Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          mFiV/kc7cqcJ47bzjWD+cUzpR3cFufC9QShu/V6AHGI=
Subject key identifier:   01:BB:75:77:97:B2:E2:64:62:05:5E:76:FE:ED:F5:B5:8D:9E:5E:63
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       18BAEAAD177B50FC7C65D67BD67723ACA744041E
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:36 +0000
ROA not before:           Wed 26 Aug 2026 11:21:36 +0000
ROA not after:            Wed 25 Aug 2027 11:26:36 +0000
asID:                     52492
IP address blocks:        181.118.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ba:ea:ad:17:7b:50:fc:7c:65:d6:7b:d6:77:23:ac:a7:44:04:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:36 2026 GMT
            Not After : Aug 25 11:26:36 2027 GMT
        Subject: CN=01BB757797B2E26462055E76FEEDF5B58D9E5E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:4d:f1:b8:07:e2:e7:d6:63:91:51:e5:69:
                    b2:6f:7e:7e:83:19:f2:57:f6:c9:e7:31:60:17:6e:
                    5e:28:83:87:73:ab:75:04:82:7f:f6:86:0b:56:9f:
                    a7:b6:f2:d8:3a:30:6a:b3:31:da:8a:5a:7a:8f:e6:
                    d8:6d:71:4f:b4:5e:9e:d3:b8:06:50:5f:ab:42:93:
                    e7:72:31:32:27:74:a0:c1:2f:fe:f3:21:cd:59:83:
                    f1:3e:11:58:f8:16:95:c7:69:12:50:a4:4e:e2:0c:
                    82:21:81:36:aa:ce:ed:94:82:9e:61:57:4e:3e:8f:
                    45:60:ba:d4:bf:1a:a3:87:15:ee:33:ad:db:7d:67:
                    71:fa:f0:a3:93:54:e5:8b:e9:84:27:63:71:93:21:
                    f2:f0:b5:b2:1b:03:da:42:d3:1b:d9:c2:71:25:e8:
                    ec:9c:7f:52:6b:dc:b1:81:e6:1d:0a:c7:c5:c4:08:
                    80:52:87:47:d9:d3:4a:e7:9d:a4:0c:89:d8:26:a5:
                    f4:f8:47:f7:29:f4:07:b4:02:ce:5c:1b:bd:a4:ea:
                    12:c0:69:69:ef:1d:39:d4:91:92:54:29:ef:b5:6d:
                    03:27:cc:3a:39:64:48:b1:01:f2:d8:79:3f:f2:41:
                    da:2d:de:8e:29:3a:6c:e3:63:4a:19:dc:f2:9d:13:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:75:77:97:B2:E2:64:62:05:5E:76:FE:ED:F5:B5:8D:9E:5E:63
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133322e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:23:e4:00:78:ac:fb:87:26:4b:90:ff:91:58:e2:38:69:
         91:81:5c:49:ce:06:28:72:48:60:75:83:07:8b:81:e1:e5:6a:
         eb:2e:79:0f:68:0b:ca:b2:9b:84:12:2a:08:1f:e2:7d:61:d7:
         f3:54:a4:59:43:be:e8:dc:0f:db:77:53:49:5b:db:4b:85:80:
         d3:3c:a6:7b:2a:a6:b9:42:13:eb:b7:39:94:69:6e:d6:bb:10:
         bf:19:5e:0d:b8:54:18:6b:85:2f:3c:a1:1b:63:9e:55:08:a2:
         f7:08:15:31:65:d5:ab:ed:10:dd:a5:5d:31:ac:a5:38:da:bf:
         1f:ff:f1:48:7c:4c:99:53:5d:d7:3f:7f:34:2e:68:18:ae:46:
         5c:f4:66:a8:40:fe:17:31:b9:38:9d:8c:ad:90:dd:e7:74:17:
         90:c1:c5:93:13:e8:be:8c:6c:77:4a:30:44:88:bd:03:95:27:
         74:82:b8:e0:8a:6d:b8:16:5f:f2:4b:14:c7:a9:51:84:6d:51:
         20:7a:0e:bf:5f:b4:f3:af:6f:94:d4:3f:33:63:c5:9d:9c:4e:
         ed:db:9d:b3:2a:ec:d9:f2:07:67:19:79:c1:96:92:ac:9a:b8:
         30:11:75:81:44:f2:7a:e6:be:18:08:2a:a2:3b:d5:1b:29:ab:
         3f:00:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:35:58 2026 by rpki-client