Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3236203d3e203532323739.roa
File:                     3138312e3232342e39362e302f31392d3236203d3e203532323739.roa (raw, json)
Hash identifier:          PQQwQDWBdSQsYAkxWgS7oKdwfYmW4EQQMF0qiozPQXs=
Subject key identifier:   DD:D2:FA:72:A2:EB:80:EE:0B:AB:1D:95:FC:97:94:E5:F4:F4:33:A9
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       2FDB3676FE0943DA7253926370368044235B9B16
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3236203d3e203532323739.roa
Signing time:             Wed 19 Aug 2026 14:26:00 +0000
ROA not before:           Wed 19 Aug 2026 14:21:00 +0000
ROA not after:            Wed 18 Aug 2027 14:26:00 +0000
asID:                     52279
IP address blocks:        181.224.96.0/19 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:db:36:76:fe:09:43:da:72:53:92:63:70:36:80:44:23:5b:9b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Aug 19 14:21:00 2026 GMT
            Not After : Aug 18 14:26:00 2027 GMT
        Subject: CN=DDD2FA72A2EB80EE0BAB1D95FC9794E5F4F433A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:03:01:eb:ef:12:07:cc:93:7c:04:3f:67:
                    95:14:3d:1d:0c:6e:98:c5:fe:9a:76:c6:2e:26:db:
                    a0:7f:7e:63:88:9c:7f:ca:e0:de:11:80:aa:80:d2:
                    96:07:ef:10:da:e3:55:bf:24:be:16:66:5e:a9:7b:
                    0d:37:61:83:a5:6d:47:2e:f4:67:e3:06:53:d2:93:
                    7f:e9:16:9a:02:7e:88:1b:dc:40:5b:ca:0f:40:f8:
                    99:b9:2d:e4:0a:45:aa:8f:6a:20:8b:3a:69:ec:ee:
                    16:0d:f6:a1:b9:bf:18:8e:a3:6a:52:0b:89:59:ab:
                    4f:c8:46:81:4f:a1:f3:4c:de:a8:e1:3c:84:2a:ad:
                    66:45:5f:a3:b9:ed:a8:3b:ba:fe:6b:dc:85:b9:c6:
                    40:b2:24:6d:87:c3:dd:6b:11:63:ac:b3:25:1e:bc:
                    50:79:d2:5b:f8:0f:f2:af:a0:12:be:1d:e5:3d:3e:
                    54:22:5d:81:72:80:4c:ad:06:e2:5c:54:ef:b8:25:
                    0f:cb:16:68:13:f5:8e:df:27:4f:40:0b:b1:f7:5e:
                    2d:7e:8a:e0:e6:a3:d2:06:b5:80:69:0b:2a:f4:c0:
                    13:dc:34:23:13:a5:ae:93:ae:15:f5:30:08:51:b6:
                    72:ed:02:b9:23:cf:58:b4:d8:5a:08:60:b0:89:8b:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D2:FA:72:A2:EB:80:EE:0B:AB:1D:95:FC:97:94:E5:F4:F4:33:A9
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3236203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:50:57:64:95:98:b0:4d:e6:17:37:31:35:d1:aa:3e:f3:
         34:df:bd:73:26:8e:d0:a1:e1:0b:fd:11:f6:a9:d5:20:03:0c:
         48:b1:8e:51:ce:72:d8:f1:14:ef:dd:94:d5:5d:c8:6c:a1:91:
         12:ef:93:01:51:e7:05:2a:17:31:a8:2a:8a:5b:0d:4b:6c:89:
         e0:e2:c8:c4:78:a2:56:60:4b:81:d3:81:37:e9:0f:17:39:6b:
         8e:6d:73:d1:19:5e:f7:af:b9:f4:52:75:8f:c9:c0:64:59:0c:
         84:9f:6d:ef:a7:67:0a:44:13:e8:ee:4c:98:c3:a5:61:7a:9d:
         24:31:e9:b1:29:91:a9:8d:e4:3d:9f:dd:3d:09:46:b9:dd:b0:
         00:cc:f2:21:72:2a:ff:d4:b1:bb:d0:77:64:9f:56:f2:b6:42:
         d9:03:5a:8a:47:f2:bd:3a:80:3c:2b:5c:9f:b7:a4:2a:ee:ce:
         75:b0:ad:b3:e5:4d:94:c7:0b:ba:48:1a:bd:8a:7c:aa:f3:27:
         93:1c:bd:d0:72:3c:4a:7d:dd:9f:92:32:22:73:0c:73:5e:3e:
         f5:b2:9a:20:86:02:28:69:1d:bb:92:25:53:06:6a:8b:0b:ff:
         f2:8d:fb:d8:10:f2:93:ac:7f:24:b0:b9:c4:9f:14:2b:e5:a5:
         2f:a2:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:56 2026 by rpki-client