Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3232342e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e3232342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          SIuhXaGBrU0W6SANw7/lg9AawUoVly0r3wnLSCoMsFc=
Subject key identifier:   A9:15:04:C0:2A:64:BC:C2:76:ED:D2:BF:7E:C1:0B:A1:0C:ED:79:86
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       4F7317D9B5093B82FEF4B5B1EF898D2A7EB5B705
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3232342e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:00 +0000
ROA not before:           Fri 24 Jul 2026 10:00:00 +0000
ROA not after:            Fri 23 Jul 2027 10:05:00 +0000
asID:                     6306
IP address blocks:        186.164.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:17:d9:b5:09:3b:82:fe:f4:b5:b1:ef:89:8d:2a:7e:b5:b7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:00 2026 GMT
            Not After : Jul 23 10:05:00 2027 GMT
        Subject: CN=A91504C02A64BCC276EDD2BF7EC10BA10CED7986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:de:7c:3e:58:1b:4e:03:cf:fc:be:ea:72:
                    68:eb:b1:67:e1:e6:ed:ee:7c:0c:3a:8c:ab:69:5a:
                    09:ec:42:ec:c9:a3:1b:9e:13:b9:7d:30:f7:76:60:
                    98:86:1a:70:ef:77:04:43:1c:02:08:07:a8:ea:2b:
                    e7:b3:27:e9:e0:dd:7b:c9:b5:05:0c:07:3e:43:6d:
                    9e:7e:5d:0d:9e:56:d7:ba:90:51:43:9e:66:9e:6c:
                    e8:b1:f5:d3:55:47:ae:e5:96:fb:4d:4f:a7:77:51:
                    c9:47:c6:c1:e2:22:1d:c2:ca:38:1d:7a:24:90:69:
                    3d:04:b2:4d:24:fe:9f:f0:62:61:9c:68:ed:26:77:
                    c7:47:f2:0b:85:86:16:f7:74:56:4b:58:7e:56:a2:
                    80:ab:ca:db:6b:76:ec:78:19:ef:1e:66:0f:6b:ec:
                    09:ad:f3:be:26:4b:08:70:29:ca:71:50:30:c2:dc:
                    db:70:14:f8:ea:46:ad:fe:bb:db:d1:24:79:78:4b:
                    d7:98:80:02:2a:88:56:9d:3b:17:91:b3:e3:bf:69:
                    62:11:d8:57:72:e0:1b:e6:47:a1:57:f8:76:b8:a6:
                    06:ab:00:81:52:63:18:a7:a6:40:c2:56:b0:37:05:
                    53:e3:9f:78:39:77:29:95:50:85:a4:ec:f8:b1:b9:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:04:C0:2A:64:BC:C2:76:ED:D2:BF:7E:C1:0B:A1:0C:ED:79:86
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3232342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:4d:c3:57:aa:48:43:f9:93:a0:ba:c6:77:73:9e:31:0d:
         89:dd:f0:19:eb:b2:34:d1:89:7f:95:08:59:13:80:69:fe:17:
         ec:2a:3f:a9:49:ab:89:07:97:26:d8:68:cc:86:6d:6b:5b:eb:
         79:b1:9d:97:6c:ab:9d:ad:29:5a:f6:3e:12:d2:eb:92:7a:74:
         e9:73:b0:17:88:1e:2c:b2:05:d1:f3:e2:3c:9b:85:f5:42:03:
         92:34:9f:e8:7f:19:89:15:0f:26:ca:0f:0f:72:10:66:82:07:
         bc:76:ef:94:8e:86:3e:fa:be:f2:42:6e:d0:cd:bb:b5:0d:33:
         83:02:7a:a6:ae:2f:e4:ec:83:b0:05:06:e0:4e:24:f9:6b:c9:
         9c:95:2a:e1:ba:a2:c7:ef:36:b0:c6:9e:30:0f:33:e0:26:1b:
         f1:4c:a0:4c:61:6d:35:86:fb:55:b5:86:17:57:79:c9:c9:91:
         d6:c9:66:5d:81:08:60:55:23:2f:0a:ef:04:b9:8c:3c:72:2d:
         0b:1b:c0:20:36:e3:1b:f6:97:d8:f9:08:3a:22:72:c8:6c:26:
         08:cc:51:95:36:7f:3b:85:40:24:7e:a4:52:86:49:6c:27:af:
         9a:cd:b5:3f:42:aa:25:00:d5:a2:e3:51:dd:25:9a:36:83:a3:
         11:36:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:37:45 2026 by rpki-client