Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          Qv3lqEr4e88WZiJpT+MGFwlPWS130j9QMLKpDGq7Ggs=
Subject key identifier:   D8:84:8A:B7:CD:DA:E2:48:EF:4C:2C:9B:4D:A5:16:96:C7:2C:ED:DF
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       6E04819B00D502812329C870E1FA620BBBC51680
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:34 +0000
ROA not before:           Wed 26 Aug 2026 11:21:34 +0000
ROA not after:            Wed 25 Aug 2027 11:26:34 +0000
asID:                     52492
IP address blocks:        181.118.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:81:9b:00:d5:02:81:23:29:c8:70:e1:fa:62:0b:bb:c5:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:34 2026 GMT
            Not After : Aug 25 11:26:34 2027 GMT
        Subject: CN=D8848AB7CDDAE248EF4C2C9B4DA51696C72CEDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:f9:ec:ad:ba:ab:b5:28:1c:63:6b:2b:71:
                    0f:05:e6:81:82:b6:bb:47:0e:b0:ec:f1:d1:3e:1e:
                    e7:6c:63:96:08:4e:3b:8c:f9:f9:d2:46:49:56:6d:
                    b1:e8:4c:03:49:d0:62:3c:e5:e1:39:95:fb:07:1a:
                    0d:81:cb:d8:21:0f:29:8b:6e:61:c1:8f:9e:d4:c6:
                    c4:8b:b3:dc:2a:ac:be:5d:aa:d4:00:ae:c3:67:62:
                    e2:f4:09:06:03:83:6e:94:8f:86:55:94:ca:52:6e:
                    74:df:04:59:48:e1:42:56:50:8d:22:00:e7:c5:df:
                    9a:32:9d:de:3b:18:ac:e5:82:a4:5c:0f:b1:e9:95:
                    58:7d:56:71:98:17:3b:f0:41:dc:28:61:81:3f:68:
                    f7:54:ba:ba:90:16:cf:39:a3:c8:97:50:25:46:40:
                    ca:46:4e:33:88:a7:ed:77:6b:e8:a4:f4:67:67:b9:
                    cb:32:00:60:45:77:73:13:04:ce:7d:f8:b9:1e:6b:
                    57:3d:9c:eb:1e:d2:8b:a8:b4:96:e4:1d:99:57:8e:
                    80:3f:cc:52:95:c7:6e:89:61:80:23:81:b5:35:12:
                    8e:20:1b:17:1e:90:f3:f9:57:e6:99:0b:6e:31:b6:
                    e5:a2:77:c5:81:92:a9:42:3e:aa:d7:28:07:84:94:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:8A:B7:CD:DA:E2:48:EF:4C:2C:9B:4D:A5:16:96:C7:2C:ED:DF
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133332e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:f2:25:9a:22:fe:13:1b:5c:87:f2:4a:9d:3c:fd:ef:4a:
         c7:33:4f:3f:15:cf:4c:16:65:bf:75:b3:71:1d:bb:7a:6d:39:
         22:3e:f0:05:c6:43:01:09:d3:bb:c8:64:8f:67:ff:56:2a:40:
         8f:53:8f:f2:55:44:71:04:e3:c2:74:a6:fe:80:99:af:6b:f0:
         f8:ea:84:d4:18:bc:fa:a3:51:45:01:22:fe:98:48:9e:1e:33:
         e5:1f:16:11:ad:1e:c6:7f:df:27:1f:dd:6e:63:ef:e2:24:92:
         e5:fb:68:d3:8e:93:e6:45:c1:1e:99:a5:47:fc:8f:d1:38:04:
         f5:73:52:b8:51:17:1b:d6:bd:7d:8c:47:39:57:15:c5:a4:68:
         3b:0f:02:6d:98:ff:a2:b0:16:98:42:19:6e:9b:61:6b:f8:fd:
         54:b0:72:1b:f0:63:8f:77:6b:54:db:30:8d:0a:95:d3:a7:e9:
         c6:74:c0:a7:ef:87:66:86:6a:3a:66:98:3d:1d:53:aa:63:df:
         4a:15:ab:fb:30:3c:70:8d:ee:ae:98:8a:67:98:8d:cd:fc:4c:
         77:19:5e:22:30:42:01:db:18:c6:27:02:b1:1f:43:cc:86:ed:
         32:3c:0d:5f:7b:0b:71:b6:39:9b:6f:a9:d7:94:3c:aa:82:d1:
         31:40:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:36:44 2026 by rpki-client