Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133312e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133312e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          hCTFD5LvyT2T2nXdsKehBzglTz8avlmqMvaCaXZvOKc=
Subject key identifier:   95:2C:D0:A1:01:F0:2E:40:0A:D8:05:0D:A2:F5:7A:C2:B8:48:71:EE
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       77F0864EC9360F5FEA5F09024AE8C964AF0C5220
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133312e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:00 +0000
ROA not before:           Wed 24 Sep 2025 11:15:00 +0000
ROA not after:            Wed 23 Sep 2026 11:20:00 +0000
asID:                     52492
IP address blocks:        181.118.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:86:4e:c9:36:0f:5f:ea:5f:09:02:4a:e8:c9:64:af:0c:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:00 2025 GMT
            Not After : Sep 23 11:20:00 2026 GMT
        Subject: CN=952CD0A101F02E400AD8050DA2F57AC2B84871EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:f0:17:0f:ab:2c:5a:fc:dc:e0:0e:30:e1:
                    a4:4c:a2:68:fa:89:7a:b0:ae:2d:e3:8e:95:d7:02:
                    75:53:a7:69:96:8d:3f:f0:a9:f8:0e:b2:d2:bd:2d:
                    83:07:2d:c1:8d:11:3d:0a:fd:22:60:37:09:7c:c0:
                    61:69:67:37:67:4d:30:ac:32:7f:98:6e:09:0a:95:
                    b6:a1:b3:0e:44:e7:bd:fb:88:7f:43:2a:57:40:38:
                    52:fa:c2:2e:74:46:06:d8:4d:c3:05:c9:43:21:13:
                    ae:12:67:62:3e:a2:ce:ea:55:c5:bc:9b:f2:86:78:
                    98:df:62:48:90:aa:e6:22:3b:27:48:5f:e2:2d:83:
                    c9:8b:4f:47:45:67:07:57:5c:16:b2:4e:1d:48:c6:
                    fb:08:05:3c:ac:7c:99:dc:4f:48:ef:4a:6e:35:85:
                    5f:21:70:39:2a:04:3d:09:07:94:a3:a9:eb:67:06:
                    47:ba:05:62:35:47:94:87:79:fe:a0:d1:28:47:f5:
                    d8:0b:a9:75:8e:c9:45:5a:42:ec:fa:b8:24:88:e0:
                    ee:86:53:0a:ea:05:9a:33:0c:93:a8:93:a7:42:d6:
                    78:e2:a3:62:2a:d2:26:9e:b0:8b:60:c3:cf:c4:06:
                    bf:5c:e6:e1:45:dd:9e:00:12:cc:a1:35:16:a2:58:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:D0:A1:01:F0:2E:40:0A:D8:05:0D:A2:F5:7A:C2:B8:48:71:EE
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133312e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:2e:56:4a:1b:65:d1:a3:b8:cb:b1:a2:62:82:71:56:ac:
         df:4e:7d:c9:9d:41:4c:87:80:00:12:9e:f5:dd:a7:ed:ed:09:
         5f:1c:7d:2e:92:33:67:5c:30:05:5a:2c:bb:d3:9f:74:4d:c2:
         7a:05:92:6b:a1:59:e2:fd:16:5d:33:4b:3e:d2:23:7f:f2:20:
         18:3b:6a:ee:a3:82:e4:e5:30:3b:e0:76:dd:51:1a:c3:4e:d9:
         f5:e7:36:aa:0d:a2:1e:8f:d8:d0:54:5b:7b:0d:60:72:bc:d1:
         a5:52:bf:1f:2e:07:e6:f7:b7:ad:26:00:5b:cb:08:ea:51:fc:
         c0:6c:69:5a:0e:4c:e1:e4:81:90:38:89:8d:91:11:70:be:1d:
         2c:52:f4:d3:58:05:02:89:0c:67:a2:4e:c5:e3:34:4d:67:f4:
         e1:30:02:88:a3:31:6c:6e:d3:13:be:22:93:b8:0b:d1:3d:50:
         e8:3b:06:45:45:bc:3c:aa:c4:75:73:9c:cd:1c:69:cb:82:e8:
         e1:96:a8:c0:66:c0:e5:93:e5:14:d0:43:dc:ba:9d:6a:a0:20:
         3f:82:00:ea:b0:55:6b:c7:8a:bd:8b:d7:8b:a3:51:70:f6:81:
         55:4f:ef:da:11:87:69:e2:fa:a0:06:30:86:91:9a:2d:2d:fa:
         6b:77:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:04 2025 by rpki-client