Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133362e302f32312d3231203d3e203532343932.roa
File:                     3138312e3131382e3133362e302f32312d3231203d3e203532343932.roa (raw, json)
Hash identifier:          8YAduPOm8npc78TomRUr1lHw0XC6F8eC2avC6gOM6Iw=
Subject key identifier:   4D:D8:C2:3A:6B:6F:79:E6:D9:CA:B8:2A:52:8E:3F:D5:EE:75:FA:82
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       502FA85F5BC801F4287DE4B214CF4A7663A37A76
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133362e302f32312d3231203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:03 +0000
ROA not before:           Wed 24 Sep 2025 11:15:03 +0000
ROA not after:            Wed 23 Sep 2026 11:20:03 +0000
asID:                     52492
IP address blocks:        181.118.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2f:a8:5f:5b:c8:01:f4:28:7d:e4:b2:14:cf:4a:76:63:a3:7a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:03 2025 GMT
            Not After : Sep 23 11:20:03 2026 GMT
        Subject: CN=4DD8C23A6B6F79E6D9CAB82A528E3FD5EE75FA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:01:3d:f2:e1:e7:af:ae:73:48:24:ea:3e:
                    6d:e3:44:64:eb:41:ab:29:4e:ea:ef:be:a2:6f:2f:
                    a8:a6:5f:c9:5f:17:59:3c:d9:c2:38:23:e2:1c:fa:
                    e1:d5:73:33:d1:4f:24:1d:28:4b:c3:d9:cf:cf:e2:
                    9e:6d:fc:1c:08:eb:19:c4:79:2f:10:fc:5e:c6:7e:
                    b3:b3:03:35:55:43:82:e0:62:ba:79:b0:91:2d:c6:
                    49:7e:29:35:23:9e:f0:9b:49:43:9b:41:e1:f5:03:
                    b0:fb:74:24:a9:b5:3c:a6:ff:5c:80:6a:ec:44:a0:
                    b4:89:91:7a:d8:a2:b8:57:f9:14:cb:1f:cb:85:1a:
                    86:c3:f6:67:9d:e9:d8:fa:e2:bc:44:6d:03:cb:78:
                    ed:e9:26:d3:65:df:56:5f:9d:f3:d2:76:d6:69:47:
                    7f:c7:56:83:82:14:85:2c:8f:73:96:48:16:59:18:
                    6c:98:86:32:61:97:e7:8b:1a:24:77:72:90:23:82:
                    e3:18:0f:a0:00:69:cc:80:73:63:fd:68:6d:5e:cb:
                    49:9f:91:1d:83:96:e0:cf:d3:bd:dc:3b:e6:c5:63:
                    d6:bb:96:70:17:49:63:dc:97:bc:1f:31:54:ce:b9:
                    fb:a4:84:9e:3d:17:61:00:89:d7:79:9c:da:ad:70:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:C2:3A:6B:6F:79:E6:D9:CA:B8:2A:52:8E:3F:D5:EE:75:FA:82
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133362e302f32312d3231203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:66:18:dc:fc:bd:e9:ee:69:b8:1f:e1:aa:9a:37:31:7a:58:
         d0:78:60:68:a1:4e:f7:95:43:d9:b0:f0:08:3b:95:68:65:8a:
         f5:18:44:be:66:e5:f6:c1:7f:26:39:7d:1c:87:5c:8a:31:01:
         3d:ef:1c:c0:93:5e:02:14:44:22:1a:82:2b:3a:8b:82:f2:db:
         3a:d8:af:42:e0:61:a0:bf:49:27:11:05:ef:55:7b:07:12:6c:
         5c:09:9a:d4:b5:a3:b8:28:80:d8:40:40:60:df:50:a6:67:45:
         08:7b:40:86:e3:84:59:ff:52:d8:ba:f8:85:8e:08:9d:8a:f8:
         04:2d:b8:b2:88:c4:8a:ba:15:1e:a7:82:17:ea:d0:13:de:a0:
         7f:6b:6a:ac:fc:9b:39:5a:27:3d:41:ce:f5:7c:76:82:00:ef:
         75:27:bb:d3:40:6d:41:53:96:58:02:48:ce:f1:de:a4:32:6a:
         a6:5b:40:9e:91:56:f0:90:40:05:5f:c7:6f:ec:cf:8f:8b:97:
         76:6a:7c:78:19:c9:5e:57:4a:59:fe:64:92:b2:a4:58:34:c5:
         6c:a2:b8:6a:59:a6:a7:45:e9:19:3d:db:3f:c9:fa:08:fa:c0:
         99:16:25:d9:c6:67:21:49:ab:79:73:e2:b2:4c:36:e9:f5:70:
         a8:38:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:05 2025 by rpki-client