Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32312d3231203d3e203532343932.roa
File:                     3138312e3131382e3132382e302f32312d3231203d3e203532343932.roa (raw, json)
Hash identifier:          8QTduiX2ufJhIzcUrCQ1uGcd2WUHKR9CgI9NJvdH/IA=
Subject key identifier:   78:4F:5D:39:ED:96:00:D2:AB:87:10:3D:EA:18:F5:0E:2E:D4:7A:2E
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       71E716674E51E6C116CC991F30B21505B5AA42D0
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32312d3231203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:03 +0000
ROA not before:           Wed 24 Sep 2025 11:15:03 +0000
ROA not after:            Wed 23 Sep 2026 11:20:03 +0000
asID:                     52492
IP address blocks:        181.118.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:16:67:4e:51:e6:c1:16:cc:99:1f:30:b2:15:05:b5:aa:42:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:03 2025 GMT
            Not After : Sep 23 11:20:03 2026 GMT
        Subject: CN=784F5D39ED9600D2AB87103DEA18F50E2ED47A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:8c:2a:a7:ca:03:76:f0:6a:2c:43:d4:b4:
                    6d:e5:15:2a:b6:5e:c1:e3:92:67:76:32:f3:21:2e:
                    cf:1f:eb:9a:a6:21:43:db:04:df:8a:93:ea:11:a9:
                    2f:11:74:3a:c0:01:64:79:d8:ab:57:f4:d8:7e:48:
                    47:a0:57:f2:96:48:4e:f1:96:65:d1:27:fe:56:f5:
                    47:f5:7a:f7:a6:0e:cb:f3:1d:fa:c3:06:a8:4a:3d:
                    4d:2b:03:fd:d3:08:b3:32:72:5d:8d:e7:4a:9e:5d:
                    74:fb:bf:cc:51:c0:22:1f:14:94:e0:c3:82:e0:91:
                    5b:0c:9b:74:ae:f8:0b:ee:ae:28:c0:b4:f7:aa:b0:
                    40:08:a7:d8:6b:15:c7:da:7f:ac:d0:53:6b:a9:32:
                    7b:9d:32:f5:d7:b0:62:29:65:79:de:9b:70:32:1f:
                    d0:7b:43:82:67:9c:14:3c:b6:a2:a1:b0:b5:d2:f8:
                    b7:bb:47:0e:03:bd:91:10:3d:8b:b3:97:e1:1d:a1:
                    ed:f9:db:20:e2:ac:ed:01:91:6b:7a:b6:00:f1:a5:
                    3d:a7:a5:9c:b5:56:5f:41:ca:36:fb:b9:c2:9f:5a:
                    20:fa:2f:e7:ac:76:82:f0:5a:8e:d9:e9:50:b9:e0:
                    da:84:18:2e:63:aa:c8:f3:91:d3:d5:26:af:34:30:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:5D:39:ED:96:00:D2:AB:87:10:3D:EA:18:F5:0E:2E:D4:7A:2E
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32312d3231203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:7f:f2:f2:68:91:cc:a6:ae:8f:9f:a8:31:5a:e8:b9:6e:
         1b:b6:bd:b3:a0:e0:e6:d2:18:86:b5:52:87:44:b5:8e:2d:03:
         cc:65:0b:30:5e:6b:bd:41:7a:ee:bc:05:9b:20:49:36:2a:bb:
         0c:57:7f:32:8a:e4:da:67:da:1a:b3:5a:cf:da:11:2b:9f:77:
         52:63:d8:aa:2f:8d:81:e7:17:8a:be:64:5c:e1:1f:8c:50:4d:
         94:d5:0b:9a:4e:5a:54:8f:59:76:82:1c:5b:e1:b5:14:c8:a6:
         e0:88:31:23:93:3b:c9:f0:31:7f:3d:9f:9f:97:b1:23:e0:96:
         c9:52:e4:c5:73:8d:c8:ae:7f:77:29:e0:78:f4:92:19:2f:f6:
         bf:9a:7c:7b:58:79:6f:8e:67:26:d1:9d:7c:25:a5:32:f6:e0:
         60:5c:5c:08:85:2e:9b:83:58:40:93:e4:fa:d4:94:d9:02:d1:
         28:9f:4a:ac:e0:d2:a1:a7:e4:c2:86:cb:25:5b:c7:26:be:3c:
         9a:86:69:8f:f5:6c:95:24:19:9a:63:45:04:6e:c8:b3:08:8c:
         b9:40:d2:41:90:8c:48:cc:66:70:2c:4b:18:6a:ad:a0:1d:f3:
         f0:e5:1f:fb:5e:83:15:12:ce:ae:5e:d6:2f:8a:06:36:d0:81:
         11:cb:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:07 2025 by rpki-client