Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3236203d3e203532323739.roa
File:                     3138362e3134382e3132382e302f31392d3236203d3e203532323739.roa (raw, json)
Hash identifier:          +Khg3hq5zEV34ASXYsiVf1OHjLngAoZvFlbesyIpn5g=
Subject key identifier:   38:9D:02:66:B0:64:B2:B4:3A:C6:51:C3:22:4F:33:11:47:5C:24:73
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       4CD207809F0FC49D53FCCBE51EA9FE0380DD7A8A
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3236203d3e203532323739.roa
Signing time:             Wed 17 Sep 2025 13:40:01 +0000
ROA not before:           Wed 17 Sep 2025 13:35:01 +0000
ROA not after:            Wed 16 Sep 2026 13:40:01 +0000
asID:                     52279
IP address blocks:        186.148.128.0/19 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 08:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:07:80:9f:0f:c4:9d:53:fc:cb:e5:1e:a9:fe:03:80:dd:7a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Sep 17 13:35:01 2025 GMT
            Not After : Sep 16 13:40:01 2026 GMT
        Subject: CN=389D0266B064B2B43AC651C3224F3311475C2473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:3b:cf:67:6c:ff:08:31:6e:e8:08:cd:ef:
                    be:74:bc:fd:1a:9c:cf:d0:61:e6:68:92:4f:50:aa:
                    c2:9a:47:b6:c6:bc:ef:09:d2:db:c4:82:fa:c3:33:
                    06:a5:b2:ab:1d:f8:56:8b:87:a9:e6:56:56:aa:cc:
                    c7:31:71:7d:33:41:61:a5:2a:ff:51:49:d0:4e:60:
                    55:cf:f6:cf:fb:65:96:da:08:f1:49:a3:9e:7b:74:
                    d3:47:49:fb:3b:7b:be:ab:1f:9f:25:62:3f:c7:1e:
                    15:22:8a:40:26:16:28:08:db:09:1b:fa:3c:57:77:
                    e2:e7:a8:1c:a9:06:e7:4e:24:44:e8:54:fc:60:9f:
                    bb:e6:f3:d9:b4:c3:61:79:69:82:38:0e:84:c4:94:
                    ae:1e:e3:4a:ce:70:48:c6:3d:bc:10:5b:32:10:6e:
                    36:2c:7f:86:09:d2:87:2b:20:32:5b:be:3c:87:8c:
                    47:80:3f:11:5e:97:06:96:81:20:ec:04:d4:03:a4:
                    07:12:2b:26:f4:74:13:d0:dd:fa:dc:bd:4d:f5:eb:
                    81:0e:e5:15:11:d5:d4:aa:7a:df:f2:f3:25:2a:bf:
                    6d:40:02:fc:6d:3e:cc:52:e5:96:f8:6f:58:60:e3:
                    66:4b:88:3e:d3:aa:ff:11:fa:20:8a:53:28:bb:05:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:02:66:B0:64:B2:B4:3A:C6:51:C3:22:4F:33:11:47:5C:24:73
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3236203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:50:5a:a5:61:da:2c:34:8b:67:98:28:cc:69:45:f8:72:
         58:76:bc:fc:c2:35:6e:70:d1:be:86:f4:16:65:d7:e3:8c:f0:
         a8:d2:e9:3d:64:e9:4c:35:42:d9:eb:16:e4:d3:2c:1b:10:41:
         6d:9f:23:e7:98:0b:6f:20:25:f9:8e:87:dc:69:e2:a4:c2:c8:
         52:1f:97:f3:64:25:00:36:7f:d2:3e:dd:5f:fb:78:bd:ff:20:
         10:56:79:0c:53:e4:ec:2e:01:aa:aa:a8:e7:a7:21:61:a6:90:
         fb:ca:41:79:b1:1b:67:4d:ae:0f:6a:82:39:c3:52:7b:c5:88:
         b6:07:8b:40:c9:37:f4:d7:f8:e4:a5:3e:71:4d:d4:89:7e:2d:
         da:7c:fe:e8:02:3b:03:81:4c:f3:74:4e:57:0d:91:14:39:a9:
         cb:2f:c0:ac:03:18:42:91:32:b5:44:e9:ef:d2:0f:05:65:74:
         fe:a7:3a:cb:3c:b1:82:1b:86:30:02:c9:59:3f:f8:76:eb:88:
         80:63:53:78:37:da:94:ea:7c:e2:23:36:d5:17:74:95:2a:d9:
         6a:4d:e3:75:d9:16:35:ed:c1:01:6a:fa:67:97:bf:94:3b:4c:
         42:fb:11:ad:14:51:c1:45:8e:7b:dc:e4:8d:d9:0b:23:9f:58:
         9b:93:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:51:22 2025 by rpki-client