Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa
File:                     3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa (raw, json)
Hash identifier:          if0NnuCIBR/gEo7Xnxnp4t69k01bR2t6tzbhke3DiyI=
Subject key identifier:   FB:D6:87:9B:E3:58:C2:D8:59:45:9C:D8:B0:9E:79:D8:1B:67:52:31
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       1AD8BF8FE89A0966AC68E3BCA0066BA74DFE451C
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa
Signing time:             Wed 26 Aug 2026 11:26:32 +0000
ROA not before:           Wed 26 Aug 2026 11:21:32 +0000
ROA not after:            Wed 25 Aug 2027 11:26:32 +0000
asID:                     52492
IP address blocks:        181.118.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d8:bf:8f:e8:9a:09:66:ac:68:e3:bc:a0:06:6b:a7:4d:fe:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 26 11:21:32 2026 GMT
            Not After : Aug 25 11:26:32 2027 GMT
        Subject: CN=FBD6879BE358C2D859459CD8B09E79D81B675231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:87:fb:50:21:12:4b:06:1b:d2:25:07:66:
                    0e:6c:e2:3b:4d:7e:39:ab:79:5c:81:03:18:55:4a:
                    47:9d:8d:90:6d:7c:07:2b:6f:67:73:0c:57:d1:df:
                    f4:c6:e4:79:13:6d:a3:0f:09:72:1d:a4:c8:66:30:
                    da:f3:72:8f:61:77:20:34:33:80:cd:0c:50:9e:75:
                    ac:4e:7c:6b:c6:bb:50:86:db:d2:6a:4c:33:63:e9:
                    66:7a:ed:50:ce:b3:fc:14:16:0b:2d:56:e3:9f:59:
                    44:4e:c3:82:1a:7c:25:b3:35:4d:26:8d:20:f1:4c:
                    78:da:3e:20:86:ed:45:9c:73:bf:b5:58:12:89:68:
                    b0:04:23:a2:dc:5d:b9:8d:35:48:11:12:47:c4:0f:
                    f2:f8:3b:d3:3a:bf:90:c2:b9:12:4b:8f:f8:1c:5e:
                    34:84:88:04:eb:07:89:dd:9f:0d:4d:58:67:e4:dd:
                    c2:7f:6c:61:bb:c1:03:a5:c3:36:0a:0a:b1:42:e2:
                    d6:88:ab:c7:bf:5b:e8:b2:20:c5:08:2b:22:e4:be:
                    32:36:b4:6c:c2:05:97:45:77:ba:92:79:ef:61:a7:
                    2e:9f:87:e4:4c:dc:21:68:e6:b6:02:8a:a7:f2:3a:
                    73:31:c0:19:a7:3d:ff:ca:a1:1a:d1:1f:ab:37:37:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:87:9B:E3:58:C2:D8:59:45:9C:D8:B0:9E:79:D8:1B:67:52:31
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/3138312e3131382e3134332e302f32342d3234203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:af:c4:a2:07:ef:54:3e:23:5e:da:3d:af:76:35:a8:68:
         ba:84:b0:5c:0a:05:1b:35:95:19:9e:ad:e3:5f:d2:3c:41:c0:
         d3:a2:c4:c2:86:93:22:c5:16:31:67:63:33:f7:71:b4:8d:db:
         33:ad:8f:33:5c:a0:f7:57:bb:b3:56:a4:32:bf:65:14:a0:29:
         77:db:52:ff:1b:6d:db:89:a9:ef:9f:ee:8e:bc:36:83:ee:a6:
         df:b1:4c:2b:d7:42:67:6f:8c:90:9e:17:3e:d4:9b:32:eb:b2:
         a1:cc:68:00:bd:1c:48:bd:bc:4c:dd:a5:44:eb:e4:6c:84:da:
         a6:43:ea:c4:30:68:fc:be:c0:46:b2:ba:d8:c3:56:14:15:b0:
         4b:84:7a:ba:8a:75:25:b9:ae:0d:d2:f7:84:84:98:b4:d2:a6:
         e9:65:a9:f2:31:70:8a:f1:7d:ec:48:fd:5c:36:b0:6d:e8:7d:
         43:f9:df:fd:5b:b1:38:97:4a:fe:9a:fc:33:7f:bd:19:d5:f6:
         3a:79:8f:e4:fd:62:18:e9:2e:24:b1:cf:53:eb:9c:8d:e8:8f:
         04:05:f5:13:40:70:84:a6:7b:37:45:e1:fe:4b:78:b1:3e:9c:
         ee:22:eb:39:d9:33:0a:20:2e:dc:63:11:14:10:58:de:34:cb:
         ea:38:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:36:15 2026 by rpki-client