Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          ioKdqg8JCuvqOh7I6N38vmkT0qQOplynn693RJcgvX0=
Subject key identifier:   65:9C:75:5B:CF:02:52:01:E2:9C:7F:CA:FC:E0:4B:C7:75:0A:DB:0E
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       2C9DC49D014AE3402A5E22CC9ED3A6FD6E57AC87
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 24 Sep 2025 11:20:04 +0000
ROA not before:           Wed 24 Sep 2025 11:15:04 +0000
ROA not after:            Wed 23 Sep 2026 11:20:04 +0000
asID:                     52492
IP address blocks:        181.118.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:c4:9d:01:4a:e3:40:2a:5e:22:cc:9e:d3:a6:fd:6e:57:ac:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Sep 24 11:15:04 2025 GMT
            Not After : Sep 23 11:20:04 2026 GMT
        Subject: CN=659C755BCF025201E29C7FCAFCE04BC7750ADB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:df:b8:80:be:38:c8:8d:47:79:e6:a8:e2:
                    82:b6:d2:ff:e0:24:0d:7f:ba:6c:37:78:94:d8:4d:
                    6d:17:ac:e4:50:10:ab:bd:46:55:68:dc:5b:54:9c:
                    b9:5c:16:08:af:53:d2:3d:c5:f4:0e:41:33:37:bb:
                    58:cb:bc:0e:17:6e:a2:36:f2:30:47:68:44:3c:e2:
                    93:91:de:d1:eb:0f:9e:ff:06:b8:b8:81:93:9e:17:
                    ec:6a:0f:65:a2:46:7c:74:5d:0e:95:e7:86:74:25:
                    6a:1f:16:6d:d7:0e:df:a1:1f:d8:37:1c:fa:aa:7e:
                    53:b2:1e:9b:68:88:35:af:d9:62:b2:a7:dc:c3:24:
                    d3:d8:be:7d:a2:78:80:f0:bd:f5:47:76:26:88:67:
                    35:b7:44:7c:8c:ae:d1:de:96:60:46:a3:1a:20:30:
                    88:6b:5e:6c:33:2b:18:02:80:cf:bc:32:15:8a:e3:
                    48:2c:91:51:06:53:80:45:f7:6f:b1:f4:7f:84:dd:
                    aa:0b:0c:ed:7a:cb:24:97:94:db:e3:01:0c:cf:c9:
                    d6:a1:64:bf:27:d9:75:81:79:6f:82:88:a9:64:99:
                    a2:23:ac:a7:1c:86:9a:a2:ae:49:2f:36:a9:b2:bf:
                    2c:81:de:f6:b8:22:cf:b2:fb:55:11:09:35:2b:6f:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9C:75:5B:CF:02:52:01:E2:9C:7F:CA:FC:E0:4B:C7:75:0A:DB:0E
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:89:20:87:2b:04:bb:dc:c4:41:4a:86:6f:f9:9d:10:7c:fa:
         ee:7e:51:ef:11:61:30:a4:b1:a7:aa:e5:81:32:7f:a6:f7:51:
         ae:6c:8f:35:0e:b8:2a:54:75:34:c8:38:da:9a:b4:80:fb:16:
         77:e6:48:57:9a:e0:a7:1a:cf:dd:60:62:cd:c0:44:11:05:57:
         43:c1:f2:1e:51:46:9f:41:1b:91:7d:05:e6:0d:09:c3:92:aa:
         e1:21:6d:a4:84:3e:e5:be:80:6a:af:dc:ad:77:a8:83:1a:72:
         69:08:8d:34:2e:ee:8c:b1:30:67:0e:46:89:1b:ba:f7:bc:a2:
         85:f5:2e:d8:30:c0:a9:32:31:82:42:64:ec:c5:8e:d2:e8:6b:
         a3:49:55:f0:03:b9:20:c2:1e:a6:0c:14:98:f8:b4:a5:df:8d:
         5f:2c:bc:69:ca:41:e1:88:10:9b:70:98:d7:ba:0f:ba:95:4c:
         c0:b6:b4:51:ad:50:f6:0e:f6:68:11:18:3a:d9:76:7b:09:20:
         e6:ed:a4:3e:64:26:83:df:cf:e7:62:52:e5:e6:a1:6c:07:87:
         85:04:fe:15:d5:2c:3e:e8:43:5a:71:88:1a:c2:5e:dc:30:ae:
         d3:a6:71:ac:ca:84:8d:b7:5c:b7:1d:b9:32:f2:0c:ef:bb:28:
         35:bb:39:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULJ3EnQFK40AqXiLMntOm/W5XrIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3OTFBQTNGRTlDNUEzMjk4MUIyMEI3NUQ2QjJCRTJB
NkE4M0E3NzAeFw0yNTA5MjQxMTE1MDRaFw0yNjA5MjMxMTIwMDRaMDMxMTAvBgNV
BAMTKDY1OUM3NTVCQ0YwMjUyMDFFMjlDN0ZDQUZDRTA0QkM3NzUwQURCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66N+4gL44yI1Heeao4oK20v/g
JA1/umw3eJTYTW0XrORQEKu9RlVo3FtUnLlcFgivU9I9xfQOQTM3u1jLvA4XbqI2
8jBHaEQ84pOR3tHrD57/Bri4gZOeF+xqD2WiRnx0XQ6V54Z0JWofFm3XDt+hH9g3
HPqqflOyHptoiDWv2WKyp9zDJNPYvn2ieIDwvfVHdiaIZzW3RHyMrtHelmBGoxog
MIhrXmwzKxgCgM+8MhWK40gskVEGU4BF92+x9H+E3aoLDO16yySXlNvjAQzPydah
ZL8n2XWBeW+CiKlkmaIjrKcchpqirkkvNqmyvyyB3va4Is+y+1URCTUrb8HpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZZx1W88CUgHinH/K/OBLx3UK2w4wHwYDVR0j
BBgwFoAUDnkao/6cWjKYGyC3XWsr4qaoOncwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Rjk4RUIxNUQzMUI5NkJERTEyRUNBOTAwMUYwNTg0ODFE
OTAyM0JENTdCMDIwNUYyMjk3N0ZERDEwNTU0Qjc4LzAvMEU3OTFBQTNGRTlDNUEz
Mjk4MUIyMEI3NUQ2QjJCRTJBNkE4M0E3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTc5MUFBM0ZFOUM1QTMyOTgx
QjIwQjc1RDZCMkJFMkE2QTgzQTc3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUY5OEVCMTVEMzFCOTZCREUxMkVDQTkwMDFGMDU4NDgxRDkwMjNCRDU3
QjAyMDVGMjI5NzdGREQxMDU1NEI3OC8wLzMxMzgzMTJlMzEzMTM4MmUzMTM0MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXaP
MA0GCSqGSIb3DQEBCwUAA4IBAQBQiSCHKwS73MRBSoZv+Z0QfPruflHvEWEwpLGn
quWBMn+m91GubI81DrgqVHU0yDjamrSA+xZ35khXmuCnGs/dYGLNwEQRBVdDwfIe
UUafQRuRfQXmDQnDkqrhIW2khD7lvoBqr9ytd6iDGnJpCI00Lu6MsTBnDkaJG7r3
vKKF9S7YMMCpMjGCQmTsxY7S6GujSVXwA7kgwh6mDBSY+LSl341fLLxpykHhiBCb
cJjXug+6lUzAtrRRrVD2DvZoERg62XZ7CSDm7aQ+ZCaD38/nYlLl5qFsB4eFBP4V
1Sw+6ENacYgawl7cMK7TpnGsyoSNt1y3Hbky8gzvuyg1uzmU
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:00 2025 by rpki-client