Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133392e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133392e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          x2jPefz/tKi4vCQYSw+LQQbkGeJdAJVDp2X13SrpAvo=
Subject key identifier:   45:0B:F4:D2:C6:74:62:51:5C:B0:FA:C0:12:95:70:6B:1E:A1:09:6F
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       5048AF9EF6C23FE42958D038701E5D10B0604972
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133392e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:02 +0000
ROA not before:           Wed 24 Sep 2025 11:15:02 +0000
ROA not after:            Wed 23 Sep 2026 11:20:02 +0000
asID:                     52492
IP address blocks:        181.118.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:48:af:9e:f6:c2:3f:e4:29:58:d0:38:70:1e:5d:10:b0:60:49:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:02 2025 GMT
            Not After : Sep 23 11:20:02 2026 GMT
        Subject: CN=450BF4D2C67462515CB0FAC01295706B1EA1096F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:34:8b:11:f2:d0:81:e6:2c:65:9f:be:f0:cb:
                    81:8d:24:7e:aa:09:0f:db:ee:f9:c9:83:20:64:91:
                    b1:92:4d:cc:9f:6a:8e:cd:2f:b3:0e:4a:f6:45:7f:
                    ca:80:e2:d3:c5:39:b7:d4:e2:6a:f5:78:78:1e:85:
                    f4:c2:f0:76:a5:a9:98:50:9c:d1:97:d6:ea:f3:9f:
                    4a:63:d4:bd:91:26:c2:8c:c3:23:53:3b:bd:b1:24:
                    b6:4a:a4:9c:4a:fb:a7:f6:13:86:56:c1:df:53:ed:
                    e8:da:a6:9a:82:62:80:07:65:77:cc:36:db:1c:04:
                    59:7d:f1:b5:7a:9e:58:6f:13:ed:11:b8:e6:40:c8:
                    c9:d4:4b:ce:15:83:78:4b:24:4a:f3:c9:97:b3:6a:
                    41:57:2d:2d:14:81:17:39:b2:0e:d2:1b:a2:5a:43:
                    c5:58:2d:cf:20:a0:63:85:45:2f:0f:48:f7:3c:c0:
                    2a:37:3a:1c:62:f1:66:66:87:35:c1:3d:7f:ea:22:
                    f9:8f:73:46:4a:13:c7:05:e2:98:88:68:30:84:82:
                    5b:39:c8:5f:74:33:a9:2b:05:61:b5:50:33:ad:83:
                    78:49:b3:66:39:47:ba:72:e4:2e:2e:a4:e5:da:74:
                    07:5e:fc:16:71:04:1e:60:ae:8a:5d:de:29:47:85:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:F4:D2:C6:74:62:51:5C:B0:FA:C0:12:95:70:6B:1E:A1:09:6F
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133392e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:cd:f0:1b:66:6b:c6:ad:9f:fd:f7:a5:ed:be:95:c8:97:
         22:3e:4b:ce:2b:c9:3c:b8:27:e6:ba:1f:69:db:34:00:ad:e7:
         30:44:9f:df:8d:d7:3a:2c:34:8a:f0:ef:44:e7:61:c2:8c:4c:
         a6:27:ff:3f:8b:cd:73:4a:71:10:1e:aa:91:5b:00:97:5f:04:
         15:7d:7b:28:4c:9b:b8:5a:af:9c:86:c1:99:9b:ba:f3:7d:64:
         27:5f:06:74:51:09:09:08:db:dd:63:3e:e2:79:56:73:b9:81:
         d0:92:75:70:69:c1:96:07:79:1d:52:65:98:c2:0c:d3:f7:46:
         28:4f:db:f8:f0:93:9e:6a:32:25:5e:4b:12:2f:9a:b4:35:78:
         eb:ad:b2:3d:3c:51:dd:b0:cd:0c:5b:b5:9a:fa:f0:11:fa:6a:
         ed:e9:db:a3:7f:f9:89:ee:a7:2c:4f:1b:a9:9b:b8:2c:a1:fd:
         18:54:e4:7a:79:9d:53:54:01:ac:3e:97:1d:94:e3:b4:81:bb:
         18:6f:8a:5e:2f:04:78:e0:a3:a1:1b:cb:4e:a1:f9:96:e9:44:
         c5:42:f2:2c:6d:fb:11:72:fe:ff:6e:26:e2:5a:ea:81:71:9d:
         af:f2:be:2b:31:9c:99:60:5d:ea:ce:84:e4:6c:d3:a9:9d:89:
         a1:d9:0b:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUEivnvbCP+QpWNA4cB5dELBgSXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3OTFBQTNGRTlDNUEzMjk4MUIyMEI3NUQ2QjJCRTJB
NkE4M0E3NzAeFw0yNTA5MjQxMTE1MDJaFw0yNjA5MjMxMTIwMDJaMDMxMTAvBgNV
BAMTKDQ1MEJGNEQyQzY3NDYyNTE1Q0IwRkFDMDEyOTU3MDZCMUVBMTA5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNIsR8tCB5ixln77wy4GNJH6q
CQ/b7vnJgyBkkbGSTcyfao7NL7MOSvZFf8qA4tPFObfU4mr1eHgehfTC8HalqZhQ
nNGX1urzn0pj1L2RJsKMwyNTO72xJLZKpJxK+6f2E4ZWwd9T7ejappqCYoAHZXfM
NtscBFl98bV6nlhvE+0RuOZAyMnUS84Vg3hLJErzyZezakFXLS0UgRc5sg7SG6Ja
Q8VYLc8goGOFRS8PSPc8wCo3Ohxi8WZmhzXBPX/qIvmPc0ZKE8cF4piIaDCEgls5
yF90M6krBWG1UDOtg3hJs2Y5R7py5C4upOXadAde/BZxBB5gropd3ilHhZpDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURQv00sZ0YlFcsPrAEpVwax6hCW8wHwYDVR0j
BBgwFoAUDnkao/6cWjKYGyC3XWsr4qaoOncwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Rjk4RUIxNUQzMUI5NkJERTEyRUNBOTAwMUYwNTg0ODFE
OTAyM0JENTdCMDIwNUYyMjk3N0ZERDEwNTU0Qjc4LzAvMEU3OTFBQTNGRTlDNUEz
Mjk4MUIyMEI3NUQ2QjJCRTJBNkE4M0E3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTc5MUFBM0ZFOUM1QTMyOTgx
QjIwQjc1RDZCMkJFMkE2QTgzQTc3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUY5OEVCMTVEMzFCOTZCREUxMkVDQTkwMDFGMDU4NDgxRDkwMjNCRDU3
QjAyMDVGMjI5NzdGREQxMDU1NEI3OC8wLzMxMzgzMTJlMzEzMTM4MmUzMTMzMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXaL
MA0GCSqGSIb3DQEBCwUAA4IBAQBKbs3wG2Zrxq2f/fel7b6VyJciPkvOK8k8uCfm
uh9p2zQArecwRJ/fjdc6LDSK8O9E52HCjEymJ/8/i81zSnEQHqqRWwCXXwQVfXso
TJu4Wq+chsGZm7rzfWQnXwZ0UQkJCNvdYz7ieVZzuYHQknVwacGWB3kdUmWYwgzT
90YoT9v48JOeajIlXksSL5q0NXjrrbI9PFHdsM0MW7Wa+vAR+mrt6dujf/mJ7qcs
Txupm7gsof0YVOR6eZ1TVAGsPpcdlOO0gbsYb4peLwR44KOhG8tOofmW6UTFQvIs
bfsRcv7/bibiWuqBcZ2v8r4rMZyZYF3qzoTkbNOpnYmh2QsJ
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:01 2025 by rpki-client