Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3131322e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e3131322e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          FE2el9zBhapbIqA+18AUT/451GuvjVy3KP57JGtTWM8=
Subject key identifier:   B9:76:16:29:85:49:B4:C2:3B:FA:0D:12:D1:57:11:E2:FE:2D:14:43
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       3A6CB5FA38DF7F6FA3CC7FC6758016C6E03A9418
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3131322e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:00 +0000
ROA not before:           Fri 24 Jul 2026 10:00:00 +0000
ROA not after:            Fri 23 Jul 2027 10:05:00 +0000
asID:                     6306
IP address blocks:        186.165.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:b5:fa:38:df:7f:6f:a3:cc:7f:c6:75:80:16:c6:e0:3a:94:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:00 2026 GMT
            Not After : Jul 23 10:05:00 2027 GMT
        Subject: CN=B97616298549B4C23BFA0D12D15711E2FE2D1443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:d3:f4:ab:a0:4a:3f:29:24:be:33:a2:b2:
                    91:e8:0e:79:22:e7:13:66:80:81:a2:5f:a1:db:07:
                    2b:6b:cd:7e:65:83:94:78:ad:78:f7:28:79:56:df:
                    61:de:d3:44:7a:8f:dd:e5:40:c0:88:fa:98:c5:ae:
                    b0:07:ba:48:1b:0d:bd:e6:cb:76:9c:78:28:82:2e:
                    8c:30:cd:91:71:b3:a6:92:d9:3c:63:22:6f:e9:42:
                    3f:8f:0c:39:d3:71:fd:14:3c:6a:43:3f:5c:1c:96:
                    42:b8:bf:cc:97:aa:7d:50:67:d4:e5:db:69:6e:16:
                    7f:b1:58:2f:21:7f:72:f3:18:0d:6f:b9:cf:9c:d6:
                    6d:d4:6f:80:33:ec:9d:cf:45:e0:96:85:c5:67:64:
                    28:83:a5:7e:94:fe:c3:5a:23:33:70:3d:5a:b9:e1:
                    a5:59:7b:fa:08:b7:b1:34:2e:16:22:20:f3:89:7b:
                    42:7d:53:88:40:82:76:85:5f:3a:8b:e1:ff:76:22:
                    40:05:21:e7:61:53:2f:47:a2:48:dc:e0:ac:fa:92:
                    1e:20:6e:70:d8:17:67:e5:52:57:fe:7b:3a:bf:b2:
                    99:82:57:d6:25:09:15:48:4b:81:7d:37:30:24:d3:
                    17:d6:4e:a1:ce:b8:89:52:86:23:9f:ce:5d:7f:d1:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:16:29:85:49:B4:C2:3B:FA:0D:12:D1:57:11:E2:FE:2D:14:43
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3131322e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:df:a1:3f:f9:9e:01:80:19:c5:84:ef:57:d3:a3:e0:7d:70:
         e8:0d:8b:b8:8e:db:6a:09:1e:b0:55:20:52:55:32:74:f3:b3:
         86:d7:9b:46:4b:79:75:7e:83:8b:5c:0f:6d:15:5f:ca:28:e3:
         df:2f:3b:30:1b:cb:89:b5:d6:86:a4:46:2b:1f:ed:a2:64:7c:
         f5:ae:c6:3b:09:9e:57:26:55:ae:33:ee:a2:06:09:61:fe:8e:
         6c:ad:47:da:a5:63:a4:b8:91:02:f0:2c:02:81:64:19:11:df:
         2e:2b:03:7f:6b:9c:a9:1f:ac:18:e9:dc:03:a9:d0:d5:78:bc:
         8c:2a:ea:33:93:86:c9:11:c0:ce:f3:25:91:b5:d3:34:8a:2c:
         da:37:48:ef:0d:06:85:56:2f:f2:47:dc:69:6f:14:1f:b7:d8:
         70:d9:d7:84:14:ff:1b:0f:ca:73:b9:10:9e:d5:95:22:1c:7b:
         90:b8:ca:7e:90:4c:82:2c:7a:04:d4:83:9c:4e:5f:bd:d6:24:
         9e:8a:ec:52:f0:24:28:ec:dd:ef:cb:4a:a5:0c:21:95:e4:d0:
         49:ba:46:40:2b:9e:3d:10:e7:5f:c8:80:1c:34:21:1b:16:0d:
         66:ce:c1:1e:5d:7f:f3:cc:fa:66:22:4e:6e:b3:a4:f7:a5:92:
         a5:39:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:17 2026 by rpki-client