Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa
File:                     3133312e37322e32362e302f32332d3233203d3e203532343535.roa (raw, json)
Hash identifier:          2KwK1wbkOxK4YsKRIMjY9HYkEfUvpNMnm44sAXhTZ4k=
Subject key identifier:   CB:FC:7C:0B:DA:6E:8A:EF:53:A8:39:55:34:54:72:E2:A6:99:6B:10
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       5EDD33340BF70C0AFAC60A229DB50BE51580B4A2
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa
Signing time:             Thu 03 Sep 2026 12:33:35 +0000
ROA not before:           Thu 03 Sep 2026 12:28:35 +0000
ROA not after:            Thu 02 Sep 2027 12:33:35 +0000
asID:                     52455
IP address blocks:        131.72.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dd:33:34:0b:f7:0c:0a:fa:c6:0a:22:9d:b5:0b:e5:15:80:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Sep  3 12:28:35 2026 GMT
            Not After : Sep  2 12:33:35 2027 GMT
        Subject: CN=CBFC7C0BDA6E8AEF53A83955345472E2A6996B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:c1:ad:57:88:05:74:55:57:9f:e6:02:f9:
                    bf:54:1c:8b:18:dc:37:69:dc:6f:07:f8:dc:c6:2e:
                    6f:d1:3e:85:e4:82:83:31:b4:08:59:05:f7:96:c3:
                    79:5d:6f:af:bf:02:9e:68:26:85:63:65:70:42:85:
                    b7:9b:05:5b:03:46:9a:08:4d:81:b1:f7:f8:97:dd:
                    51:e7:b0:fa:d1:f4:80:7d:bc:13:d2:27:af:de:97:
                    eb:ac:7c:34:d6:3e:8f:26:55:d3:3c:a6:44:36:3d:
                    59:cc:ae:43:3a:9b:cf:dd:e3:3c:7c:e8:85:0c:24:
                    3b:f5:90:48:38:5f:6f:f8:dd:1d:96:82:74:5a:b1:
                    33:b1:37:8f:d7:49:f5:c4:e1:1f:d4:d2:20:9e:b6:
                    d8:5b:8c:2a:c1:23:05:6d:42:d6:7b:91:cc:9e:af:
                    22:e4:22:a8:3c:97:81:23:d5:15:a2:03:43:21:09:
                    b6:91:95:a3:90:81:bc:83:71:af:e0:88:9c:e0:5f:
                    b4:77:05:49:62:6d:48:16:bd:79:86:15:5a:82:2a:
                    0f:6e:9b:b2:d0:94:03:a2:58:42:5a:72:83:36:ae:
                    09:56:82:1f:21:ab:47:c3:24:d8:d8:e9:50:2c:6a:
                    30:08:74:f8:db:13:ef:cd:b3:af:0b:9d:07:bb:10:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:7C:0B:DA:6E:8A:EF:53:A8:39:55:34:54:72:E2:A6:99:6B:10
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3133312e37322e32362e302f32332d3233203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:4d:76:72:78:43:ff:79:05:f7:a2:0e:2c:85:87:37:5a:
         94:10:7e:61:61:51:3d:aa:17:04:17:b0:cb:af:54:2a:3d:55:
         73:a2:ae:af:e1:dc:2d:85:59:06:23:88:d1:7f:b0:f2:9a:a3:
         43:6b:ce:b6:6c:7e:c5:09:65:6f:dc:6a:9b:af:5b:5e:8a:7d:
         4c:4b:fd:63:76:73:a4:c1:8d:ca:12:52:2c:14:25:03:15:f3:
         05:2e:d6:56:12:94:51:da:6a:7c:cb:a6:76:8f:b4:05:17:79:
         fc:ba:c8:b1:f0:07:45:78:44:3c:05:72:f9:30:13:38:46:f9:
         f1:40:a4:b3:f2:ce:a5:6c:4e:fa:41:f6:21:05:89:e5:91:11:
         63:9b:43:94:c9:64:18:d9:d7:ba:3e:d8:60:0c:35:54:91:7a:
         15:71:21:85:86:c9:bc:10:2e:90:d3:3d:e8:f8:63:dc:e9:dc:
         a6:c8:61:ca:70:82:0a:ad:52:94:9c:f9:ab:9e:4b:b6:f2:46:
         c6:3f:cd:10:08:21:f0:91:bb:f8:a3:c9:7b:f2:95:98:71:20:
         4a:da:82:4c:9d:0f:3a:02:97:c5:e4:25:4e:61:0e:e3:d2:0a:
         f1:60:7f:25:7a:98:06:2c:16:8c:4d:32:9c:e3:56:db:58:a1:
         f8:5d:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:32:27 2026 by rpki-client