Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          +xpLmCyrWTeLdhbJCPFRWTZRdOAfAW8kH2nI5tI9ARw=
Subject key identifier:   9C:56:8B:06:62:FF:D3:0B:7F:FC:C6:04:59:18:B7:9E:9D:DF:1C:BC
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       05B3C1F1797F0876C270B0BB2CE427F74CCF7531
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:01 +0000
ROA not before:           Wed 24 Sep 2025 11:15:01 +0000
ROA not after:            Wed 23 Sep 2026 11:20:01 +0000
asID:                     52492
IP address blocks:        181.118.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:c1:f1:79:7f:08:76:c2:70:b0:bb:2c:e4:27:f7:4c:cf:75:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:01 2025 GMT
            Not After : Sep 23 11:20:01 2026 GMT
        Subject: CN=9C568B0662FFD30B7FFCC6045918B79E9DDF1CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:b8:d8:b0:62:0c:2e:c1:d3:d3:1c:68:c2:
                    bf:ea:22:ab:10:63:a2:86:7a:20:b6:4d:a2:28:20:
                    0e:6e:15:7e:b3:9e:b7:c1:e8:af:ee:45:47:ba:18:
                    9f:c5:64:60:2f:0f:5f:0e:59:d5:aa:c0:d9:43:20:
                    09:04:1d:4a:b1:d3:e0:d0:e5:2d:18:fd:0d:d0:ce:
                    57:08:ca:fe:08:d4:a3:e1:40:1f:d6:0d:b5:7f:9a:
                    8c:46:d1:8d:74:8a:08:5e:79:8f:77:b6:44:c6:88:
                    fe:c2:e7:12:13:1a:f3:c7:cf:8b:c8:a2:a5:0b:2c:
                    a1:4c:80:b5:87:2b:10:65:85:1c:40:8f:80:07:80:
                    08:17:4d:53:28:dd:60:25:d3:00:51:32:2c:76:41:
                    06:88:9a:39:f1:da:e9:8b:83:45:28:7e:5e:e3:4d:
                    37:a7:1a:67:6c:3f:29:01:ee:a3:5d:5d:3b:20:51:
                    cf:9a:3f:5c:a1:da:65:09:77:a7:7c:6a:a0:2c:1d:
                    ed:db:f4:82:c7:46:e2:e4:64:d3:15:e1:7e:77:d6:
                    18:f4:d2:24:6b:1f:b1:da:43:a0:cf:7e:e2:29:7a:
                    11:9e:f6:c0:6f:72:02:cd:37:60:fa:cc:f9:8a:de:
                    22:c6:3e:f9:64:80:5d:9c:40:a1:34:de:ed:b1:40:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:8B:06:62:FF:D3:0B:7F:FC:C6:04:59:18:B7:9E:9D:DF:1C:BC
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:07:29:f5:11:d3:dd:40:af:e0:db:35:a9:bb:ec:ba:e1:26:
         88:cd:ce:9a:0c:fc:0d:0e:7d:56:e7:8c:7c:fa:c8:6b:20:b3:
         f0:94:d7:97:93:37:68:f1:61:e0:d5:11:b7:99:f3:b4:0b:db:
         96:5a:4a:cb:ad:e6:8c:d5:83:2b:98:bc:bb:08:8b:ca:2f:3f:
         e9:dd:5e:71:97:ec:e0:f9:94:8b:46:5e:3c:af:8e:3f:75:0f:
         4f:2b:33:57:05:21:b1:e1:f9:04:c1:2f:34:75:0c:00:61:ef:
         5b:fb:7c:bf:4c:1d:c9:ab:74:de:4c:1e:48:bd:73:01:66:34:
         45:da:57:36:80:57:b5:55:eb:da:00:94:ca:99:9c:92:80:7a:
         0f:b1:d7:f9:de:19:d3:52:77:7f:a5:95:94:39:ec:1a:4f:53:
         70:80:3d:36:93:4d:5a:51:25:20:e8:91:b7:1c:65:a4:ac:96:
         70:5b:c0:29:33:d9:b1:c7:aa:5a:ec:7f:b1:28:6a:76:f8:b2:
         d3:ff:a1:d1:1a:52:dc:23:ca:bf:23:fd:e9:85:6d:c4:d4:30:
         75:65:1b:1e:1b:48:48:59:97:4e:ab:6c:50:d2:9d:44:64:88:
         db:8a:92:38:e4:aa:73:8a:ce:47:ae:48:a2:de:b7:6c:6e:5b:
         69:a5:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:05 2025 by rpki-client