Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3136302e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e3136302e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          Gjbxn+gOzxPf2cUgZmA3e4T1NP/gv2IF51ABG0IVY5w=
Subject key identifier:   CB:F9:3C:BD:5F:71:F9:BB:04:AA:67:4F:EC:B7:85:EA:F9:94:65:52
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       2C3C06845351B750AA643A0799B5FFC1E752A64D
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3136302e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:01 +0000
ROA not before:           Fri 24 Jul 2026 10:00:01 +0000
ROA not after:            Fri 23 Jul 2027 10:05:01 +0000
asID:                     6306
IP address blocks:        186.164.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3c:06:84:53:51:b7:50:aa:64:3a:07:99:b5:ff:c1:e7:52:a6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:01 2026 GMT
            Not After : Jul 23 10:05:01 2027 GMT
        Subject: CN=CBF93CBD5F71F9BB04AA674FECB785EAF9946552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:82:7a:cb:6d:5c:8a:cf:51:3a:1e:50:4b:
                    1e:84:50:86:51:2b:82:26:8d:f5:4d:8d:bd:f9:dc:
                    89:0c:43:52:1e:cf:b1:f4:b1:2c:50:77:f8:cc:cf:
                    a6:a2:e1:1c:9b:44:bf:d7:c3:b8:8c:9d:48:7a:5f:
                    4f:3d:36:e4:2c:fc:65:c4:94:7d:22:ee:c4:df:fd:
                    0a:9e:c9:db:c7:c5:88:f5:e7:10:13:69:9b:d7:6a:
                    cc:93:9f:31:c0:2c:d4:3c:57:f0:93:6f:11:dc:b9:
                    24:4d:f4:47:ec:5c:0a:d6:9b:7a:f6:0c:6e:41:34:
                    50:c5:69:56:e8:9d:84:b5:55:b8:86:2e:b2:3f:10:
                    b3:cd:ec:e7:40:75:a6:de:fd:28:66:95:b1:8e:31:
                    25:f0:6d:b0:7b:bf:a4:90:e1:3b:e8:c7:7e:11:f6:
                    5c:37:e9:28:15:8d:35:39:93:33:3e:99:37:0e:04:
                    b1:41:91:56:7d:51:8d:c8:2e:c8:a8:51:79:64:a9:
                    c0:dc:67:79:dd:91:d1:a0:ec:94:63:b9:70:b3:01:
                    33:f1:66:d5:52:5c:8e:46:29:95:02:74:82:73:94:
                    c1:e9:7f:d4:4d:ee:1f:6f:60:5e:8b:6c:f1:86:0c:
                    8c:3a:66:11:1b:85:dc:8e:71:91:9b:1a:af:2f:fd:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:3C:BD:5F:71:F9:BB:04:AA:67:4F:EC:B7:85:EA:F9:94:65:52
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3136302e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:bf:cf:41:2c:9a:7a:bf:85:1e:97:83:31:7a:48:4b:08:
         f6:97:3b:90:32:37:73:90:c4:98:74:69:99:78:3d:9c:58:30:
         75:fe:04:d0:3d:34:b4:29:40:c3:7e:39:83:6a:de:6b:ae:6d:
         4a:c0:c8:92:2d:6e:39:9d:7c:a0:2b:3a:00:d2:20:b0:5c:7f:
         93:3f:0d:2c:41:d7:52:14:50:48:c3:f4:34:24:9b:bc:8d:24:
         4c:d9:a4:de:26:a6:92:80:cd:81:52:5e:a9:84:88:6e:c6:aa:
         75:72:32:75:6a:67:55:f5:df:ac:53:47:b5:37:3d:04:fc:fb:
         01:65:92:74:4a:41:89:6e:c6:19:df:5a:00:e3:69:1f:77:d4:
         30:bc:36:65:11:cd:64:5f:b0:15:5e:4a:ad:f6:fa:f1:2c:17:
         79:f8:9a:e5:72:e5:fd:b7:81:83:29:a7:6c:ea:2b:09:c5:d9:
         b3:23:0e:60:66:78:3e:6b:99:b9:c0:2b:ef:e1:66:1b:38:b3:
         3b:86:4f:b0:88:4c:6e:66:df:74:c9:5b:53:5e:ec:5c:5f:51:
         43:10:f0:b9:b0:61:e7:bd:79:d4:0e:75:b4:00:b3:41:38:00:
         d9:2f:2f:99:42:a5:57:8d:b7:89:bf:57:1d:c0:5d:19:a2:36:
         7c:0d:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:41:44 2026 by rpki-client