Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32302d3230203d3e203532343932.roa
File:                     3138312e3131382e3132382e302f32302d3230203d3e203532343932.roa (raw, json)
Hash identifier:          kqjsLV97OLQIMQe2zkLRmZqP/WYQmlF+RmrTQgked6I=
Subject key identifier:   66:AA:A8:06:F5:AD:C6:F6:DD:FD:4B:AD:AC:84:71:B0:C5:B5:16:99
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       10A78B68A5C5CE513871B4C3C263E318064B7A97
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32302d3230203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:01 +0000
ROA not before:           Wed 24 Sep 2025 11:15:01 +0000
ROA not after:            Wed 23 Sep 2026 11:20:01 +0000
asID:                     52492
IP address blocks:        181.118.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:8b:68:a5:c5:ce:51:38:71:b4:c3:c2:63:e3:18:06:4b:7a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:01 2025 GMT
            Not After : Sep 23 11:20:01 2026 GMT
        Subject: CN=66AAA806F5ADC6F6DDFD4BADAC8471B0C5B51699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:e3:c5:16:7c:f5:20:34:08:73:d5:5f:4f:
                    62:0a:13:4b:1e:c3:30:37:7c:d2:0b:31:95:ed:d7:
                    d6:98:d2:95:e8:98:e8:32:f5:f2:08:fd:5c:06:e3:
                    3e:a8:b5:6e:9f:e0:47:ef:6e:72:6d:0d:54:4b:f6:
                    23:3d:b6:e5:f6:39:96:76:02:45:72:ad:21:36:d6:
                    fb:fa:d1:d4:b8:d3:88:52:72:81:56:84:85:51:b3:
                    50:fe:54:b8:55:38:62:b3:3a:8e:34:a2:b9:60:7c:
                    93:02:a5:a2:45:43:9c:c1:54:6e:2a:a7:0d:67:e4:
                    4e:f6:c9:1d:95:c7:d0:5e:83:65:64:d1:23:6c:80:
                    d6:f7:0f:2e:59:58:f0:cc:1e:5a:ad:f0:04:37:80:
                    4c:06:f0:3d:37:c9:a8:89:23:7b:72:72:b0:56:9c:
                    24:02:89:1b:6a:93:68:f6:f7:2d:3a:cd:66:07:3c:
                    38:f4:46:61:d4:a3:7a:26:de:98:40:58:3c:b1:04:
                    7e:9a:c6:fe:73:8a:e6:80:14:ea:67:6f:a8:3d:05:
                    8b:61:e0:c3:12:63:d3:41:3d:e6:be:4a:de:56:d1:
                    93:00:7b:a1:9c:43:c3:d0:ed:d8:13:fb:b4:c2:82:
                    1a:43:77:b7:f6:12:43:7e:d3:2c:70:0e:78:b9:ea:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AA:A8:06:F5:AD:C6:F6:DD:FD:4B:AD:AC:84:71:B0:C5:B5:16:99
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32302d3230203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:cd:98:c7:b4:16:2b:a0:25:54:71:c5:e6:c1:92:e4:13:
         29:bd:e8:61:72:d2:06:67:95:cc:43:17:d9:62:68:27:ee:8f:
         ca:15:82:2e:a1:92:b8:04:78:f0:2c:61:62:58:5d:1b:bb:4f:
         fd:52:72:77:6a:b7:94:73:7d:8b:d1:14:04:0a:72:b9:76:aa:
         84:5c:e8:0f:09:03:dc:36:34:12:de:69:1b:5a:33:85:48:89:
         e4:1f:4f:81:c7:e0:04:e2:6b:2d:99:45:84:80:15:3b:86:33:
         ae:60:cf:2e:52:bc:a7:48:61:79:7a:40:6c:a7:24:8c:51:ce:
         a2:c8:96:c3:fd:e2:a9:2a:87:1d:88:00:05:48:8e:4c:bb:3a:
         16:9f:9f:a2:97:a3:7e:3e:93:e2:a2:5b:4e:4b:1f:16:c9:a6:
         c8:ce:a2:ab:8b:41:eb:18:b3:89:90:6c:8f:e3:7e:9c:da:e1:
         e6:05:f0:c5:a8:e7:f0:be:f4:a0:c7:54:ba:f9:f7:ab:67:b6:
         e8:e7:ea:1d:76:0c:a9:31:e0:c6:62:dc:10:f9:5e:08:43:22:
         9f:14:c6:1f:37:5a:94:1c:03:a3:ad:16:6b:e0:f7:d9:c3:f3:
         0f:cd:fb:4a:f2:c3:97:68:7f:a4:26:9a:5e:71:6d:f2:ce:c8:
         7e:17:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:05 2025 by rpki-client