Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa
File: 3230302e35382e3136302e302f31392d3234203d3e203235363230.roa (raw, json)
Hash identifier: s6fB2N78A0/Xaqc+mx12/XAKuo/NGMmpmsZY2BqY+ik=
Subject key identifier: BA:19:27:F1:EC:DD:85:C1:07:86:53:BF:BF:6C:C8:17:7C:CD:2F:91
Certificate issuer: /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial: 43E48F1C0C7978781D270653702B617DA78D21B7
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa
Signing time: Tue 04 Feb 2025 18:28:02 +0000
ROA not before: Tue 04 Feb 2025 18:23:02 +0000
ROA not after: Tue 03 Feb 2026 18:28:02 +0000
asID: 25620
IP address blocks: 200.58.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 14:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e4:8f:1c:0c:79:78:78:1d:27:06:53:70:2b:61:7d:a7:8d:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Validity
Not Before: Feb 4 18:23:02 2025 GMT
Not After : Feb 3 18:28:02 2026 GMT
Subject: CN=BA1927F1ECDD85C1078653BFBF6CC8177CCD2F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:5f:15:86:c8:c0:d1:8a:bd:b8:0b:6a:18:
99:47:71:39:29:6f:a9:cb:fc:ce:96:38:ac:d6:94:
a6:6a:1c:ac:0c:6a:f7:35:71:e4:e1:ef:16:e5:eb:
d1:96:8e:9f:0f:b0:7a:1c:98:e5:a4:71:8e:21:64:
8d:06:2d:04:aa:df:97:2d:8e:cb:bd:39:86:c4:3d:
0f:d6:7d:97:54:91:ea:0d:4d:27:9f:6a:71:43:3d:
f3:62:ab:c1:4a:4e:b3:b4:00:39:81:5a:1c:83:b0:
66:e9:cd:f3:93:65:2a:a2:c4:e0:9e:a0:b8:b3:e9:
91:f8:05:d4:7b:81:b3:06:9a:b7:57:7c:65:4d:4b:
cf:37:28:4c:cb:b0:90:fb:19:ad:26:7e:d3:33:00:
67:7c:f8:01:5c:04:4c:c8:c8:19:6c:e3:bb:60:06:
c8:eb:60:d5:dc:c2:f2:53:5d:7e:33:51:81:32:0a:
28:80:a8:7d:e5:62:c7:b6:1b:10:68:e1:49:ae:20:
45:ad:e0:62:c2:7c:61:c9:ca:59:aa:01:4e:60:c8:
06:a4:4e:06:56:d5:4b:71:8e:13:d9:3f:6d:2d:fa:
9d:13:80:4d:13:82:15:5c:5f:59:f3:49:56:8d:47:
13:7d:46:26:a9:eb:46:4b:09:04:c0:ce:ad:d4:10:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:27:F1:EC:DD:85:C1:07:86:53:BF:BF:6C:C8:17:7C:CD:2F:91
X509v3 Authority Key Identifier:
keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:cb:24:7e:7f:95:66:e6:97:62:ff:fc:72:4f:4d:02:8f:f7:
3f:72:b7:9b:e3:de:4f:64:77:04:98:b4:89:17:f9:09:4f:b8:
83:08:1b:b7:3b:c6:78:fc:62:41:86:e4:38:5c:da:08:6f:a6:
e4:cd:df:6c:e1:2d:e1:ca:e5:d8:c1:a0:99:e6:d6:3f:46:31:
52:56:43:f5:c9:6f:9a:aa:c9:91:23:a2:87:4b:68:60:07:cb:
47:fd:0a:80:82:a4:db:b4:7e:d2:a5:e0:ef:55:dc:48:d7:e8:
9a:bd:36:48:1f:89:09:0e:7d:7f:e3:c9:f0:01:f5:97:f6:0a:
f9:c4:cc:98:0d:43:2e:59:9c:c5:6b:a8:e3:4b:d3:44:df:cd:
63:2e:a5:d7:86:a0:91:22:da:e6:ce:4a:86:cf:81:88:b8:04:
d6:fa:1f:ff:c0:71:ef:7e:c3:fc:a3:7a:80:1e:ae:f0:62:7f:
d2:dc:53:ad:d2:c3:e8:d5:bc:12:8d:29:bd:a6:2e:eb:2c:a9:
fb:17:8f:7e:71:0d:59:7d:ee:1c:a5:41:2c:9a:c6:3d:db:e9:
c0:17:7b:55:f0:c8:9f:81:13:e8:06:15:82:8f:1d:9e:fa:d4:
81:50:48:2d:1d:96:7f:04:0d:d1:fd:d9:1c:05:ae:c2:b8:25:
74:ac:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:28 2025 by rpki-client