Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          VK4tRGZosb7ldwflhn1r90UtzalexMElvvBI2mA4lKA=
Subject key identifier:   29:D2:5F:88:43:36:50:99:7B:41:1A:55:60:3F:26:E5:B3:A0:7C:9F
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       2A529EA92B91B8958BBD29C6F3068B2582E8E605
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:01 +0000
ROA not before:           Wed 24 Sep 2025 11:15:01 +0000
ROA not after:            Wed 23 Sep 2026 11:20:01 +0000
asID:                     52492
IP address blocks:        181.118.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:52:9e:a9:2b:91:b8:95:8b:bd:29:c6:f3:06:8b:25:82:e8:e6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:01 2025 GMT
            Not After : Sep 23 11:20:01 2026 GMT
        Subject: CN=29D25F88433650997B411A55603F26E5B3A07C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:c1:31:99:fe:8b:a2:dd:b4:62:f9:7c:f2:
                    88:42:29:ca:d7:29:5c:08:91:23:45:a5:85:79:92:
                    c6:bc:0e:d2:02:76:21:92:6a:d0:ec:56:14:93:b9:
                    51:55:02:68:1f:94:a5:b9:30:b2:10:cd:d1:0b:6b:
                    36:19:75:b7:6e:f2:de:f1:ec:3c:8f:7e:98:97:a9:
                    e2:fa:25:15:f8:30:19:31:ae:cb:8a:bf:8d:b9:d7:
                    0c:05:f1:9b:a4:84:57:66:1a:13:c8:88:22:fc:8f:
                    e6:68:b9:70:40:a3:d0:1a:4b:b8:af:28:51:91:ce:
                    20:a4:a7:cb:39:46:38:93:21:01:64:36:ed:6b:8c:
                    a1:fa:73:ab:6d:38:1b:f6:dd:64:7e:17:68:dd:ab:
                    6a:cf:bf:ce:b9:5c:d4:5a:dc:70:fe:8a:7c:1c:07:
                    91:15:a3:ec:eb:d7:fb:15:41:78:3d:af:c8:09:a0:
                    16:32:d3:f5:30:26:6b:12:ca:4b:22:f7:fe:16:d7:
                    8b:9c:ca:1c:67:a2:1c:59:6f:7a:06:74:31:9f:2c:
                    58:54:9d:71:92:eb:83:1e:41:4a:6c:42:55:17:b0:
                    1d:b7:2e:cc:ee:15:d9:74:6c:a6:19:d8:f5:ea:61:
                    df:66:88:03:f8:5e:46:51:79:fa:6a:cb:62:c2:07:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:5F:88:43:36:50:99:7B:41:1A:55:60:3F:26:E5:B3:A0:7C:9F
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:a5:9a:0e:ab:03:2d:c5:51:7c:6c:b9:d9:1e:7c:4a:37:
         e1:78:19:3f:fe:2e:26:71:46:8c:6a:25:7f:7e:2f:22:ad:9f:
         41:8d:f6:90:59:41:79:20:2e:8a:11:73:9b:7a:09:b4:7b:2c:
         5f:31:e2:fb:c9:92:fd:b3:6c:01:35:06:0d:82:8b:70:4c:09:
         cf:20:3c:b6:56:7f:65:6d:92:e4:37:f8:18:3e:8d:e7:81:bc:
         09:30:16:31:57:f6:62:7d:b2:8b:9f:17:dc:f6:58:5a:6b:e1:
         84:0b:d9:e2:6f:00:a2:12:4b:a9:a9:2a:bf:9f:c6:c7:69:70:
         4a:32:87:19:1a:f9:68:b6:ec:36:a5:5a:29:2d:b1:30:22:29:
         ce:a2:6f:c1:d7:e1:65:7a:52:d8:cc:6b:f4:98:4d:e9:e6:4d:
         6e:2d:ea:20:33:8c:28:ee:ef:ed:e8:ae:34:25:d4:81:cf:fa:
         7f:93:14:9a:4d:dc:fb:ed:93:ec:8c:3b:7b:14:e1:dd:a9:1a:
         3b:65:7d:e3:7f:c0:3e:ba:8b:77:ad:55:26:1e:58:e2:b9:e5:
         93:f0:42:f8:91:9d:dd:57:81:a8:24:24:75:c3:3a:a4:2b:15:
         27:ec:8f:5a:a3:1c:c0:38:15:18:b4:14:1e:04:84:3c:94:12:
         7f:91:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:02 2025 by rpki-client