Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3438203d3e203532323739.roa
File:                     323830333a3930303a3a2f33322d3438203d3e203532323739.roa (raw, json)
Hash identifier:          j5qTgUZC397lnkdP3aO4u7ptdiivKiRQYQBXH3WlN50=
Subject key identifier:   98:18:F1:2E:4D:B6:2A:01:33:19:B4:0D:EE:6F:11:68:E9:DC:D6:10
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       37AD8F65C0D2AD3DCCCEBC8C59A8E8A232F34663
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3438203d3e203532323739.roa
Signing time:             Mon 27 Jul 2026 14:47:13 +0000
ROA not before:           Mon 27 Jul 2026 14:42:13 +0000
ROA not after:            Mon 26 Jul 2027 14:47:13 +0000
asID:                     52279
IP address blocks:        2803:900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:8f:65:c0:d2:ad:3d:cc:ce:bc:8c:59:a8:e8:a2:32:f3:46:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Jul 27 14:42:13 2026 GMT
            Not After : Jul 26 14:47:13 2027 GMT
        Subject: CN=9818F12E4DB62A013319B40DEE6F1168E9DCD610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:80:0a:99:c1:54:d5:ec:2c:01:98:ae:92:
                    c9:1b:2e:73:ac:92:20:8c:14:75:eb:a8:a3:1d:9f:
                    83:7a:af:4e:8d:11:7a:2f:e3:71:90:bd:dd:71:ea:
                    5f:0d:2d:87:19:97:fa:ca:5d:99:6c:11:49:ca:a4:
                    d7:16:f9:6f:bd:cd:f2:17:1c:37:c5:88:d3:bb:bd:
                    fe:78:d1:e7:35:b4:ce:8c:f8:6b:26:24:1d:a2:dc:
                    2d:89:38:d2:e2:47:4b:55:01:98:82:0e:42:c6:63:
                    93:ee:bb:d0:7a:b7:27:d4:d0:d3:a2:18:c8:be:a7:
                    cf:75:8e:04:3e:5e:2d:72:8d:cc:d1:d5:87:d2:e9:
                    c4:35:cb:82:3d:55:18:f8:3e:36:65:cd:2c:a0:4d:
                    92:e9:da:c7:98:18:30:44:9c:bf:15:ab:fa:51:ee:
                    30:3c:d8:65:9c:29:ee:29:39:28:47:76:05:c5:77:
                    04:c0:63:8a:eb:3a:53:e4:48:1b:4e:a1:d9:39:d8:
                    5d:66:30:21:0a:bb:1c:47:13:bc:ad:cc:17:bb:5f:
                    94:ff:12:82:cb:47:a1:38:60:ed:e8:46:cd:4c:6b:
                    f0:93:88:a0:5a:78:a8:66:93:79:de:44:9e:25:d7:
                    cc:2b:3e:ba:72:04:33:81:ce:06:bb:20:38:55:ff:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:F1:2E:4D:B6:2A:01:33:19:B4:0D:EE:6F:11:68:E9:DC:D6:10
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3438203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:3a:1c:e6:98:19:08:ce:6b:12:4c:04:8f:88:3c:33:a7:
         6a:38:44:bb:59:69:df:91:0f:23:a7:01:9d:c0:23:b6:61:c3:
         6f:91:88:94:a6:96:a0:f1:a7:aa:dc:39:54:96:dc:64:cd:8a:
         0a:1b:2f:cf:05:37:cb:fb:0a:70:82:bf:cd:47:5b:85:81:50:
         d3:75:e1:42:f6:fb:92:b4:66:40:2e:ff:21:dd:81:73:02:a7:
         ff:14:24:b0:ae:01:61:0a:84:8e:e7:e1:c2:ef:b3:15:1b:58:
         79:d1:73:d9:87:13:53:a1:89:33:70:68:76:6d:64:54:a3:35:
         16:c5:97:a1:f1:64:52:1c:a7:8b:38:2f:1d:41:49:0a:88:50:
         91:94:fc:6b:46:e2:fb:66:01:35:9a:52:b5:7c:09:ec:ec:2e:
         69:f8:56:6c:70:fc:7c:20:13:6d:e7:2b:a4:2a:eb:21:61:e4:
         2d:57:d2:e5:57:ef:a0:ef:b2:76:83:46:f2:71:fa:0c:c1:16:
         5e:b3:b8:72:96:53:f2:3d:ea:67:a6:e0:aa:0c:4a:67:c9:46:
         5a:b6:a8:eb:b2:83:e3:80:69:ef:d3:6f:1b:41:34:0c:08:88:
         cf:56:03:27:da:68:9a:19:65:c0:46:90:8b:30:8b:92:c4:77:
         45:53:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:49:00 2026 by rpki-client