Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa
File:                     3133382e35392e31322e302f32322d3232203d3e203237373530.roa (raw, json)
Hash identifier:          kWOm8tux0vVniKrN2ASY5ErAwoU5yyVEfF9QzbNGtJI=
Subject key identifier:   17:5D:02:19:BE:83:02:41:17:2A:F0:C8:22:1E:CB:90:FC:0F:81:79
Certificate issuer:       /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial:       05E564614088659A0DC80085364615202F31CE10
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa
Signing time:             Tue 06 Jan 2026 19:30:49 +0000
ROA not before:           Tue 06 Jan 2026 19:25:49 +0000
ROA not after:            Tue 05 Jan 2027 19:30:49 +0000
asID:                     27750
IP address blocks:        138.59.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e5:64:61:40:88:65:9a:0d:c8:00:85:36:46:15:20:2f:31:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Validity
            Not Before: Jan  6 19:25:49 2026 GMT
            Not After : Jan  5 19:30:49 2027 GMT
        Subject: CN=175D0219BE830241172AF0C8221ECB90FC0F8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:d0:5a:dc:a0:30:f4:de:da:d5:43:50:26:
                    df:3e:a3:a7:f6:5d:cc:31:4b:0c:fc:fe:a4:8c:b2:
                    92:25:27:e2:01:6d:c6:93:2d:55:2b:b5:1c:91:d9:
                    00:45:d0:4d:77:58:72:8d:98:5e:bf:b6:48:c8:fc:
                    ed:fe:ad:b8:0f:9b:a9:21:f7:9e:e8:af:11:16:6c:
                    6b:49:88:97:d7:08:7e:b4:48:97:b9:71:6a:c0:00:
                    22:35:96:ce:49:3a:72:6c:14:8d:13:ec:30:df:95:
                    39:f8:3f:c2:ea:95:26:46:6f:02:7f:2f:fb:5b:ee:
                    2e:32:16:3b:ba:bd:c5:bb:ee:b0:c2:a3:8d:83:e9:
                    90:94:2e:bc:04:b3:9e:4a:a0:9a:02:c6:11:f4:bf:
                    3f:8d:2f:33:9f:cd:3a:18:42:62:bc:a3:59:65:b8:
                    90:11:3f:2d:2f:a3:36:81:28:63:cf:b6:30:34:0b:
                    59:36:fb:d9:ac:0c:0f:5b:5f:9a:87:cf:0e:9e:46:
                    b3:8a:17:3d:1c:e9:0f:6a:79:d4:d5:69:ff:5c:40:
                    7f:a7:41:74:61:16:1b:38:a3:c6:81:c8:c5:d0:e6:
                    32:79:6c:14:98:c2:ba:25:ca:4a:16:d4:30:c9:db:
                    ed:82:16:20:3f:9a:78:53:5d:d0:d6:4d:1f:1c:c0:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:02:19:BE:83:02:41:17:2A:F0:C8:22:1E:CB:90:FC:0F:81:79
            X509v3 Authority Key Identifier:
                keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:18:77:59:d1:e4:c6:bb:53:f0:11:fa:31:07:22:59:4f:9d:
         4e:3b:40:e9:f5:55:25:f9:8f:04:ef:51:57:60:58:1b:84:11:
         cb:ee:45:8d:47:78:06:62:77:d2:a7:8e:a2:b1:f4:ce:c3:eb:
         73:f0:eb:a7:b4:73:e8:97:ba:b8:df:fd:ef:3c:f2:77:7d:da:
         06:dd:59:8e:bd:98:0d:27:6c:80:0f:e5:e5:34:b8:4e:62:27:
         90:85:3e:5c:ab:a1:5f:1b:f8:bd:28:f1:46:5b:51:77:95:ed:
         5b:cc:38:0e:1e:d3:8f:58:34:de:30:6b:16:57:94:0b:bc:31:
         4c:e9:dc:96:6a:67:33:46:e4:bb:96:9b:bf:6b:b4:df:e5:cb:
         f3:98:1d:24:97:8a:0d:30:4a:21:82:a0:a1:e4:c4:ad:4f:9d:
         f5:80:26:0d:c7:c2:c8:52:d8:5b:04:30:88:c5:12:4a:ad:f9:
         05:db:25:20:b9:79:ff:50:61:27:07:6a:09:d8:29:65:c7:51:
         8b:93:e3:c6:d7:0b:1b:9e:11:7c:4c:38:f1:b5:fb:94:60:b5:
         9d:4a:0b:a2:e8:7c:86:10:f6:85:21:1d:34:24:17:13:39:41:
         4a:ed:61:43:d0:72:f5:cb:8c:c0:c8:cf:3e:71:12:9f:9a:d1:
         b1:d8:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:07 2026 by rpki-client