Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          02MnojRpTP27kV4Z4NTyVYPHH5RKhXjt1eb5EfjJF8g=
Subject key identifier:   73:4A:9A:D8:75:39:50:6C:B9:1D:77:D5:22:2F:86:E8:F0:F1:5D:3F
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       6F5EC478BE09BF46478ACB1439849F351E4CEC0A
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:34 +0000
ROA not before:           Wed 26 Aug 2026 11:21:34 +0000
ROA not after:            Wed 25 Aug 2027 11:26:34 +0000
asID:                     52492
IP address blocks:        181.118.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:c4:78:be:09:bf:46:47:8a:cb:14:39:84:9f:35:1e:4c:ec:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:34 2026 GMT
            Not After : Aug 25 11:26:34 2027 GMT
        Subject: CN=734A9AD87539506CB91D77D5222F86E8F0F15D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:ee:21:9d:ab:5d:b7:07:38:be:b8:a9:00:
                    95:ba:b3:f1:76:d0:ca:59:87:dd:31:78:cb:7d:42:
                    f7:32:57:8c:20:1f:87:53:54:76:dc:5d:d9:56:d0:
                    37:5f:63:3e:fe:a2:d6:9e:88:b3:30:87:d8:59:a1:
                    c3:9d:76:5d:2e:06:da:86:09:20:62:11:30:0c:bf:
                    53:e0:42:5b:c3:d3:ca:42:64:df:bb:29:06:17:45:
                    e6:b5:fa:3c:2d:86:99:58:d4:3d:9d:a5:b7:df:56:
                    03:fc:99:13:c5:d0:50:36:ac:59:58:ea:18:ea:46:
                    2d:5d:2f:7e:43:eb:6e:67:11:53:52:66:11:87:ec:
                    7c:0e:af:84:d0:11:69:29:d0:9f:42:a0:b9:f5:04:
                    a3:f5:a8:36:34:c1:34:93:67:a6:87:46:2b:4c:2a:
                    80:00:81:74:a1:c8:62:2e:b8:ee:2f:cc:ad:dc:c0:
                    b6:24:14:44:f3:9a:5f:25:e5:02:27:6b:08:dd:12:
                    21:78:ed:2f:62:75:92:e5:d4:11:2a:12:66:e8:27:
                    3d:5c:45:21:ef:2c:09:e8:ad:e4:9d:49:55:96:c1:
                    b1:ac:71:12:f5:1f:fd:0d:6d:8a:9c:5c:71:2f:9a:
                    ae:74:cc:56:ad:7d:99:f9:5d:84:7c:dd:fe:63:a3:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:9A:D8:75:39:50:6C:B9:1D:77:D5:22:2F:86:E8:F0:F1:5D:3F
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133352e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9f:5a:5b:a9:ca:45:da:e6:ff:62:ff:01:0f:6d:ea:8d:9c:
         30:6c:3d:53:79:93:09:87:92:1e:be:d3:df:62:56:62:c9:46:
         36:7f:e1:db:e1:fc:20:b0:e0:4a:c0:3f:cd:5a:18:18:16:4d:
         0b:1d:b2:7a:0a:31:fd:3a:bf:25:1d:a0:2f:29:e7:98:0f:7c:
         6f:21:29:5c:4c:f4:73:e3:ca:3b:ff:0e:d7:c1:fe:0b:c5:7f:
         9b:b4:fd:07:89:b1:9e:d6:f5:d2:6a:4c:29:1c:8f:62:ec:2c:
         8b:91:f3:97:4c:48:64:6c:01:db:5f:38:55:90:10:c7:1c:d2:
         bd:33:de:19:f0:fd:47:3c:2c:de:cd:4c:42:b8:3e:92:a5:b1:
         ec:5a:75:49:f7:5a:fe:de:7a:9b:94:b0:cb:66:c9:f1:9d:73:
         55:d7:74:3b:c5:b1:67:bf:68:8b:fe:db:90:91:b0:ab:03:4a:
         dc:00:fd:61:d9:f4:e0:b1:ee:fa:82:58:89:01:c2:20:3b:54:
         bc:2f:93:8b:e4:0b:23:d5:68:ca:7e:db:08:5e:3b:8b:ff:44:
         1f:2e:f7:fc:97:56:1c:46:c9:5c:a1:08:91:05:13:c3:25:80:
         53:02:97:62:a6:81:f5:94:14:32:cd:30:06:24:95:7d:24:b9:
         93:a1:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:35:58 2026 by rpki-client