Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          XyEI364I7qvQGGGxmCEVrM4gP9xnzObuvQBy2r+kLpA=
Subject key identifier:   DF:EA:11:3C:9D:09:FA:C7:8F:49:72:F0:A6:86:0C:6B:CD:68:78:C1
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       78AE7E5157E9036A67D64D50F9CC0111B91CD6DD
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:04 +0000
ROA not before:           Wed 24 Sep 2025 11:15:04 +0000
ROA not after:            Wed 23 Sep 2026 11:20:04 +0000
asID:                     52492
IP address blocks:        181.118.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ae:7e:51:57:e9:03:6a:67:d6:4d:50:f9:cc:01:11:b9:1c:d6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:04 2025 GMT
            Not After : Sep 23 11:20:04 2026 GMT
        Subject: CN=DFEA113C9D09FAC78F4972F0A6860C6BCD6878C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:7d:0f:0f:b9:a1:8e:6d:07:d6:ea:cf:08:
                    67:2f:57:0e:77:d5:1a:d6:ff:84:4c:03:e8:71:8b:
                    21:fd:29:24:ff:b3:c5:5e:a4:10:d5:c4:86:2d:27:
                    d6:8a:e9:23:15:70:8f:4a:2a:58:36:d4:5b:4a:e6:
                    9b:1e:6c:db:59:ad:ec:5c:cd:fb:6b:dc:21:4e:5e:
                    ac:b4:d8:5a:26:e5:4e:21:ac:3e:f7:7b:85:23:f1:
                    24:54:ca:11:8d:ed:7b:3d:c0:5b:97:53:58:66:1f:
                    42:7a:a1:ff:14:c3:d4:df:d7:d8:b3:5f:95:6f:91:
                    12:30:30:00:62:c0:ec:27:69:71:87:6a:c6:76:47:
                    fb:93:f9:94:e9:2b:02:60:b1:46:09:4e:dd:88:83:
                    d0:ac:9a:c5:63:c0:e3:83:59:52:87:73:35:a2:39:
                    93:c6:dc:b1:9b:54:3d:d9:c3:b8:37:34:12:9e:94:
                    ce:a2:2f:6c:01:0b:eb:2a:a0:3d:b4:72:7d:db:a3:
                    04:eb:e8:78:c5:9c:62:34:76:df:9f:4b:f0:42:1d:
                    f0:e6:a3:f0:32:76:6c:a1:8c:cb:12:13:99:4a:50:
                    fe:22:f5:26:b8:fb:83:58:4c:a0:f9:ef:4d:ec:57:
                    f5:c1:f8:28:84:c7:8a:13:7c:9d:a4:6c:49:92:7c:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EA:11:3C:9D:09:FA:C7:8F:49:72:F0:A6:86:0C:6B:CD:68:78:C1
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:38:02:65:b3:c3:5e:89:35:1a:43:b9:d2:f2:42:32:fb:6f:
         21:78:99:d9:13:9b:9f:f9:6c:c7:0a:a4:93:de:67:9a:b5:dd:
         55:7a:b5:18:01:52:1a:e4:da:58:b9:81:f6:e7:23:18:e9:5a:
         40:cc:d7:47:c6:dd:cb:75:dd:f2:cc:46:69:a2:8f:b9:c1:48:
         c2:7f:f7:75:60:14:df:7a:ce:51:8e:d4:4a:6f:46:c2:a1:a0:
         48:dc:46:b8:56:4c:15:df:c6:3a:56:52:d3:bf:78:a5:ff:c4:
         d9:3d:52:f5:ac:c9:b7:c9:f3:56:80:1d:bd:15:5b:e1:fc:fb:
         54:2f:2e:de:94:63:7f:8d:56:18:de:47:cd:28:0f:7c:40:6c:
         73:ad:87:43:8f:ec:95:c8:f2:47:8a:c4:d3:d0:23:fd:f2:5b:
         86:49:c4:30:8e:41:7b:6c:98:75:dd:da:3f:33:69:6c:f2:97:
         cc:be:0c:c6:83:fd:bb:a5:fe:0b:10:15:98:4a:fc:f2:30:1c:
         87:5d:d3:ae:3b:15:5d:33:b1:cf:e5:4a:59:ea:2c:69:b7:81:
         cf:c9:e7:00:95:ab:b6:c9:04:fd:fb:42:96:07:df:70:e4:d7:
         9c:55:72:01:b9:32:f3:77:91:17:ce:4b:73:8d:3f:91:23:87:
         00:11:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:51:59 2025 by rpki-client