Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e38302e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e38302e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          tx0oydiYOHSIpWC52pKww4dxYiOk2t+2rbWCRvKtcMY=
Subject key identifier:   67:AD:00:64:09:74:8C:56:1F:8B:69:03:C8:C0:45:70:16:AE:24:41
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       42992FD2B76556E883D362E3720A27DBB17E118E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e38302e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:00 +0000
ROA not before:           Fri 24 Jul 2026 10:00:00 +0000
ROA not after:            Fri 23 Jul 2027 10:05:00 +0000
asID:                     6306
IP address blocks:        186.164.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:2f:d2:b7:65:56:e8:83:d3:62:e3:72:0a:27:db:b1:7e:11:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:00 2026 GMT
            Not After : Jul 23 10:05:00 2027 GMT
        Subject: CN=67AD006409748C561F8B6903C8C0457016AE2441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:7e:7e:b6:7d:22:de:40:c7:7a:95:11:6e:
                    f2:60:e1:44:0e:f8:a4:4f:70:45:4d:80:d4:88:0a:
                    34:a8:c1:24:d1:7e:fc:7a:d6:70:26:77:f1:d9:21:
                    17:c7:85:c8:b5:b3:7a:64:83:6e:55:81:82:78:18:
                    e6:f7:d0:31:e2:64:5b:63:36:2d:3c:4f:25:e9:51:
                    e6:2c:b1:87:57:d1:94:de:41:c5:85:71:d5:8a:66:
                    8c:7e:a9:3d:77:9a:6a:e2:f8:9e:c9:a0:82:08:7a:
                    c8:e3:77:85:26:1e:d2:af:f4:4b:42:5a:2d:ad:84:
                    66:de:68:d6:4e:0f:13:ad:77:ad:bf:74:83:61:32:
                    c0:e4:b4:d8:d9:5b:bf:2b:41:52:ab:16:c6:ec:c0:
                    b8:6d:03:10:65:44:d1:c6:7b:9f:07:c1:b6:d5:40:
                    f0:78:dd:36:f5:fb:4c:9b:80:8d:cb:65:09:74:00:
                    39:0e:1e:72:fa:7b:58:09:ab:17:75:a6:ac:4f:8d:
                    34:3f:1e:61:fc:88:08:ea:94:b9:86:97:37:98:06:
                    da:65:ea:43:12:d9:c2:86:73:60:3a:94:8f:e1:52:
                    1a:65:21:e6:7e:34:70:f3:1b:ce:3c:a8:56:e8:d0:
                    d5:bb:05:1a:6d:a0:4f:6c:97:e1:70:58:80:a2:6b:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:00:64:09:74:8C:56:1F:8B:69:03:C8:C0:45:70:16:AE:24:41
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e38302e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:64:25:11:a4:26:53:95:d7:cf:70:20:42:76:84:21:50:0f:
         34:6b:cf:14:8f:64:69:35:1f:dd:9d:99:73:fc:1c:5e:15:b7:
         13:09:b8:06:57:bb:50:09:38:2b:ab:e7:c7:d2:e7:61:53:9f:
         0c:95:69:d3:90:03:2e:5a:29:2e:19:37:34:8c:ee:d5:65:6e:
         98:35:3f:55:a6:00:a8:21:09:49:40:35:68:2a:7f:bf:9d:67:
         30:49:79:78:f9:5e:76:4f:08:d8:80:43:d7:60:66:04:1e:6f:
         0f:71:8d:45:7b:76:19:2a:d3:99:a0:8d:5c:cd:4f:cb:56:e7:
         34:c3:93:b3:1b:02:8b:d0:2c:97:be:c8:1b:08:fc:7d:8e:b5:
         d7:db:14:1b:38:d1:5a:05:2e:cc:db:2c:d3:64:dd:58:9f:1b:
         0b:78:de:9a:12:e5:b9:b8:c6:7a:66:33:df:cc:33:4a:64:d6:
         8d:3e:1d:6b:20:59:e6:e0:1e:50:d4:29:81:d8:ce:e9:92:b4:
         b9:a0:cd:63:8d:b8:c5:f8:58:3f:4f:cc:8d:66:39:1b:37:07:
         8d:38:ed:08:d0:d3:63:cb:12:fb:9e:d2:ae:62:64:db:a6:74:
         12:63:94:a6:76:1a:a2:36:1b:be:82:5f:cd:0f:fc:67:cb:5e:
         58:59:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:29 2026 by rpki-client