Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          /GA0vt19j23+T2GHszbRSoQXu02Cddw2yilKfL9zRxA=
Subject key identifier:   66:D6:62:90:E6:B5:4A:7A:8F:DA:82:C0:F2:75:41:28:9E:09:28:5E
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       01FE163B2EC8E7ECEEEAE059F56CE404AAD0B1DF
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:03 +0000
ROA not before:           Wed 24 Sep 2025 11:15:03 +0000
ROA not after:            Wed 23 Sep 2026 11:20:03 +0000
asID:                     52492
IP address blocks:        181.118.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:16:3b:2e:c8:e7:ec:ee:ea:e0:59:f5:6c:e4:04:aa:d0:b1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:03 2025 GMT
            Not After : Sep 23 11:20:03 2026 GMT
        Subject: CN=66D66290E6B54A7A8FDA82C0F27541289E09285E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:41:bb:72:44:ce:8a:d0:65:ac:e2:90:d1:
                    15:93:62:15:5b:31:a8:cc:ff:68:c0:6d:40:84:9a:
                    6b:a2:da:73:d6:a4:4c:dd:b0:8e:fc:13:e3:b4:8a:
                    e7:41:5d:04:b8:e1:e0:7c:e7:ac:e2:14:6f:94:f2:
                    c2:79:84:c2:eb:0d:bc:b9:02:07:6b:b5:66:1c:c2:
                    7e:71:83:6c:52:86:c5:fa:e4:a0:10:e7:05:36:c4:
                    2a:1b:97:fb:f7:e0:93:73:e5:a6:27:3b:db:0a:41:
                    d0:10:1b:5f:db:f7:3e:47:1f:fa:21:53:15:10:00:
                    51:5d:3d:1f:5c:5f:0b:7e:5d:05:98:a2:61:d6:10:
                    0b:27:40:24:ff:36:c5:d4:f2:81:a6:78:2a:a8:30:
                    5d:22:dd:b2:0e:fc:82:07:a8:fa:f6:31:dd:f5:7a:
                    d7:90:f6:92:bc:f7:f2:1f:92:64:6d:71:4b:1b:6d:
                    88:aa:d7:b5:7e:7c:9a:cf:17:ca:e0:aa:d3:2e:27:
                    59:ab:7f:8f:d0:b7:49:d4:07:38:43:78:09:d7:4c:
                    89:e2:83:ee:4e:3f:40:fd:93:a0:2b:c3:85:1c:fb:
                    5c:96:32:1f:c0:2f:5d:1d:c4:0a:ef:b5:c0:ee:ae:
                    64:43:d4:04:6c:0f:9f:cf:73:93:80:aa:e3:43:b4:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D6:62:90:E6:B5:4A:7A:8F:DA:82:C0:F2:75:41:28:9E:09:28:5E
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:ed:d6:fa:a2:a0:28:13:71:bf:34:e7:79:2b:ea:91:51:
         54:fc:06:36:10:f6:60:39:d7:b5:48:04:0d:21:04:95:d3:62:
         89:0c:f7:3a:d5:da:f6:18:99:01:be:dd:91:49:a0:a8:ea:ab:
         f1:ed:9a:0e:1f:90:23:22:5d:d7:a5:cd:49:cd:2a:00:0b:cc:
         a9:49:53:52:61:f7:db:b8:c8:8c:67:29:b4:8e:df:43:ff:ca:
         9d:b3:db:7a:d6:73:00:75:78:a8:8b:1c:cd:cc:28:55:b3:9e:
         1c:18:7c:10:b8:dd:08:6c:b6:31:78:92:05:12:d5:cc:b1:bf:
         04:c5:85:5b:58:9d:44:33:40:ee:48:7c:e7:86:0e:06:b4:38:
         52:36:12:d1:72:b5:d4:07:d3:05:cf:8a:ac:74:62:5a:7b:05:
         f3:78:81:98:f6:0f:31:ec:4c:8e:fb:a8:e5:4e:76:82:43:92:
         e8:06:34:b8:a2:b6:8b:30:69:45:3c:1e:b3:95:1d:b8:95:d6:
         58:1d:d2:2a:db:27:85:98:e2:e9:10:2f:84:f5:7a:a3:15:14:
         33:04:d3:a3:65:1e:d4:5d:b0:b2:d1:3e:53:15:09:67:84:6f:
         89:4c:e7:db:03:8c:a8:c9:03:cc:4a:44:66:d2:be:81:bb:b4:
         29:a2:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:03 2025 by rpki-client