Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          0lsXke9hrKCZSYs/mIayRe7Xq1bGJfoOfyMYxzjx/nA=
Subject key identifier:   98:4F:64:46:38:88:60:52:D0:F3:00:8C:C8:DB:8B:06:4B:54:95:5C
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       0554A240F711C2F6800142BCAA0025518D554B98
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:33 +0000
ROA not before:           Wed 26 Aug 2026 11:21:33 +0000
ROA not after:            Wed 25 Aug 2027 11:26:33 +0000
asID:                     52492
IP address blocks:        181.118.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:54:a2:40:f7:11:c2:f6:80:01:42:bc:aa:00:25:51:8d:55:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:33 2026 GMT
            Not After : Aug 25 11:26:33 2027 GMT
        Subject: CN=984F644638886052D0F3008CC8DB8B064B54955C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:ea:df:7d:55:8c:92:1d:70:e0:c1:91:e3:
                    ef:36:1d:5f:9e:ea:e4:16:4b:1b:9c:cf:7d:de:13:
                    ed:55:65:78:81:2b:f6:76:31:2c:08:5e:db:39:c0:
                    8a:2f:2f:a2:8b:6b:01:09:6e:f7:b4:88:49:91:b0:
                    55:7b:90:d6:66:66:43:5c:c5:d0:ec:75:54:26:3a:
                    67:fb:82:e2:a9:15:e9:65:6e:49:5c:65:a9:1e:ee:
                    7d:47:f5:0b:20:76:25:68:6c:2d:4c:36:ee:31:3d:
                    cb:35:33:8f:ad:5c:16:02:ae:63:6a:c6:83:18:92:
                    f1:82:a7:eb:10:71:c6:bb:52:ac:f3:ca:42:3c:bd:
                    8d:73:83:38:91:f4:8a:35:7b:b3:8a:fe:10:b6:fd:
                    d1:01:27:38:4d:48:71:8d:a4:9c:f5:a9:ea:34:52:
                    bb:82:69:e6:c9:ee:24:72:b8:f8:97:31:e6:5d:f2:
                    76:f0:36:ae:c1:d8:95:e1:7e:ba:28:b9:61:93:a3:
                    98:36:da:32:20:c5:69:17:59:b0:43:55:dd:0b:13:
                    8d:34:0b:a0:41:6a:73:df:43:79:21:29:bf:a0:53:
                    b2:e8:27:97:b4:d1:58:46:9a:d3:9d:ae:6f:e1:6d:
                    7d:57:39:9d:33:fd:d3:84:c9:2d:ba:5a:23:e0:cd:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4F:64:46:38:88:60:52:D0:F3:00:8C:C8:DB:8B:06:4B:54:95:5C
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134302e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:2f:d7:21:16:8a:3a:8f:1b:91:cb:a2:f1:c7:e9:dc:20:
         17:e1:f4:d2:62:ff:7a:c6:35:1a:ec:27:86:0a:03:0c:19:ee:
         7e:76:48:c6:88:29:6a:37:a8:76:d2:b0:53:d4:4b:81:49:56:
         42:34:b6:6b:9b:41:45:96:c8:b4:2e:71:cd:9a:dc:e4:13:cd:
         54:48:4e:97:79:57:c7:d6:d3:e8:b1:f5:44:2c:c7:d9:10:62:
         ab:b4:fb:f2:c5:5c:3b:bc:40:23:37:e3:d5:29:4b:c0:76:db:
         0c:2e:e5:c0:0a:8c:e7:ba:fe:40:c8:21:c1:98:93:2f:74:ac:
         93:0a:79:82:1d:25:ab:ee:a5:6b:20:a9:a6:c0:e0:27:7e:c9:
         28:b8:30:d9:4f:49:a4:f6:18:30:8b:3c:27:a2:fd:2f:af:94:
         0a:08:f7:d9:cc:88:77:d0:39:54:3a:66:95:22:b1:12:17:34:
         1c:f3:0a:45:68:1d:99:a5:59:98:62:35:f9:ce:f2:eb:97:a4:
         8d:ea:a4:ee:ab:d4:70:b9:2c:70:3b:78:84:f9:64:72:77:54:
         c8:c3:fd:3e:2d:48:ca:92:da:16:0a:32:e9:3f:03:d8:89:14:
         55:83:c9:1c:b9:82:61:02:92:d5:5d:f4:17:6b:0f:48:47:57:
         60:05:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:36:14 2026 by rpki-client