Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa
File:                     3133312e37322e32352e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          s69cPbqErPcvvhZfLPAw9+p3dNLiBiZotOw/RhgNlSI=
Subject key identifier:   86:64:42:0A:9F:65:29:D5:AB:D0:6C:EF:12:26:CF:29:1C:80:D7:ED
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       4C707C7100F10E2B7CD3954F48977AA624087BB3
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 03 Sep 2026 12:33:32 +0000
ROA not before:           Thu 03 Sep 2026 12:28:32 +0000
ROA not after:            Thu 02 Sep 2027 12:33:32 +0000
asID:                     52455
IP address blocks:        131.72.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:70:7c:71:00:f1:0e:2b:7c:d3:95:4f:48:97:7a:a6:24:08:7b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Sep  3 12:28:32 2026 GMT
            Not After : Sep  2 12:33:32 2027 GMT
        Subject: CN=8664420A9F6529D5ABD06CEF1226CF291C80D7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:ef:c3:80:eb:b7:65:10:d6:8e:3a:e6:8b:
                    e9:1e:f7:46:6d:6a:d5:8e:a0:15:5b:0f:aa:ad:75:
                    cb:00:cf:c8:5b:45:2a:13:26:22:7b:38:40:2a:82:
                    94:79:52:63:82:2c:91:fa:c3:88:4c:c3:9c:bb:5e:
                    cb:00:6f:41:c6:52:c0:4e:23:b0:75:35:aa:c4:fd:
                    de:04:26:8d:9e:62:24:ad:42:4b:8e:6f:96:dd:c1:
                    e5:d7:7b:bd:40:f3:e8:1b:13:b2:a7:52:ac:b9:c7:
                    73:54:80:25:86:ab:56:ec:0c:16:b4:f7:66:3c:d4:
                    1a:35:0c:21:f1:8c:5f:ad:80:62:77:04:6a:71:7d:
                    78:ca:f5:d2:88:0e:e0:ba:95:9c:1a:22:08:07:d5:
                    97:41:b8:1a:4f:3a:70:87:c3:de:e8:c1:82:cf:f6:
                    9f:0b:d9:56:95:12:5a:8b:5d:d7:08:ff:be:e9:ac:
                    4b:04:39:4b:06:b7:f7:3b:df:c6:03:da:fa:0f:2e:
                    0c:fc:92:ed:3c:6b:55:c9:ca:76:3d:98:b3:71:7d:
                    22:61:d2:f1:4e:2b:ac:22:eb:15:3a:db:bf:91:38:
                    c7:6b:a3:77:71:46:4b:a7:30:83:77:e2:86:16:bf:
                    06:64:c2:00:49:11:b6:45:4d:6b:59:3c:ee:43:fe:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:42:0A:9F:65:29:D5:AB:D0:6C:EF:12:26:CF:29:1C:80:D7:ED
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32352e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:d1:ff:c0:be:8e:43:9c:52:64:c2:17:f8:ee:8b:4b:e8:
         d4:35:09:b5:95:4f:3b:4e:5b:f2:f0:e4:14:d9:3a:ae:67:7a:
         86:cc:44:43:c5:08:8f:e4:16:2b:0c:9d:3f:c4:c4:15:46:07:
         dc:79:2c:b8:dd:d4:d2:fb:90:0e:f4:aa:cf:8f:d5:ff:b7:2a:
         ad:c5:79:2a:bf:48:1e:4b:0b:39:aa:63:a8:ea:70:87:57:d0:
         4e:cc:4f:f4:57:ec:09:34:99:a4:10:b6:d4:b2:41:7e:1b:71:
         83:5b:c6:35:23:fe:f7:94:0e:39:29:cf:d0:a5:8f:a5:83:64:
         fd:78:77:2d:59:50:9f:56:03:6e:39:38:26:b3:31:4a:2e:f2:
         b0:15:d2:15:cb:72:83:f1:0c:83:33:c7:a6:b5:4f:e3:53:05:
         7d:ac:19:37:a8:ad:ce:60:e2:4c:93:e6:66:ad:35:d6:6c:03:
         6e:d3:a7:46:ad:22:7f:b3:74:9b:81:50:2a:3e:54:cc:16:b2:
         e3:8b:46:c6:f0:72:63:3e:b8:2c:6a:31:66:c8:43:46:5c:e5:
         62:b1:b5:9f:c8:2f:00:c2:93:9f:1c:d5:2b:0f:3d:5c:d2:27:
         22:0e:40:c8:d5:a6:57:e8:e8:03:94:f1:73:da:12:93:fa:7c:
         b7:5e:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:33:12 2026 by rpki-client