Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134322e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3134322e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          08RChm+cPrNTcUwsK7m60o3rBLIpukLDTO0h/eTmpvI=
Subject key identifier:   C0:2A:FB:87:B8:7B:CB:9D:8E:10:6A:E2:6B:E6:12:59:C6:D3:B9:A7
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       1651F2709944DC8E067907DF653D13296D7FE1E2
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134322e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:02 +0000
ROA not before:           Wed 24 Sep 2025 11:15:02 +0000
ROA not after:            Wed 23 Sep 2026 11:20:02 +0000
asID:                     52492
IP address blocks:        181.118.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:51:f2:70:99:44:dc:8e:06:79:07:df:65:3d:13:29:6d:7f:e1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:02 2025 GMT
            Not After : Sep 23 11:20:02 2026 GMT
        Subject: CN=C02AFB87B87BCB9D8E106AE26BE61259C6D3B9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:4c:00:2f:e9:73:c5:7c:28:82:62:82:ec:
                    98:4a:bc:e4:05:6a:94:14:f3:0b:81:99:e8:31:c7:
                    a4:ba:06:59:04:b1:2f:3f:fb:ff:1e:d8:94:12:6c:
                    89:f4:7e:0f:5e:50:6c:66:29:53:e4:ee:e6:6b:8e:
                    d1:ac:6b:1b:af:ee:a3:6b:17:b4:5b:ca:e1:23:4c:
                    8b:5b:84:49:b8:bf:0b:30:86:1b:f3:ae:58:4e:2f:
                    ab:d5:75:f3:4e:de:d8:59:a7:ff:dd:94:97:25:77:
                    5c:b6:16:c2:ce:cc:22:f5:bc:82:c0:41:13:94:e3:
                    41:98:dc:7d:e2:bd:64:cc:a2:e3:da:87:29:57:6c:
                    41:30:c5:0d:62:00:d8:6a:cf:3d:65:bd:52:d1:ad:
                    de:c8:bd:a5:c7:a9:b0:a4:ad:ba:fe:b1:df:8c:f3:
                    30:10:10:f2:96:94:bf:65:b7:91:fa:a9:19:48:61:
                    e6:f6:ec:c8:d1:b0:48:ce:57:e8:4b:43:ce:c3:3e:
                    c8:2a:e6:29:71:bc:71:da:f4:c2:0e:0e:90:cc:88:
                    63:8f:0f:37:a4:39:65:9e:4c:0e:8a:96:bf:68:c7:
                    ec:36:db:c7:4e:5c:b8:e6:c8:0f:ac:8e:93:17:a1:
                    78:b1:91:25:f5:07:5e:5c:54:7a:5a:fb:85:8d:e2:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:FB:87:B8:7B:CB:9D:8E:10:6A:E2:6B:E6:12:59:C6:D3:B9:A7
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134322e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:ca:5c:34:1a:66:26:09:02:0a:a6:2a:84:70:52:60:de:
         65:c9:ab:7d:af:70:00:46:71:c9:55:11:d3:26:6f:15:72:09:
         0c:05:ec:e4:63:55:d9:28:ac:16:0d:0b:00:b0:b3:8e:9e:70:
         7f:60:90:b2:05:79:49:cf:e6:31:ac:57:0c:39:0b:9f:bc:87:
         a7:3a:31:14:a5:6d:78:a8:7f:02:4a:6f:6d:1b:7f:6b:1e:e2:
         63:f0:48:e1:8f:69:f5:9a:4e:5e:f4:c5:75:bd:d3:29:e5:52:
         b1:d4:f7:ed:45:1b:35:06:e0:e2:e4:b1:bf:91:79:76:71:75:
         78:c2:52:a5:df:20:b9:15:20:70:e6:b6:c3:fb:3e:ff:26:b5:
         b7:c5:ea:f2:62:0b:f6:29:23:82:c6:1b:a1:a5:dd:e7:db:86:
         a8:e1:45:ab:9f:a7:77:31:5f:77:c9:10:11:be:e0:c4:d0:f1:
         f5:03:6d:97:8b:33:f5:ad:42:aa:d4:6c:ef:df:72:8a:f1:72:
         5f:f7:7a:26:df:2d:24:92:2f:77:e1:03:a0:e8:f6:85:56:36:
         c7:bb:c5:a8:f2:ff:f2:76:be:11:f4:8f:b0:a9:69:f5:35:a9:
         51:63:09:00:3f:7a:bd:0a:9a:27:20:93:f8:ab:98:d8:d2:ed:
         04:ab:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:02 2025 by rpki-client