Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          ZfcYXdJB4Pp11bawLfVaKX1B5TAtb0hsekBLkPmNQZo=
Subject key identifier:   69:3D:17:74:7B:A0:01:8F:EC:13:DD:EA:E6:34:B5:F3:FC:D1:67:53
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       12E5E3968B18F528E3C9C24BBDF253D26DCC9E07
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:02 +0000
ROA not before:           Wed 24 Sep 2025 11:15:02 +0000
ROA not after:            Wed 23 Sep 2026 11:20:02 +0000
asID:                     52492
IP address blocks:        181.118.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:e3:96:8b:18:f5:28:e3:c9:c2:4b:bd:f2:53:d2:6d:cc:9e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:02 2025 GMT
            Not After : Sep 23 11:20:02 2026 GMT
        Subject: CN=693D17747BA0018FEC13DDEAE634B5F3FCD16753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:57:5e:fe:29:77:2c:68:75:f7:fa:67:fc:
                    af:05:a7:16:f6:8b:1d:bc:41:ab:ed:9c:34:45:e4:
                    59:e9:81:69:a7:55:28:1b:94:11:b2:93:8f:b4:c2:
                    e6:29:4f:71:7c:fb:83:85:c6:ad:d9:a0:ac:c1:33:
                    ee:58:6d:e2:9b:be:b5:1c:2d:fd:ea:c7:75:2c:4b:
                    55:d5:0d:98:aa:b6:3b:34:32:31:76:f1:e7:cd:ab:
                    1f:3b:d0:48:dd:47:39:41:cd:36:2e:97:09:4c:69:
                    06:5b:45:d5:93:b9:5a:4a:a8:51:da:e8:c2:b5:d9:
                    20:5b:cc:00:ce:ba:5b:85:76:45:8d:e5:94:4b:00:
                    b4:9c:aa:90:1f:b1:5c:00:62:f1:f3:81:fd:c2:0f:
                    46:33:1d:75:a9:a2:48:40:72:1b:a9:87:57:91:24:
                    5a:58:65:2d:89:a3:d9:de:89:4a:d3:1c:4c:c9:1b:
                    57:29:b7:0a:a7:78:76:79:89:d8:32:f7:ac:d1:97:
                    2c:60:d9:e1:33:28:cd:f8:81:cd:38:c8:da:bd:58:
                    8e:22:10:e7:d9:cc:08:ca:43:5d:e2:2c:49:24:27:
                    c7:4b:93:4e:63:8d:09:35:01:19:30:5a:6d:11:81:
                    49:36:73:5a:bf:cc:8f:83:a2:e9:e6:8d:a1:f1:d7:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:17:74:7B:A0:01:8F:EC:13:DD:EA:E6:34:B5:F3:FC:D1:67:53
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:34:da:63:bf:cd:60:71:a5:5b:9c:dc:bd:29:9f:7e:0f:
         f4:a8:79:ca:ed:48:4e:45:af:9c:e3:b7:9f:6d:11:87:2b:b8:
         c0:54:9e:ff:c5:e5:55:7d:18:91:e4:fa:ea:46:d0:ba:1e:87:
         23:fa:d8:2f:80:e5:eb:8f:99:76:e8:13:eb:92:cd:b6:4b:54:
         48:ea:ff:4a:23:ed:d6:e7:67:80:03:6b:c9:d0:5f:18:7a:86:
         02:9e:f6:3e:11:0e:3c:d4:f7:1e:40:2c:ef:25:3e:4a:bd:c5:
         d7:aa:7f:dc:4a:77:d5:35:36:49:57:8a:03:04:d0:1e:d8:e3:
         41:c5:8e:eb:89:71:f0:92:99:9b:da:a9:5d:8d:c7:bd:60:ee:
         16:bd:4d:fc:83:eb:34:52:21:85:22:19:45:38:ba:8f:b9:68:
         0c:18:95:35:6b:60:99:17:b6:37:f9:8e:ea:b9:10:de:87:e9:
         71:6c:a8:22:5c:f5:4c:d3:39:8e:00:53:3e:e4:0e:12:94:c5:
         a0:6c:4a:31:4a:c9:10:18:00:ec:d6:eb:c8:b5:f4:9a:e6:8c:
         e4:26:7c:5f:15:19:6c:8f:cd:43:c0:26:2a:c0:e0:e1:19:db:
         ab:2e:25:dc:01:17:30:76:39:0d:82:58:3b:5b:13:4e:3d:b9:
         f8:f4:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:00 2025 by rpki-client