Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa
File: 3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa (raw, json)
Hash identifier: 51+0gME+kWYR4n9Zv1GXIzpivNmbXgiaRnHXCoCEIdw=
Subject key identifier: 03:19:A8:78:CF:79:91:E6:82:82:C6:28:A4:4E:A1:9A:64:49:C7:BD
Certificate issuer: /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial: 3782FF45CDA30B284409800BBE4B1B223CBA63AA
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa
Signing time: Sat 07 Dec 2024 21:10:00 +0000
ROA not before: Sat 07 Dec 2024 21:05:00 +0000
ROA not after: Sat 06 Dec 2025 21:10:00 +0000
asID: 265606
IP address blocks: 200.225.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 14:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:82:ff:45:cd:a3:0b:28:44:09:80:0b:be:4b:1b:22:3c:ba:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Validity
Not Before: Dec 7 21:05:00 2024 GMT
Not After : Dec 6 21:10:00 2025 GMT
Subject: CN=0319A878CF7991E68282C628A44EA19A6449C7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:b8:9b:8d:a6:a2:55:ca:32:87:87:fa:c7:
8e:47:bd:1f:9f:9c:5d:a8:38:d0:97:47:01:05:0e:
21:4d:fd:10:c3:2f:a8:77:a4:d2:a7:bb:05:5e:7d:
6b:1c:ba:0f:74:d6:da:62:1d:81:87:f6:1d:75:98:
a5:1f:6c:0c:b2:07:39:af:6a:80:15:85:32:c3:a7:
f1:78:59:4c:fb:36:0b:70:be:5b:b9:48:5b:c5:c4:
e0:8c:4d:65:ee:2a:4b:f9:ef:bb:08:66:ce:0f:d6:
60:84:d4:0e:ce:6d:6b:ad:49:9c:0f:cd:e9:f5:e2:
1d:2c:ce:64:8a:c8:cd:dd:b9:5a:92:5c:72:4e:ba:
85:ed:d3:49:c1:18:e4:c4:2e:7c:5e:d6:66:f1:96:
bd:c9:9e:19:58:5a:91:95:40:5d:38:b4:cb:44:56:
74:71:9a:6b:92:8f:e4:b2:6b:b2:81:14:a7:6c:9f:
1c:17:26:07:01:4b:b5:f5:7b:87:c4:3f:28:8c:72:
90:dd:4a:7f:ef:5e:b4:07:d5:90:14:c3:36:c7:a1:
d9:51:c6:54:83:9b:f6:90:9d:05:52:ee:9d:24:0c:
30:5e:63:24:ef:3e:f9:ea:b3:77:d4:86:87:64:ec:
ce:4d:e6:47:63:7e:48:66:24:3d:35:fe:23:e4:90:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:A8:78:CF:79:91:E6:82:82:C6:28:A4:4E:A1:9A:64:49:C7:BD
X509v3 Authority Key Identifier:
keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.225.60.0/23
Signature Algorithm: sha256WithRSAEncryption
59:06:03:a8:7e:65:e5:d8:f7:ac:1d:b7:3d:49:49:13:8b:f5:
7e:0d:f0:fe:e4:bd:c0:27:54:8e:d7:32:82:80:8d:48:2b:12:
21:a0:98:11:e7:cc:fd:91:52:5a:6c:56:02:96:5e:f6:db:3b:
b1:ca:35:f0:81:50:98:2a:0c:51:0c:ce:6d:6a:83:79:e9:ac:
0f:b7:0f:b4:46:f2:23:57:bc:a6:b9:5a:87:7d:c0:32:eb:71:
a7:fa:54:a1:77:b1:15:e1:03:a9:f6:8d:30:0c:10:3a:18:db:
9e:eb:92:fc:82:f5:ea:46:fc:01:c9:e1:f0:c2:e9:b9:b4:27:
5c:d2:6d:48:ca:33:57:e2:7f:15:09:c9:1c:f4:da:c9:0e:d6:
c9:2d:7f:9c:49:e2:21:d1:db:cc:fa:3b:6d:83:fd:47:cf:0b:
de:e7:86:71:31:14:cf:e5:d3:f3:f5:38:77:76:8c:84:6f:52:
c3:40:b0:9b:73:b8:13:d8:e5:37:b3:10:f6:38:77:39:3e:e5:
37:b4:f0:ec:9c:81:25:dc:3b:c7:57:f7:76:a9:cb:96:33:a0:
e0:aa:5b:86:78:01:bb:ad:52:63:b6:0a:45:b5:2e:18:fe:95:
2b:68:4c:6a:c4:69:06:4e:0f:72:f8:e6:90:74:e8:77:86:0c:
5d:58:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:20:00 2025 by rpki-client