Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e36342e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e36342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          5S6zoAhoVonI9M6D9PHnNcRULvy1qmIGF8O39KTFoX4=
Subject key identifier:   D5:49:2E:CC:46:4E:AB:69:61:AA:50:1A:B2:52:A7:18:B9:97:D9:A0
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       20B55E66984ED28FAF9BE8420DE520775F145CF0
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e36342e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:00 +0000
ROA not before:           Fri 24 Jul 2026 10:00:00 +0000
ROA not after:            Fri 23 Jul 2027 10:05:00 +0000
asID:                     6306
IP address blocks:        186.165.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b5:5e:66:98:4e:d2:8f:af:9b:e8:42:0d:e5:20:77:5f:14:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:00 2026 GMT
            Not After : Jul 23 10:05:00 2027 GMT
        Subject: CN=D5492ECC464EAB6961AA501AB252A718B997D9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:b7:32:a9:bd:4b:66:6a:67:7a:06:57:7c:
                    b6:b2:4a:c1:00:9c:9a:87:79:e5:84:f5:de:20:cf:
                    b1:d6:c6:76:6b:88:16:f1:a1:4e:a4:82:1b:b3:75:
                    6e:e6:d9:04:62:72:0f:3a:5d:15:1b:07:60:56:35:
                    6e:4e:5c:7d:f7:d0:0c:a7:79:35:91:b4:15:76:53:
                    59:fc:df:ea:b8:e1:06:3e:a3:f6:90:33:6c:5d:b2:
                    34:23:d6:7e:e2:36:11:22:98:e5:68:0c:3b:ae:80:
                    18:e8:48:d8:35:65:ff:f4:0a:78:b8:26:b5:27:a9:
                    fd:83:8d:6c:56:10:4e:24:f1:d1:44:e7:5f:82:4d:
                    25:76:ae:3d:b8:c5:3f:ab:53:e6:f2:c0:2c:9c:7f:
                    bb:da:4e:43:e6:3b:47:43:7f:c0:41:6c:a5:fd:70:
                    e5:42:1c:f9:3e:19:34:0d:b1:39:26:d3:1f:91:69:
                    7b:e7:ff:dc:21:97:43:c0:dd:c0:de:d5:1c:3e:0e:
                    c3:77:ad:99:6c:59:27:2c:f4:d7:c4:41:61:6e:ed:
                    fd:e0:d1:36:da:f5:1f:2f:7c:61:91:61:c7:9d:a9:
                    fd:89:23:de:32:fa:b2:4c:01:17:2c:70:fb:93:d3:
                    38:d7:a8:8c:0f:b2:ad:b0:9f:17:27:c1:e1:14:55:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:2E:CC:46:4E:AB:69:61:AA:50:1A:B2:52:A7:18:B9:97:D9:A0
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e36342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:0a:ad:cd:ee:00:fb:56:91:4c:2e:43:b4:73:31:94:ab:
         9d:d3:79:e5:4f:ef:51:18:40:52:fc:dd:60:53:6b:03:1d:c6:
         27:90:90:9f:bd:dd:69:2d:e0:46:c0:57:08:00:1d:5e:ee:03:
         15:48:df:24:75:2b:69:50:d7:95:bb:a1:c0:7c:d9:aa:26:c1:
         81:e5:a7:99:4e:2e:d9:de:40:04:c3:d2:93:1c:0c:3a:9b:dd:
         20:cb:e8:8a:cd:68:77:cb:e2:74:90:9d:ad:4b:ee:64:9a:70:
         a3:a0:5f:69:f1:cf:05:48:49:48:c0:0d:26:2a:f5:49:26:4a:
         ce:b8:04:7e:61:29:b3:01:a7:5a:dd:7e:74:c3:03:33:3a:d5:
         c8:5c:0d:5a:7e:ab:95:42:e5:72:ee:e9:b0:2e:68:6e:7a:fc:
         1e:f6:3b:8b:c9:63:da:20:10:07:be:fc:4a:68:1a:1d:f3:fa:
         13:6a:8d:05:b7:f5:c2:fd:e0:5f:2d:ab:88:e4:28:a8:98:bc:
         2d:eb:b4:38:0c:b5:fe:33:27:7f:65:6c:64:40:ac:48:ba:c9:
         d4:7f:5d:45:d6:bc:6d:9c:3d:df:9d:3f:e1:33:f5:df:a9:b0:
         69:75:e4:bf:35:dd:01:65:ed:38:1d:12:69:92:ce:02:b5:b5:
         25:1a:11:c6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUILVeZphO0o+vm+hCDeUgd18UXPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNjA3MjQxMDAwMDBaFw0yNzA3MjMxMDA1MDBaMDMxMTAvBgNV
BAMTKEQ1NDkyRUNDNDY0RUFCNjk2MUFBNTAxQUIyNTJBNzE4Qjk5N0Q5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVrcyqb1LZmpnegZXfLaySsEA
nJqHeeWE9d4gz7HWxnZriBbxoU6kghuzdW7m2QRicg86XRUbB2BWNW5OXH330Ayn
eTWRtBV2U1n83+q44QY+o/aQM2xdsjQj1n7iNhEimOVoDDuugBjoSNg1Zf/0Cni4
JrUnqf2DjWxWEE4k8dFE51+CTSV2rj24xT+rU+bywCycf7vaTkPmO0dDf8BBbKX9
cOVCHPk+GTQNsTkm0x+RaXvn/9whl0PA3cDe1Rw+DsN3rZlsWScs9NfEQWFu7f3g
0Tba9R8vfGGRYcedqf2JI94y+rJMARcscPuT0zjXqIwPsq2wnxcnweEUVdlpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1UkuzEZOq2lhqlAaslKnGLmX2aAwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzNjM1MmUzNjM0MmUz
MDJmMzIzMDJkMzIzMDIwM2QzZTIwMzYzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6pUAwDQYJ
KoZIhvcNAQELBQADggEBAHuHCq3N7gD7VpFMLkO0czGUq53TeeVP71EYQFL83WBT
awMdxieQkJ+93Wkt4EbAVwgAHV7uAxVI3yR1K2lQ15W7ocB82aomwYHlp5lOLtne
QATD0pMcDDqb3SDL6IrNaHfL4nSQna1L7mSacKOgX2nxzwVISUjADSYq9UkmSs64
BH5hKbMBp1rdfnTDAzM61chcDVp+q5VC5XLu6bAuaG56/B72O4vJY9ogEAe+/Epo
Gh3z+hNqjQW39cL94F8tq4jkKKiYvC3rtDgMtf4zJ39lbGRArEi6ydR/XUXWvG2c
Pd+dP+Ez9d+psGl15L813QFl7TgdEmmSzgK1tSUaEcY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:30 2026 by rpki-client