Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          QDR0mVRM83dwtGZOtUuFKiQKY0rr4MgUKILpR768p90=
Subject key identifier:   60:34:4C:12:C8:FC:AC:0F:33:79:E9:9B:9E:56:DB:C6:FA:37:58:99
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       1D9A565A9ECC8AA8AB737A77655F228487FD095F
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:36 +0000
ROA not before:           Wed 26 Aug 2026 11:21:36 +0000
ROA not after:            Wed 25 Aug 2027 11:26:36 +0000
asID:                     52492
IP address blocks:        181.118.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9a:56:5a:9e:cc:8a:a8:ab:73:7a:77:65:5f:22:84:87:fd:09:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:36 2026 GMT
            Not After : Aug 25 11:26:36 2027 GMT
        Subject: CN=60344C12C8FCAC0F3379E99B9E56DBC6FA375899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:bb:0e:9f:d3:53:42:23:da:79:13:be:39:
                    5a:8c:f7:79:21:90:c6:ae:30:1b:07:b8:ad:d1:90:
                    1e:84:8b:5e:6c:8a:40:d0:47:16:8a:08:ea:7a:0a:
                    33:7a:8a:e5:81:4d:7d:4b:a2:c4:da:c3:7c:10:bc:
                    aa:e3:1f:97:49:76:58:6b:33:bb:5b:b6:04:0a:76:
                    0b:9e:dd:11:2d:ac:52:82:f2:72:fa:6b:c6:a1:16:
                    2c:87:8e:e1:48:97:e9:ed:20:a0:05:9f:8c:0a:4e:
                    8e:53:22:16:99:69:b2:0c:86:b1:92:45:80:6d:b9:
                    be:0f:b4:ea:11:a3:c7:2d:05:cb:c5:6a:e9:52:31:
                    29:ec:31:49:e5:51:d9:5e:56:a7:2a:22:cd:37:8f:
                    29:9b:7d:4a:a0:b4:8a:4c:e8:b3:a2:f3:8e:bf:f2:
                    a8:5c:54:10:8c:2f:8e:47:f8:14:1c:1f:d2:e6:05:
                    52:09:85:2f:3a:a5:28:53:aa:36:24:ef:d7:71:39:
                    75:15:77:a1:38:33:9a:9d:7b:08:30:cd:02:7e:cd:
                    26:0c:54:c5:b6:f2:c5:bd:a5:0c:22:e8:e3:90:a3:
                    b4:e2:f4:ff:d5:b2:eb:2e:c7:1d:a1:13:c8:04:3f:
                    df:85:7b:63:ea:b3:93:73:6c:75:8b:ea:ba:12:68:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:4C:12:C8:FC:AC:0F:33:79:E9:9B:9E:56:DB:C6:FA:37:58:99
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3133382e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:20:c3:94:60:8a:e9:9e:5f:63:02:ce:9c:65:f9:c3:34:
         76:81:1b:68:49:67:64:43:cf:db:0f:f6:b3:0b:a1:96:83:23:
         d9:f4:1f:34:04:33:4b:e2:ad:af:40:fd:b7:67:16:18:aa:8c:
         57:48:02:5c:69:99:be:34:fb:05:ee:71:45:21:a5:56:5d:c1:
         ba:8d:ff:31:35:ec:e3:66:73:6f:c4:13:d0:49:e1:34:14:12:
         e1:6c:b6:f2:66:c9:90:c1:ef:24:82:b0:29:b4:3c:ba:21:ef:
         2f:44:28:03:05:4d:bd:99:5c:9a:36:21:f4:b8:c2:c2:c8:da:
         16:b9:45:dd:2d:59:34:20:79:a4:7a:8f:09:51:2b:f6:fe:c8:
         2c:5b:16:30:06:73:5d:2a:a5:9b:32:68:39:cb:b9:23:0c:f2:
         6a:11:c5:9a:ac:7a:8e:e5:de:1b:d9:c9:54:bf:c1:88:36:90:
         ad:6b:c4:0b:a9:56:e6:a1:14:48:6c:64:7a:bb:ca:4e:e2:ee:
         16:cd:7e:ce:1e:b7:64:64:3d:d4:94:63:ae:56:88:5a:bc:f9:
         51:6f:41:d2:21:fe:97:dc:3c:8b:12:34:04:9f:de:33:76:38:
         28:b0:ce:06:6a:e7:69:5c:4e:45:2c:b0:6b:a2:e5:36:0c:7e:
         5e:89:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:35:19 2026 by rpki-client