Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3236203d3e203532323739.roa
File:                     3137392e35312e3234372e302f32342d3236203d3e203532323739.roa (raw, json)
Hash identifier:          RPEa0++7AsA0MUlswWlGTKAY5O05MX2oEUujUCGxPSk=
Subject key identifier:   8A:24:B2:F5:20:1D:72:6E:6E:C6:4A:67:01:5F:53:FB:47:2E:D7:CD
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       6EAF0F9EE4A6BAFF17E298C1372EAF1536079B21
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3236203d3e203532323739.roa
Signing time:             Wed 17 Sep 2025 13:40:00 +0000
ROA not before:           Wed 17 Sep 2025 13:35:00 +0000
ROA not after:            Wed 16 Sep 2026 13:40:00 +0000
asID:                     52279
IP address blocks:        179.51.247.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 08:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:af:0f:9e:e4:a6:ba:ff:17:e2:98:c1:37:2e:af:15:36:07:9b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Sep 17 13:35:00 2025 GMT
            Not After : Sep 16 13:40:00 2026 GMT
        Subject: CN=8A24B2F5201D726E6EC64A67015F53FB472ED7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:4e:eb:34:a2:c5:a2:0f:d6:64:1b:cc:79:
                    e6:96:70:c7:ae:47:85:ec:e6:d2:ac:b8:c3:7f:aa:
                    c4:d8:ed:28:26:91:04:1d:4a:c2:85:77:66:f0:dc:
                    2a:58:2e:12:3d:16:eb:32:e4:49:d3:73:23:8f:45:
                    00:43:ff:35:a3:7e:05:18:71:f1:d4:19:ae:9a:a6:
                    80:e1:88:05:e5:55:4e:19:94:7e:29:c5:1d:c7:b7:
                    32:3d:9d:d0:c3:e5:8b:19:6c:d5:9a:ed:4b:c4:ce:
                    3c:b8:84:a9:be:3e:f1:94:68:51:44:90:f8:66:9d:
                    26:fd:34:a0:5c:46:58:04:2c:e2:8c:c2:e1:b9:47:
                    ad:ae:70:49:55:cd:ff:92:81:47:f2:19:41:d8:93:
                    cb:e3:c7:d5:3c:44:d8:50:09:ab:8a:65:30:36:d5:
                    11:44:d6:6a:d0:ff:60:f8:fd:1b:04:9b:68:3d:d4:
                    30:c6:af:b1:7f:af:af:bf:7a:4c:8e:d2:86:2b:8f:
                    2c:9b:e5:20:73:4a:db:b3:43:0d:f2:3a:bd:68:0c:
                    44:96:c9:da:ed:f9:ab:4e:97:d0:1c:5a:e9:13:7f:
                    b9:16:61:bf:ce:36:07:95:dd:dc:03:51:bf:05:e1:
                    bf:99:2a:5d:ab:b6:40:c8:6f:65:aa:6c:39:87:b1:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:B2:F5:20:1D:72:6E:6E:C6:4A:67:01:5F:53:FB:47:2E:D7:CD
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3236203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:b9:a7:0c:fa:10:6f:10:d9:76:1f:0e:f2:a2:df:5c:e6:
         92:eb:a6:c1:15:83:ea:4d:53:d9:4b:c7:03:52:74:50:16:2c:
         e1:f3:48:f8:34:61:c4:81:3b:6c:9c:53:4c:53:e1:8c:26:94:
         7a:40:7b:44:be:36:f0:a4:94:9d:8f:2a:be:29:97:8d:1c:59:
         b0:77:2e:bd:d8:48:2b:6e:6d:62:d2:a1:44:07:10:49:2f:d8:
         1d:dc:ff:a1:c5:e3:96:51:ee:14:46:86:ca:16:f5:89:a9:be:
         af:0b:93:a6:4a:d7:46:45:a7:8f:90:d9:3f:b5:b0:1f:56:d6:
         4c:ec:74:32:69:46:4f:d4:ea:76:99:ab:f5:6a:ab:45:71:42:
         17:09:a4:85:57:c9:71:bc:75:d6:db:a1:d0:ca:ce:ad:8b:f8:
         07:cc:e0:e6:ac:7a:57:95:6f:dd:c8:ae:b3:cc:87:58:a5:8f:
         bd:40:ff:1c:4f:66:1e:6c:65:d9:a0:83:c1:dc:e0:09:ed:94:
         d0:1d:93:d3:d1:b4:f8:b4:f5:0a:46:9c:e3:17:9c:59:33:9d:
         1c:a8:c4:93:89:97:ea:e4:75:e6:77:0c:65:f2:15:f7:18:59:
         1f:fd:40:ef:79:69:9a:38:70:ec:4d:14:b0:0b:3f:27:c1:34:
         8e:35:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:50:53 2025 by rpki-client