Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          Efj4virTbVAFJiCoc1M05gbYbZR35Gmm+PUB7CFb+v0=
Subject key identifier:   0F:1E:59:8C:A7:3A:E6:CC:B0:4F:9D:F5:6E:A5:EF:0B:7F:D9:29:49
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       6F546B3760290E8C065C247F03E081CD17896171
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:36 +0000
ROA not before:           Wed 26 Aug 2026 11:21:36 +0000
ROA not after:            Wed 25 Aug 2027 11:26:36 +0000
asID:                     52492
IP address blocks:        181.118.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:6b:37:60:29:0e:8c:06:5c:24:7f:03:e0:81:cd:17:89:61:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:36 2026 GMT
            Not After : Aug 25 11:26:36 2027 GMT
        Subject: CN=0F1E598CA73AE6CCB04F9DF56EA5EF0B7FD92949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:e7:ad:9e:2a:bb:93:32:b2:53:88:df:90:
                    1d:28:2f:12:68:ff:98:ef:3c:54:db:29:c7:04:6c:
                    a8:4a:6c:9c:15:c7:be:41:d5:59:21:0d:dc:57:e7:
                    8c:39:d6:fb:46:ea:5e:32:50:79:a0:ac:4f:7d:76:
                    d7:e4:8b:18:e6:56:a8:bd:ab:a7:2f:00:59:4b:94:
                    fd:06:9a:10:4a:b4:88:04:d9:c3:58:ff:de:02:5c:
                    55:7b:b6:0c:1e:4e:da:77:c2:89:5e:b5:45:83:1c:
                    4d:61:f9:88:56:f1:09:04:88:67:d7:65:29:63:9c:
                    c1:7f:d2:94:19:9e:12:ce:e6:e6:21:c0:d5:17:91:
                    53:78:1b:f4:a6:b3:39:fc:a7:bb:74:ca:23:bd:7e:
                    a2:98:79:fa:2a:34:d6:16:7c:81:81:88:8f:57:63:
                    a5:11:5b:a7:f2:2e:8d:1f:3c:c1:f0:e6:66:f0:de:
                    f5:55:af:1e:d2:a4:0e:4e:e7:58:2d:60:35:85:8c:
                    f0:a5:1e:db:d2:a5:63:12:1e:00:31:5f:6e:9c:7e:
                    17:f2:4e:e1:03:02:ca:7e:d8:65:36:9d:53:64:a5:
                    44:a6:15:4e:42:a5:81:15:56:d9:2a:61:fb:c5:e7:
                    97:10:81:6a:81:13:85:6b:b2:c0:3f:e6:23:ed:44:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:59:8C:A7:3A:E6:CC:B0:4F:9D:F5:6E:A5:EF:0B:7F:D9:29:49
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132382e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:38:76:25:0d:69:26:5e:52:7a:a4:09:87:d2:90:57:81:
         c1:7f:98:14:d9:00:ec:5f:1b:ed:83:22:91:4b:6e:84:d7:bb:
         bc:f8:54:be:f2:e9:77:9e:40:13:e2:23:c6:3d:39:2f:81:5a:
         ac:e8:7f:92:4b:2d:8a:ce:bf:a2:27:62:47:6f:81:63:13:13:
         de:5f:b2:e6:cc:36:89:d7:74:a2:fb:e8:13:11:8b:71:9d:13:
         d2:b6:eb:50:69:7c:0c:fa:cf:b7:41:70:1d:71:0e:da:95:f1:
         3b:ea:f5:70:47:63:70:80:f4:34:69:e6:52:e1:46:5b:f2:54:
         86:85:aa:74:c0:71:c2:34:02:b6:a2:ce:ff:5d:34:50:b9:22:
         a9:59:e8:7c:3c:8d:45:05:9a:19:8c:1a:95:30:12:5f:a8:f5:
         ad:86:ae:27:93:6c:77:f8:af:f6:15:9c:11:d7:03:50:43:33:
         71:bd:ae:e1:67:ce:23:88:ee:be:81:70:05:d2:dc:a4:5a:18:
         b2:66:99:80:67:e5:c7:92:94:40:90:a6:35:05:a9:b8:73:04:
         e4:ee:d8:6b:f4:4b:6e:42:13:3f:ce:a2:9a:ef:58:f6:be:82:
         a4:d9:0f:af:e2:27:a1:18:a0:fc:4f:ee:98:e6:86:20:e4:44:
         57:0b:95:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb1RrN2ApDowGXCR/A+CBzReJYXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3OTFBQTNGRTlDNUEzMjk4MUIyMEI3NUQ2QjJCRTJB
NkE4M0E3NzAeFw0yNjA4MjYxMTIxMzZaFw0yNzA4MjUxMTI2MzZaMDMxMTAvBgNV
BAMTKDBGMUU1OThDQTczQUU2Q0NCMDRGOURGNTZFQTVFRjBCN0ZEOTI5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSluetniq7kzKyU4jfkB0oLxJo
/5jvPFTbKccEbKhKbJwVx75B1VkhDdxX54w51vtG6l4yUHmgrE99dtfkixjmVqi9
q6cvAFlLlP0GmhBKtIgE2cNY/94CXFV7tgweTtp3woletUWDHE1h+YhW8QkEiGfX
ZSljnMF/0pQZnhLO5uYhwNUXkVN4G/Smszn8p7t0yiO9fqKYefoqNNYWfIGBiI9X
Y6URW6fyLo0fPMHw5mbw3vVVrx7SpA5O51gtYDWFjPClHtvSpWMSHgAxX26cfhfy
TuEDAsp+2GU2nVNkpUSmFU5CpYEVVtkqYfvF55cQgWqBE4VrssA/5iPtRMKvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDx5ZjKc65sywT531bqXvC3/ZKUkwHwYDVR0j
BBgwFoAUDnkao/6cWjKYGyC3XWsr4qaoOncwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Rjk4RUIxNUQzMUI5NkJERTEyRUNBOTAwMUYwNTg0ODFE
OTAyM0JENTdCMDIwNUYyMjk3N0ZERDEwNTU0Qjc4LzAvMEU3OTFBQTNGRTlDNUEz
Mjk4MUIyMEI3NUQ2QjJCRTJBNkE4M0E3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTc5MUFBM0ZFOUM1QTMyOTgx
QjIwQjc1RDZCMkJFMkE2QTgzQTc3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUY5OEVCMTVEMzFCOTZCREUxMkVDQTkwMDFGMDU4NDgxRDkwMjNCRDU3
QjAyMDVGMjI5NzdGREQxMDU1NEI3OC8wLzMxMzgzMTJlMzEzMTM4MmUzMTMyMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXaA
MA0GCSqGSIb3DQEBCwUAA4IBAQBXmzh2JQ1pJl5SeqQJh9KQV4HBf5gU2QDsXxvt
gyKRS26E17u8+FS+8ul3nkAT4iPGPTkvgVqs6H+SSy2Kzr+iJ2JHb4FjExPeX7Lm
zDaJ13Si++gTEYtxnRPStutQaXwM+s+3QXAdcQ7alfE76vVwR2NwgPQ0aeZS4UZb
8lSGhap0wHHCNAK2os7/XTRQuSKpWeh8PI1FBZoZjBqVMBJfqPWthq4nk2x3+K/2
FZwR1wNQQzNxva7hZ84jiO6+gXAF0tykWhiyZpmAZ+XHkpRAkKY1Bam4cwTk7thr
9EtuQhM/zqKa71j2voKk2Q+v4iehGKD8T+6Y5oYg5ERXC5X3
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:35:57 2026 by rpki-client