Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3136203d3e203133343839.roa
File:                     3138312e3132382e302e302f31322d3136203d3e203133343839.roa (raw, json)
Hash identifier:          ZWutgGU/DfqHgaGyUCe2PZ959tgt7gymd5aSr38ePgQ=
Subject key identifier:   87:99:C6:F3:8D:4C:94:DB:91:0B:FA:43:C1:B9:77:40:6A:0C:97:DC
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       3C0DD49DAC02A2EEA0043F4E1B6B50A9C87455B3
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3136203d3e203133343839.roa
Signing time:             Tue 09 Sep 2025 18:44:07 +0000
ROA not before:           Tue 09 Sep 2025 18:39:07 +0000
ROA not after:            Tue 08 Sep 2026 18:44:07 +0000
asID:                     13489
IP address blocks:        181.128.0.0/12 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0d:d4:9d:ac:02:a2:ee:a0:04:3f:4e:1b:6b:50:a9:c8:74:55:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep  9 18:39:07 2025 GMT
            Not After : Sep  8 18:44:07 2026 GMT
        Subject: CN=8799C6F38D4C94DB910BFA43C1B977406A0C97DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:69:2d:32:bb:45:51:97:d0:a1:96:10:f8:
                    6e:ff:86:90:c1:c4:6d:b6:1c:c7:62:da:41:1c:3e:
                    24:3f:80:ce:8e:cd:ba:52:44:b5:fa:e2:c0:04:b5:
                    e0:6d:f9:dc:9e:91:8a:28:73:85:65:c6:12:90:f0:
                    3a:57:f2:c2:25:5f:77:bb:7d:bb:b4:ea:2d:b1:fa:
                    27:c4:b9:5b:6f:90:21:c2:9d:c1:25:8a:01:b8:35:
                    b7:f2:23:e0:35:ea:fd:66:6c:2e:b8:80:6a:08:c1:
                    7b:e3:1d:d9:e9:55:ab:f1:f0:85:96:ef:9b:ae:4a:
                    3f:8c:60:97:32:39:b0:c1:9b:5f:b4:fb:87:1b:04:
                    9d:38:bf:60:79:a3:94:a4:ff:d6:b4:23:ec:a0:fc:
                    0e:87:96:e9:6b:0d:6c:fd:46:0f:21:32:cd:4f:4b:
                    47:75:21:93:7a:0a:58:e8:3a:f6:74:41:7b:52:2c:
                    79:5a:e8:ec:56:30:9c:f9:4a:20:17:4f:7f:65:69:
                    78:20:35:3c:31:95:d9:63:c7:66:a2:46:4f:0a:89:
                    fd:1d:36:ab:62:53:da:8e:d1:01:0a:25:72:c4:ff:
                    b2:60:14:ed:ce:3a:05:ee:2d:2a:c8:13:b7:5c:1e:
                    f3:a0:a3:f1:60:64:c4:72:c0:0e:82:7f:d4:58:2a:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:99:C6:F3:8D:4C:94:DB:91:0B:FA:43:C1:B9:77:40:6A:0C:97:DC
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.128.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         83:b7:7b:21:3a:54:58:ef:25:ba:01:27:3b:ac:c3:ca:5b:68:
         bc:3d:47:19:00:bd:c8:80:f2:b3:3d:46:8d:3f:ad:79:21:56:
         c6:5e:0e:55:0d:dd:a4:f9:c0:0b:45:82:b0:8c:3a:07:de:fa:
         2b:f4:35:e5:95:5e:f2:01:63:79:c2:dc:56:30:5c:85:ac:8b:
         31:34:53:26:8e:c2:07:c7:d8:88:55:b7:88:02:6a:4e:64:cc:
         db:cf:bc:4e:bb:22:00:db:4b:81:33:a2:7e:de:71:02:9b:32:
         11:e3:b2:91:6d:9f:fc:bc:7e:96:fe:b9:44:87:af:c6:a2:b8:
         10:cc:7f:3a:ad:76:a8:93:1e:9a:bd:5b:1f:0e:a1:0b:19:5c:
         4f:b7:a0:7e:c8:52:d1:2d:fb:45:8c:3a:bc:74:71:9c:6b:67:
         c5:38:a0:73:ae:1e:af:07:5d:a0:8a:29:cf:15:24:90:a1:eb:
         d5:52:8d:92:c2:5d:77:05:6f:fd:d9:a0:19:7c:0f:5a:ba:13:
         24:2a:0b:a9:6c:f0:bc:54:27:b1:9f:a0:d6:8e:d1:d7:c5:73:
         9b:82:96:97:ae:64:9f:a9:a7:36:e6:21:b6:2c:74:e1:22:9e:
         1f:d8:60:42:e3:dd:ca:1f:6d:45:22:c2:ba:e5:e6:5f:c8:70:
         9b:b7:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:48:28 2025 by rpki-client