Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e31362e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e31362e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          NXBMBS/Ksfbyl6oA3IsNhqikg7UPWKNED8otS74MHv4=
Subject key identifier:   F9:35:E3:BE:62:84:3F:98:57:9D:1F:AE:7A:42:85:93:62:05:46:AA
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       54CFF8C1B361E3C1445C5839D1CF6DEB669F023E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e31362e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:05 +0000
ROA not before:           Fri 24 Jul 2026 10:00:05 +0000
ROA not after:            Fri 23 Jul 2027 10:05:05 +0000
asID:                     6306
IP address blocks:        186.165.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cf:f8:c1:b3:61:e3:c1:44:5c:58:39:d1:cf:6d:eb:66:9f:02:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:05 2026 GMT
            Not After : Jul 23 10:05:05 2027 GMT
        Subject: CN=F935E3BE62843F98579D1FAE7A428593620546AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:20:73:ff:07:93:a6:33:b3:0b:39:85:0c:
                    65:13:59:e3:17:1e:cf:99:50:cf:dc:3c:57:60:fe:
                    e7:c2:81:f6:47:54:1a:4f:2e:f9:f5:a7:04:25:e6:
                    4a:67:35:81:3e:04:f7:c7:79:9e:da:38:4e:e0:93:
                    8e:f1:ed:43:fd:df:b5:42:04:9b:99:01:61:83:77:
                    1b:9b:6e:6b:5c:15:eb:e9:fc:92:42:c3:fc:15:1a:
                    1d:fe:e1:bb:bb:12:20:3d:95:f1:bb:d9:f3:c1:86:
                    7d:0d:4a:ce:ee:a1:ff:c5:5c:bf:ab:33:ab:d0:ba:
                    cf:55:38:c6:06:fa:d8:d4:af:8b:04:f9:1a:74:9e:
                    80:93:7d:2e:2b:32:6c:db:48:60:8f:cd:a9:9d:b7:
                    5f:b9:19:20:79:2e:36:b1:5f:e0:99:ca:d1:bd:b1:
                    5d:e8:08:e6:e5:bf:6e:af:7f:29:9e:ab:06:9e:70:
                    4e:da:fe:56:1e:52:6e:e0:2c:33:fd:5f:76:b1:05:
                    0d:56:6a:9a:a5:c0:93:02:ae:3c:d8:3a:84:0f:cd:
                    85:54:aa:09:f3:01:05:b5:08:a3:3b:d0:e4:79:2b:
                    07:42:57:98:10:a5:2a:e0:6d:0e:a1:f3:45:46:db:
                    d8:53:10:30:54:d7:f8:9b:96:dc:3a:6a:b1:67:18:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:35:E3:BE:62:84:3F:98:57:9D:1F:AE:7A:42:85:93:62:05:46:AA
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e31362e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:3e:43:79:e6:f9:ec:24:b4:07:87:e2:35:1a:ef:a8:84:
         c2:41:f6:0d:c8:92:9a:e5:96:cf:dc:06:96:5a:78:0f:00:79:
         9f:39:d1:1d:f2:6a:a6:cb:e7:01:2d:92:da:9f:e6:8e:0e:38:
         51:7d:b1:9f:45:e1:b1:14:63:a1:41:7a:69:7c:94:69:15:df:
         f2:b8:37:86:a2:a2:25:11:16:63:ee:93:8d:a0:7e:f0:e1:ad:
         07:de:b8:d6:0f:c1:2e:b6:cf:04:7a:93:a7:fd:db:e5:0c:68:
         49:e4:b1:e2:59:32:a8:ce:72:16:36:8c:76:da:76:70:21:1c:
         53:2e:bc:b7:bc:86:57:4f:7d:04:a1:2d:58:f0:65:63:4d:d6:
         f5:d7:a5:1f:c1:88:cb:bb:12:d9:6d:c6:c1:13:c6:b7:cb:a8:
         ef:b0:26:d0:b7:83:5c:06:09:9f:11:9e:3a:de:51:bd:14:c5:
         5d:5a:7e:60:f1:d3:95:e2:5e:9c:b3:48:03:79:4f:52:46:db:
         47:ce:54:06:7c:61:26:c2:15:a2:32:83:1a:53:c0:a1:bc:85:
         af:1f:6f:21:ef:7b:dc:07:23:c4:60:cb:39:d7:ef:96:37:f2:
         1a:55:2f:a1:63:7e:0f:bf:a6:7e:31:b0:9a:61:7b:99:c7:a7:
         ee:c4:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:30 2026 by rpki-client