GMT
        Subject: CN=9C6365E77549F832C3CC8AB39F983F04155108E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:4e:a0:20:da:1c:6d:5a:80:4a:db:3c:1d:
                    91:74:a9:0b:31:ed:1a:0a:30:2d:b6:fe:d7:80:00:
                    57:d8:b2:31:a3:9e:03:56:19:46:24:b0:fa:fd:c3:
                    78:7f:22:09:95:96:06:a1:e4:37:89:7e:a2:a2:ae:
                    d6:34:3b:03:ab:d8:23:eb:e1:b7:57:cb:ac:44:f9:
                    63:c7:93:03:9d:fc:6d:ea:35:55:b9:9c:6f:47:78:
                    c3:4c:47:0f:39:cd:52:a2:1c:3f:fc:0b:c2:7f:56:
                    d6:60:a9:2d:53:75:40:f6:74:39:68:61:47:38:ec:
                    e6:37:d2:a1:51:25:bc:4c:94:cc:a6:3e:70:f7:a7:
                    e5:aa:bb:7a:65:e7:6c:5c:af:27:81:9d:27:16:4e:
                    d0:a2:1d:b4:6c:4c:6d:32:e6:28:d3:b1:e0:ff:5f:
                    e4:15:35:52:a7:b0:bf:bb:8a:df:2e:ff:b8:19:cd:
                    bb:d4:9b:68:2d:5a:a5:8b:00:d3:34:29:e1:a1:e5:
                    3f:1a:6e:c6:fd:64:79:46:95:74:bb:6d:1c:ba:57:
                    b8:71:0b:8b:7b:4c:03:08:16:3f:d1:b1:3e:63:35:
                    e8:82:b6:e5:4f:ba:ac:0c:ea:fd:28:d8:f1:d6:a6:
                    73:8e:4b:80:88:a2:0a:a9:3c:b8:e1:ab:b8:e8:b3:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:63:65:E7:75:49:F8:32:C3:CC:8A:B3:9F:98:3F:04:15:51:08:E9
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32342e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:88:96:fa:f3:00:4f:99:c0:e6:c2:50:56:1b:32:e7:d0:
         76:b1:29:ff:57:7a:24:76:e8:92:0f:31:97:47:ee:6a:b6:ed:
         1c:19:98:2d:2b:d6:ad:c3:7c:84:42:d1:66:b4:29:c5:bf:ee:
         68:ab:31:d6:d1:14:ee:f2:0d:53:96:f2:1c:ca:94:e8:88:ec:
         79:cd:46:21:97:72:4e:78:d1:6d:4b:79:f2:8c:58:0f:cb:24:
         d6:b2:bc:3d:d4:ed:14:81:c7:84:54:8c:2c:f9:98:b8:6c:4e:
         a0:37:86:cb:32:ed:b9:e1:26:f3:f0:d3:73:82:64:87:ce:fb:
         31:a3:99:09:28:49:77:45:20:fb:de:72:b7:b1:a7:3c:43:73:
         67:c3:ee:d4:30:bf:12:68:2c:70:d6:fa:f9:c2:49:ca:e6:cf:
         0b:e0:26:d8:a0:1c:d5:fa:60:ea:a9:54:bd:33:2a:4c:54:7e:
         75:7b:ee:8b:b0:fb:61:f3:9e:f1:d3:c9:d5:74:8b:21:47:d9:
         bd:27:6f:cf:d9:6e:58:73:5a:95:ad:4f:27:22:41:0d:42:6f:
         c7:9a:17:81:bb:51:72:d9:1c:8e:83:95:9a:83:a4:f3:ef:df:
         23:7b:c7:b0:0f:29:c0:33:51:5f:cd:b5:96:4a:88:68:ca:48:
         b4:1b:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:29:38 2026 by rpki-client