Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e34382e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e34382e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          Ucr69S9286fmOt484mOS59ovz2fqOkJBKW6Qw0n+yMM=
Subject key identifier:   6A:FC:29:30:8A:71:42:C5:41:91:34:36:D2:8E:0F:0B:6A:86:5F:86
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       13F6F472A9B49C6BE9CDFFFBDAA4DEF9E4B2609C
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e34382e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:03 +0000
ROA not before:           Fri 24 Jul 2026 10:00:03 +0000
ROA not after:            Fri 23 Jul 2027 10:05:03 +0000
asID:                     6306
IP address blocks:        186.165.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:f4:72:a9:b4:9c:6b:e9:cd:ff:fb:da:a4:de:f9:e4:b2:60:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:03 2026 GMT
            Not After : Jul 23 10:05:03 2027 GMT
        Subject: CN=6AFC29308A7142C541913436D28E0F0B6A865F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:c2:18:7e:37:36:17:4c:2b:87:99:f1:00:
                    d6:d5:ec:8a:07:eb:ec:04:46:49:a3:ff:b2:b2:e7:
                    cc:5b:95:1b:c4:87:2e:ac:95:dd:5f:1f:12:2e:68:
                    60:2a:32:ce:27:9f:cb:18:98:f5:aa:e7:50:44:69:
                    74:d8:74:3f:3a:3f:7e:9d:8b:a0:98:7e:2a:c8:c6:
                    30:b9:33:01:9d:d4:08:d1:50:d3:8c:95:04:03:56:
                    ed:43:e5:a7:3d:81:cc:f9:b6:dc:2c:39:8d:2b:34:
                    ec:eb:e6:9c:6a:a6:64:32:64:a9:85:54:0c:ef:16:
                    e9:8b:4d:4c:59:6c:75:6a:88:43:f5:2a:10:e0:3d:
                    c1:56:0b:b2:44:16:e7:8a:07:40:09:24:18:e8:4a:
                    12:0f:21:d3:67:fe:20:a2:32:da:ee:7d:b3:d9:31:
                    50:fe:83:5b:3c:87:6c:2e:80:d2:85:08:4b:8e:88:
                    93:6b:d2:87:5e:8a:24:b7:91:3a:d2:47:41:52:ad:
                    46:83:9d:77:28:ef:1f:25:ab:4a:30:47:81:22:da:
                    c8:1d:cc:c6:4b:94:ae:86:0f:f8:bd:9d:9b:2e:9c:
                    f7:8c:fb:06:3e:be:66:e3:e2:7a:d0:d0:82:11:10:
                    7e:62:c7:72:17:ae:32:3a:ec:1a:1c:ba:9a:a1:9f:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FC:29:30:8A:71:42:C5:41:91:34:36:D2:8E:0F:0B:6A:86:5F:86
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e34382e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:8d:ac:8f:20:95:8c:51:f5:2e:a6:20:02:f6:ab:72:58:
         b0:22:a6:3d:21:8c:7d:fd:4b:7e:dd:a7:87:2c:34:20:60:22:
         b6:95:b5:f8:40:66:2b:26:89:11:e6:90:7e:da:9b:ba:54:66:
         87:21:94:ac:3c:03:8b:b1:90:22:86:56:58:42:77:4f:1a:0a:
         d7:16:a5:a6:0b:d2:78:52:be:3a:98:c1:15:f1:f6:47:ae:05:
         f7:b0:cf:0d:3b:20:90:96:35:95:da:5d:b2:70:ab:4b:79:2c:
         44:87:41:45:0e:bb:49:18:9e:9f:4d:0b:c1:45:3b:75:17:c1:
         99:78:35:a9:ef:43:f3:3c:87:b3:1d:cb:69:18:a2:76:89:cb:
         f4:c0:4c:04:4e:21:5b:24:85:8e:bf:17:aa:25:e7:ed:fc:68:
         70:04:0f:86:f2:06:e0:f7:d3:6b:bc:40:69:c6:10:df:9d:1c:
         f8:92:89:a3:39:7d:fb:06:d5:31:24:78:b4:05:83:d7:98:e3:
         dd:76:78:a5:46:dc:a9:78:ed:74:14:70:10:51:55:93:a6:10:
         76:42:07:a9:01:af:af:66:37:a7:f1:58:9d:fb:41:7c:88:85:
         35:ec:ab:8b:4d:2d:e3:a0:62:ae:14:bb:81:00:61:52:f2:cb:
         5e:e6:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:29 2026 by rpki-client