Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e39362e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e39362e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          J6FCW0bx8DNx08VsAAXJWR/Kcp0Aa6ZTbKomXK74Y0s=
Subject key identifier:   AB:59:C2:B7:5F:8A:C1:4A:A6:2F:30:A3:21:25:B9:52:B3:E2:34:5A
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       59F97EBB60796D92957CAAB08C71BD0FA98ED6E6
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e39362e302f32302d3230203d3e2036333036.roa
Signing time:             Fri 24 Jul 2026 10:05:01 +0000
ROA not before:           Fri 24 Jul 2026 10:00:01 +0000
ROA not after:            Fri 23 Jul 2027 10:05:01 +0000
asID:                     6306
IP address blocks:        186.165.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:7e:bb:60:79:6d:92:95:7c:aa:b0:8c:71:bd:0f:a9:8e:d6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jul 24 10:00:01 2026 GMT
            Not After : Jul 23 10:05:01 2027 GMT
        Subject: CN=AB59C2B75F8AC14AA62F30A32125B952B3E2345A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:eb:03:cf:f1:a7:3f:af:8c:bf:0e:f6:64:
                    cd:be:c8:b6:38:61:08:67:2c:88:91:2b:c8:df:e0:
                    9c:8d:f2:fc:df:e9:ec:b3:ad:95:c9:3e:ae:2c:4c:
                    1a:94:12:0d:8f:51:b0:da:f9:5f:5d:a1:ca:1c:1b:
                    c2:3d:a4:1c:16:4a:78:24:5e:a6:60:3f:ef:d7:54:
                    c0:3d:17:67:f3:ff:d2:fd:05:57:f4:74:67:97:72:
                    96:80:0d:98:e6:1c:30:b7:e1:a6:84:12:b4:23:4c:
                    29:08:d6:61:36:de:a8:be:ee:60:e3:ef:62:15:e8:
                    af:5e:f3:99:f5:f1:77:8a:9e:a6:a8:83:87:d1:de:
                    87:a4:d6:e1:6b:bb:94:75:13:2e:38:65:56:49:b3:
                    71:d3:60:ab:e1:26:df:5b:ba:91:7e:33:18:11:4e:
                    98:c0:67:38:f7:0d:e6:a0:cc:cc:ad:c3:eb:5a:24:
                    76:a8:46:1d:d9:e4:12:9f:72:d9:dd:23:00:a8:d0:
                    21:44:5b:d4:73:5a:4e:85:2d:49:06:7e:bc:48:1c:
                    ea:e9:71:d6:4e:e3:c5:dd:ab:53:76:3c:00:3f:92:
                    e3:59:ee:a6:39:91:81:61:2f:5f:97:86:2f:6b:08:
                    19:38:79:19:72:ca:7a:27:96:f8:22:54:a7:b8:22:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:C2:B7:5F:8A:C1:4A:A6:2F:30:A3:21:25:B9:52:B3:E2:34:5A
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e39362e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:bf:1c:51:6e:65:27:eb:6d:f8:d4:21:a4:b8:8c:84:14:
         36:a3:4b:0f:f8:6b:fc:e4:6d:c9:99:ea:ef:87:b3:87:be:6d:
         1c:1d:48:82:fd:2c:28:a1:a5:dd:a3:d5:0a:81:14:a9:6a:ca:
         af:20:f8:3f:ac:07:39:a2:c7:9b:e4:bd:76:8a:e9:87:1d:95:
         85:f8:ff:a1:4b:cc:9b:bb:fd:8a:1f:f6:e8:23:87:19:14:83:
         15:9d:46:4a:aa:58:44:86:45:d2:ff:10:b3:0c:c2:97:f1:ae:
         ac:58:7b:1e:e8:75:f3:32:fb:48:ad:3d:0c:a0:42:71:84:a8:
         85:01:f9:7c:43:aa:c9:e5:71:77:8d:57:e1:58:5d:c6:2c:aa:
         57:57:c1:02:b1:e9:84:6b:f2:4e:d0:87:a1:da:23:37:e7:93:
         b8:2e:bd:91:eb:e1:b2:54:2f:45:22:2c:60:59:57:cb:46:7b:
         76:e5:dd:6e:40:bc:8d:05:9b:62:78:94:8c:6c:d9:bf:45:5a:
         e6:42:f5:ae:db:d1:fc:a1:9e:75:64:d2:bf:3b:20:ee:e9:80:
         7a:d2:bc:ad:bf:2e:51:79:f3:25:64:32:2f:a8:a3:30:36:95:
         37:70:70:7f:75:d6:69:b0:b0:38:b0:02:08:69:89:bd:ce:51:
         66:8c:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:29 2026 by rpki-client