Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e36342e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e36342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          GVLum0hV1Pymw5tdXZaiHtepOc4Yni6Uy6X9GE7SJXM=
Subject key identifier:   14:CA:D1:D2:84:E5:A0:DE:02:8C:40:CB:0C:73:E0:F3:83:5A:9D:2C
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0F34DAA46DEBDA1384FEA69B4F6E1E939F0BFBC2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e36342e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:05 +0000
ROA not before:           Fri 24 Jul 2026 10:00:05 +0000
ROA not after:            Fri 23 Jul 2027 10:05:05 +0000
asID:                     6306
IP address blocks:        186.164.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:34:da:a4:6d:eb:da:13:84:fe:a6:9b:4f:6e:1e:93:9f:0b:fb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:05 2026 GMT
            Not After : Jul 23 10:05:05 2027 GMT
        Subject: CN=14CAD1D284E5A0DE028C40CB0C73E0F3835A9D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:3c:7c:79:90:95:33:bb:69:03:d7:a2:b3:
                    6d:38:59:7e:21:3d:a0:30:6c:01:b9:91:dd:5c:03:
                    1f:19:30:34:ba:04:6f:a6:54:cd:6c:7a:42:71:f8:
                    ef:23:16:1a:78:10:d3:c4:c1:5f:33:d6:d0:44:9b:
                    19:e9:89:e1:65:36:93:30:fb:a9:92:d2:66:2d:7b:
                    2b:25:ff:5a:e5:eb:97:3d:4b:78:ad:9c:3c:91:b8:
                    2d:d8:0f:37:18:88:20:bd:5f:1f:e1:92:a2:fe:b9:
                    71:f8:bf:4c:82:b7:97:cf:00:ad:3e:07:db:33:d8:
                    3a:9c:8d:b7:f2:7e:89:a5:4c:3e:89:d0:23:57:3e:
                    6a:1c:95:32:18:f7:7d:4e:8d:a3:54:2a:ed:62:93:
                    d0:88:55:7b:bf:a6:b3:77:d6:73:e8:f8:80:29:54:
                    5b:53:00:ae:fc:a4:91:00:4a:7f:9c:02:5e:95:5b:
                    69:09:41:5a:06:f1:48:be:0d:b8:ee:4a:0b:38:b7:
                    d2:98:2b:5d:2a:1b:25:f4:2c:25:04:88:18:d2:09:
                    57:07:84:2b:3e:ae:2c:8c:03:56:ef:20:73:67:dd:
                    c0:20:71:90:c4:f0:f1:35:b7:01:9b:ff:a3:3d:38:
                    ce:2f:df:5b:25:57:2f:18:38:84:2d:68:39:08:25:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CA:D1:D2:84:E5:A0:DE:02:8C:40:CB:0C:73:E0:F3:83:5A:9D:2C
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e36342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:27:d4:d0:4b:8f:14:90:72:fc:66:69:35:f7:0e:5a:6a:
         2c:89:eb:15:7d:e8:b0:44:80:3c:75:f7:e6:e2:c9:08:52:8d:
         f1:71:a5:53:8d:37:6a:3f:63:c3:20:5b:04:8a:bd:0b:ea:ae:
         aa:34:3a:3c:8e:68:9b:68:e5:d7:28:f3:e1:a9:b5:76:aa:e8:
         70:65:66:0c:9c:f0:1b:30:55:81:f2:32:71:09:9b:58:ce:da:
         50:84:4c:5d:f6:94:a7:7b:55:43:54:83:89:15:97:a0:0e:67:
         1e:e5:40:57:37:29:df:f8:9b:5c:ea:92:bf:e8:b9:cd:4e:88:
         83:95:56:46:3f:a2:f0:2e:52:12:e1:65:92:c2:5e:ec:11:7b:
         be:5e:3f:ce:7d:46:b8:3e:a1:13:22:51:d7:34:65:ab:96:76:
         21:f6:f4:19:85:5b:b6:d7:c1:47:f1:8c:ed:2f:a8:00:d2:ef:
         bb:9b:25:3c:f7:d8:d8:3c:ee:20:40:36:d7:a0:d5:c2:d8:e0:
         3d:25:fb:d1:50:f0:0e:88:14:ac:d7:7c:e3:c1:15:9f:ba:6b:
         de:0e:11:82:c5:4e:18:dc:da:2c:c0:03:8d:e3:54:17:35:03:
         30:2f:71:3c:6f:26:ce:cf:3e:4d:be:9e:c0:d7:ff:0a:fe:af:
         9f:ef:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:30 2026 by rpki-client