Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e39362e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e39362e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          VVICat8NUGnt4VEIMBEsUkZ3/AQg+YhUxREswCWg5x8=
Subject key identifier:   8C:EC:4D:04:9C:B7:91:A1:74:4A:70:29:7B:F7:1A:4B:B0:BD:6A:B0
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       735AF0E6274AB919170D3DC4BD69DC66B5B701C7
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e39362e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:04 +0000
ROA not before:           Fri 24 Jul 2026 10:00:04 +0000
ROA not after:            Fri 23 Jul 2027 10:05:04 +0000
asID:                     6306
IP address blocks:        186.164.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5a:f0:e6:27:4a:b9:19:17:0d:3d:c4:bd:69:dc:66:b5:b7:01:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:04 2026 GMT
            Not After : Jul 23 10:05:04 2027 GMT
        Subject: CN=8CEC4D049CB791A1744A70297BF71A4BB0BD6AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:a3:fd:52:c6:6d:ca:4f:1c:af:f3:2a:37:
                    74:b7:c4:5f:ab:82:0b:fe:2f:aa:f5:f5:d2:53:85:
                    f1:87:77:20:83:16:7f:d4:a0:54:04:3d:5f:9e:a3:
                    53:de:fb:9d:52:b5:f3:b1:71:80:73:3b:f8:61:04:
                    7d:aa:c6:33:17:07:4e:c7:1c:e5:f0:25:f7:ea:82:
                    23:21:2b:e5:1f:ea:ad:80:26:bc:15:6c:67:d3:e9:
                    59:8e:54:3f:88:70:91:04:d4:40:52:ed:ad:4c:bf:
                    0c:3e:d8:91:da:57:8e:f8:30:7d:ca:2d:a5:2d:d7:
                    a3:8f:b6:35:1d:df:5c:ee:75:1d:e6:8d:cf:4f:11:
                    b1:c6:63:e1:0c:f3:f2:c1:20:fe:2f:66:7b:af:f4:
                    ae:6e:13:0b:e2:eb:3d:5b:c7:f1:8d:fc:0d:45:12:
                    f0:30:81:07:fc:e3:81:3d:18:64:87:f4:c0:93:ae:
                    c0:82:1d:70:0b:ce:e0:17:7c:89:fc:7a:09:b7:c7:
                    2a:76:5b:57:ea:ea:c5:1e:eb:e3:4c:47:67:d4:d5:
                    b2:84:ee:8e:32:aa:43:e1:95:a9:a1:6d:e6:59:9a:
                    de:d2:ad:24:9e:1d:88:3e:ed:b1:60:7f:51:f5:fe:
                    74:53:4d:1d:9b:06:0a:0d:c2:dc:23:72:2d:95:f1:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:4D:04:9C:B7:91:A1:74:4A:70:29:7B:F7:1A:4B:B0:BD:6A:B0
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e39362e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:59:dd:e7:e6:39:16:9b:76:b6:fb:89:d3:df:f1:94:2a:
         85:10:33:c8:56:55:dc:33:59:5c:72:8c:59:a1:0a:53:cc:a6:
         1b:88:ac:48:0c:ea:60:3e:e3:0a:6d:c3:8b:83:9b:f2:9b:5a:
         bc:62:61:32:27:8f:33:f0:ea:0f:a2:11:7f:c8:c7:a1:3f:87:
         d4:35:1c:d0:29:a7:4b:1f:90:98:1f:75:ef:fa:30:58:f2:a0:
         2f:15:2b:6b:f3:77:27:4e:23:60:dc:27:90:6d:5b:56:dd:16:
         4b:df:e8:1d:4d:2a:bf:09:1b:89:d7:52:10:6e:f8:aa:15:52:
         ec:c8:55:7a:13:e5:4a:db:b5:70:8e:98:49:10:50:f0:c3:99:
         87:05:5e:1c:24:ef:a7:58:9a:5c:bc:b7:66:3c:08:04:20:17:
         2c:c6:3f:b3:1d:70:eb:4d:c4:71:e3:48:0e:13:4e:f6:4b:ea:
         f6:c3:3f:4f:18:11:c1:6f:ea:2a:b6:54:4b:38:79:3c:5c:bb:
         e8:e5:42:b0:11:85:a1:da:44:32:44:ca:1e:8f:d2:6f:28:6e:
         37:d9:fe:5b:ce:c9:c8:50:81:f5:d9:f4:f0:9f:55:12:2e:70:
         ee:38:0c:fa:76:fd:4a:a3:98:25:0a:32:9d:ba:82:df:96:3c:
         af:ea:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:29 2026 by rpki-client