Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          XRGepzVukn198PpKbzoixjbsSVP3gw7uoZZcZ6QndGs=
Subject key identifier:   57:52:00:3F:EB:EC:70:99:AF:B1:B1:0D:24:24:07:C8:5C:B5:88:8D
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       7066B26F94017A72B18CC620D33C0B1539891EE6
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:32 +0000
ROA not before:           Wed 26 Aug 2026 11:21:32 +0000
ROA not after:            Wed 25 Aug 2027 11:26:32 +0000
asID:                     52492
IP address blocks:        181.118.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:66:b2:6f:94:01:7a:72:b1:8c:c6:20:d3:3c:0b:15:39:89:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:32 2026 GMT
            Not After : Aug 25 11:26:32 2027 GMT
        Subject: CN=5752003FEBEC7099AFB1B10D242407C85CB5888D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:ef:6f:96:26:c0:a7:df:ed:a6:27:27:b8:
                    57:20:7f:b4:29:e5:6a:50:3b:eb:cb:f0:b1:7e:1b:
                    86:79:6d:f2:16:fe:a3:6e:92:2a:75:fd:5b:54:a6:
                    7f:22:b6:9a:6d:9a:b6:fb:fe:ca:81:30:e4:79:06:
                    b4:fd:0e:18:a8:47:97:e0:80:8b:25:33:2b:aa:f6:
                    ad:fe:7e:59:3b:8a:6d:45:d4:7a:d5:ef:e6:4b:81:
                    45:bb:1f:46:80:4f:3e:da:8e:b0:0b:64:16:47:23:
                    e2:cc:54:f6:99:bb:ad:4c:97:4c:e1:e1:19:43:a1:
                    83:99:8b:1f:2a:e4:d4:59:98:3e:2b:6e:08:86:a8:
                    1c:29:e2:8c:a2:3a:ae:9b:f5:b8:59:43:e0:89:c0:
                    1e:13:25:66:85:ac:c4:a7:dc:21:f0:44:a0:c7:96:
                    14:3c:ce:06:be:52:92:a7:f8:74:6a:49:44:06:3f:
                    4e:4d:ff:82:65:58:7d:3c:d8:c8:d0:8e:72:ea:f4:
                    47:dd:35:77:04:1a:86:95:4e:c3:71:be:9f:8b:60:
                    ac:fe:85:17:2e:85:8b:45:92:39:77:77:01:5b:6c:
                    dc:05:1b:fd:f4:3e:39:fc:cc:99:ba:bb:cf:bd:9c:
                    6f:ac:11:9d:9e:1a:97:00:69:2b:40:88:bc:1e:c2:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:00:3F:EB:EC:70:99:AF:B1:B1:0D:24:24:07:C8:5C:B5:88:8D
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3132392e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:15:0f:0a:53:a3:ae:22:48:32:9a:49:da:e4:e2:b2:06:fb:
         a3:c0:f2:9c:45:f6:e2:eb:13:38:b8:1a:22:32:78:c0:65:23:
         a1:77:11:86:44:a1:a8:7f:7c:f8:82:cf:75:ac:d3:9b:8a:ec:
         e8:37:82:00:38:77:d8:a2:fc:51:96:77:f2:32:9c:03:3e:f4:
         96:3a:ff:41:24:5b:9f:c3:f5:8f:03:73:19:c9:9d:52:0d:a4:
         5e:22:b6:c5:3a:3c:69:4e:4c:cc:c2:1d:3e:e8:93:2c:d0:1e:
         0b:71:b4:61:73:97:c5:83:6a:80:b3:ba:a7:8d:00:c6:c0:4a:
         47:67:ef:df:fd:28:83:c2:11:4c:25:3a:27:34:92:68:6f:4a:
         76:f4:0c:41:99:dc:f3:c2:96:b8:04:fb:05:6a:d8:b6:23:49:
         0b:17:cb:aa:7d:27:57:8e:52:a9:71:f5:cd:39:de:81:34:49:
         f5:a5:d3:db:d9:7c:83:3a:9e:41:5a:c6:e0:c7:f2:2b:e8:85:
         a8:34:01:39:dd:85:30:27:d7:88:24:28:0f:ba:36:04:9e:69:
         a0:e1:ec:19:97:d9:c4:3b:e9:50:3b:a0:39:fd:72:fa:b4:5b:
         34:03:b4:58:59:b9:6b:e5:04:35:ea:34:88:08:69:5d:5f:da:
         71:46:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:35:56 2026 by rpki-client