Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          6HaSqvcHp70rsE7ohjhrmVQMZrAGrLlVyn8uUtYEStg=
Subject key identifier:   EF:64:34:5B:A3:A9:E7:34:B9:5C:45:57:2D:49:00:F9:24:53:84:52
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       273C31C3FF69949B3C2F91A40E15D32170E88015
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:00 +0000
ROA not before:           Wed 24 Sep 2025 11:15:00 +0000
ROA not after:            Wed 23 Sep 2026 11:20:00 +0000
asID:                     52492
IP address blocks:        181.118.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:31:c3:ff:69:94:9b:3c:2f:91:a4:0e:15:d3:21:70:e8:80:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:00 2025 GMT
            Not After : Sep 23 11:20:00 2026 GMT
        Subject: CN=EF64345BA3A9E734B95C45572D4900F924538452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:70:0b:b2:a9:33:95:64:33:76:a3:25:ae:
                    cf:11:6e:e3:ab:c1:c9:e9:13:9d:a1:37:59:14:4d:
                    cb:ee:e4:57:8d:3e:24:2e:75:91:b2:f0:68:44:f2:
                    ef:1f:42:95:f3:38:a6:67:7a:23:42:23:fa:25:ce:
                    b4:79:9b:5d:9e:51:91:ea:5c:9f:f6:b9:b3:d8:50:
                    84:ea:9f:94:c3:6c:b3:40:c5:e3:55:eb:e2:ab:9a:
                    34:82:28:19:81:f2:9e:22:00:03:d1:74:d0:8a:44:
                    26:02:8f:84:f1:df:fd:c2:16:6e:07:ab:fc:69:37:
                    b6:64:af:66:24:94:67:4e:22:f9:ff:0b:05:e9:15:
                    5c:7e:ec:b8:a4:59:22:6b:12:99:eb:89:82:d3:07:
                    ed:d1:d0:94:51:39:2f:a5:00:72:33:ec:f3:22:20:
                    33:5c:ca:95:54:11:11:5d:d7:b1:e9:83:67:66:84:
                    f5:b8:b0:d5:00:2d:d5:57:13:da:a3:4b:9b:da:46:
                    ea:fc:95:e2:9a:1b:d4:1f:2a:bc:73:83:d7:90:94:
                    8c:e0:b0:88:ba:2b:c8:56:f3:ec:47:b3:21:01:9c:
                    a3:7b:5f:e7:19:89:c9:9f:3a:a4:0c:49:47:33:dc:
                    7c:46:0d:be:71:ce:99:95:72:5f:96:cc:f6:e4:20:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:34:5B:A3:A9:E7:34:B9:5C:45:57:2D:49:00:F9:24:53:84:52
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:24:03:d3:08:85:88:8e:88:c8:25:04:db:7d:6d:cb:08:
         a0:98:62:ef:1e:fe:21:1f:12:bf:e9:1e:35:41:2a:23:67:31:
         f7:04:01:33:93:34:ce:96:73:34:84:1a:3c:e0:d2:b3:ff:01:
         23:bd:8a:77:52:1d:b1:03:05:d5:3e:b4:26:69:41:07:41:6d:
         95:4a:0e:11:b2:53:91:d6:50:b8:df:ac:c9:53:76:ab:aa:f5:
         7f:e1:58:74:45:f6:22:12:1f:31:e9:a4:b9:65:6d:07:e2:4c:
         8b:b0:09:14:fe:e1:e1:d3:f5:65:3e:f6:59:29:b5:96:6d:0c:
         05:1b:7a:bd:e0:d4:2b:85:3d:2d:e2:c1:e0:e2:b5:bb:06:4e:
         84:ed:eb:cb:d7:ed:c8:d3:e3:13:fe:b4:6c:4b:a2:fe:7e:3d:
         8e:5c:a2:3f:21:36:61:eb:42:82:c9:d0:43:82:0f:7d:e2:eb:
         ba:bc:c6:85:fb:ad:c1:ce:0d:d0:bc:14:d6:a5:d3:e4:09:1f:
         1d:35:0f:71:b8:fb:1a:e2:de:d9:2c:3f:14:ff:10:9f:02:b9:
         1e:5b:eb:26:00:ed:19:15:6c:4b:5a:f3:61:b5:c9:2a:0d:9a:
         cb:89:0d:f6:95:68:55:a2:9e:ad:1b:96:6a:31:fc:cb:d6:2a:
         d2:9f:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:05 2025 by rpki-client