Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          n5LC+QyzCBv+Svb8GOcW7jQ2PJD1E7e2zs3QouwtuGw=
Subject key identifier:   5D:1E:4F:71:E1:BF:22:34:69:B5:8B:F4:59:85:B7:AE:D1:4E:02:40
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       2437AB76602928849B93F83CE5F7FA26FC067D4B
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:05 +0000
ROA not before:           Wed 24 Sep 2025 11:15:05 +0000
ROA not after:            Wed 23 Sep 2026 11:20:05 +0000
asID:                     52492
IP address blocks:        181.118.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:37:ab:76:60:29:28:84:9b:93:f8:3c:e5:f7:fa:26:fc:06:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:05 2025 GMT
            Not After : Sep 23 11:20:05 2026 GMT
        Subject: CN=5D1E4F71E1BF223469B58BF45985B7AED14E0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:62:0c:c0:f1:14:10:98:d9:ac:bd:46:f3:
                    e7:f6:d8:c4:6e:0e:68:de:49:6c:b9:35:22:78:d1:
                    5c:17:29:75:41:f3:a7:13:a8:cf:ae:3e:16:de:13:
                    d2:81:7c:ec:2b:3b:50:6e:02:fa:6f:ee:b9:95:b5:
                    c9:9a:c5:71:6f:b5:48:e2:f4:3c:1a:c7:36:59:30:
                    de:ad:d2:b1:60:68:10:9f:db:84:53:09:1d:49:87:
                    e7:14:be:17:d2:58:a6:14:17:c9:71:a4:a1:a7:72:
                    f2:6b:a3:02:0b:cf:e4:74:99:0a:18:19:34:9b:b0:
                    d7:9d:fd:f2:db:52:4b:5d:56:8c:66:c6:06:56:8c:
                    87:66:e2:d0:6c:26:54:10:eb:ad:d1:ce:74:8c:60:
                    39:97:18:74:f8:40:be:ec:66:f0:25:17:40:75:98:
                    2b:7a:40:82:45:13:67:25:a3:b7:ab:27:46:71:35:
                    6d:f7:9b:77:a4:f3:87:89:f8:90:17:a0:27:92:2a:
                    c3:52:c7:60:a9:d2:c4:fe:93:ea:b1:29:69:77:88:
                    f9:cb:f1:e6:44:d0:e0:84:da:6d:56:88:96:b0:c5:
                    b4:5b:60:b1:08:ee:1d:ec:80:31:28:a5:14:5e:da:
                    02:75:5b:2a:de:8d:43:c0:21:b9:42:51:88:48:b1:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1E:4F:71:E1:BF:22:34:69:B5:8B:F4:59:85:B7:AE:D1:4E:02:40
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:d4:de:a9:77:c0:47:8c:d5:31:41:33:7e:d1:01:ea:2c:
         c6:cd:04:aa:89:66:ba:2c:f4:1e:9f:a6:4f:16:be:b8:d8:f7:
         31:d8:8f:72:e4:8c:fa:50:0f:2d:f4:05:41:f2:1d:4e:aa:2b:
         c2:f1:b7:83:cc:64:4a:ad:36:0b:54:f5:bb:b1:3c:69:9e:d8:
         23:9d:b3:03:8c:8e:1c:4e:a2:a4:62:64:b2:83:6b:8a:f1:14:
         7c:af:6a:fe:74:e8:64:41:62:03:e9:86:04:e7:6b:64:94:38:
         1e:39:07:64:f0:e0:b2:aa:9f:79:9f:da:b5:08:40:54:14:74:
         59:3e:b7:18:6b:0f:ec:28:d5:7d:7e:12:dd:23:c5:b7:47:46:
         29:35:35:0c:8b:88:53:66:4e:9c:ca:6e:2f:4e:9a:b3:72:a5:
         07:4d:71:e5:a5:c4:8a:d9:82:17:e3:b4:32:df:65:4d:42:c4:
         e3:e9:8f:32:47:7c:e9:e0:a5:fe:46:da:6c:c7:db:83:36:f2:
         84:c9:68:91:48:f3:c3:a5:c5:6c:41:35:85:3e:b4:7f:31:7a:
         07:66:9b:5d:65:08:ec:37:1e:16:3b:35:37:cd:dc:5c:9f:b7:
         18:83:c1:a4:3a:90:ab:7f:74:98:ae:ce:26:2a:6c:85:47:ea:
         65:2f:a7:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJDerdmApKISbk/g85ff6JvwGfUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3OTFBQTNGRTlDNUEzMjk4MUIyMEI3NUQ2QjJCRTJB
NkE4M0E3NzAeFw0yNTA5MjQxMTE1MDVaFw0yNjA5MjMxMTIwMDVaMDMxMTAvBgNV
BAMTKDVEMUU0RjcxRTFCRjIyMzQ2OUI1OEJGNDU5ODVCN0FFRDE0RTAyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHC2IMwPEUEJjZrL1G8+f22MRu
DmjeSWy5NSJ40VwXKXVB86cTqM+uPhbeE9KBfOwrO1BuAvpv7rmVtcmaxXFvtUji
9DwaxzZZMN6t0rFgaBCf24RTCR1Jh+cUvhfSWKYUF8lxpKGncvJrowILz+R0mQoY
GTSbsNed/fLbUktdVoxmxgZWjIdm4tBsJlQQ663RznSMYDmXGHT4QL7sZvAlF0B1
mCt6QIJFE2clo7erJ0ZxNW33m3ek84eJ+JAXoCeSKsNSx2Cp0sT+k+qxKWl3iPnL
8eZE0OCE2m1WiJawxbRbYLEI7h3sgDEopRRe2gJ1WyrejUPAIblCUYhIscilAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXR5PceG/IjRptYv0WYW3rtFOAkAwHwYDVR0j
BBgwFoAUDnkao/6cWjKYGyC3XWsr4qaoOncwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Rjk4RUIxNUQzMUI5NkJERTEyRUNBOTAwMUYwNTg0ODFE
OTAyM0JENTdCMDIwNUYyMjk3N0ZERDEwNTU0Qjc4LzAvMEU3OTFBQTNGRTlDNUEz
Mjk4MUIyMEI3NUQ2QjJCRTJBNkE4M0E3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTc5MUFBM0ZFOUM1QTMyOTgx
QjIwQjc1RDZCMkJFMkE2QTgzQTc3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUY5OEVCMTVEMzFCOTZCREUxMkVDQTkwMDFGMDU4NDgxRDkwMjNCRDU3
QjAyMDVGMjI5NzdGREQxMDU1NEI3OC8wLzMxMzgzMTJlMzEzMTM4MmUzMTMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXaF
MA0GCSqGSIb3DQEBCwUAA4IBAQAwatTeqXfAR4zVMUEzftEB6izGzQSqiWa6LPQe
n6ZPFr642Pcx2I9y5Iz6UA8t9AVB8h1OqivC8beDzGRKrTYLVPW7sTxpntgjnbMD
jI4cTqKkYmSyg2uK8RR8r2r+dOhkQWID6YYE52tklDgeOQdk8OCyqp95n9q1CEBU
FHRZPrcYaw/sKNV9fhLdI8W3R0YpNTUMi4hTZk6cym4vTpqzcqUHTXHlpcSK2YIX
47Qy32VNQsTj6Y8yR3zp4KX+Rtpsx9uDNvKEyWiRSPPDpcVsQTWFPrR/MXoHZptd
ZQjsNx4WOzU3zdxcn7cYg8GkOpCrf3SYrs4mKmyFR+plL6cP
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:02 2025 by rpki-client