Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32322d3232203d3e20323636363533.roa
File: 34352e3232372e39322e302f32322d3232203d3e20323636363533.roa (raw, json)
Hash identifier: /yTdZlxCznAvq1mx3AYNgRRVy0A987oOnA4zteaJNxM=
Subject key identifier: 2E:C6:21:68:05:10:63:8A:53:80:83:00:BC:32:F4:CF:C9:F1:D3:B7
Certificate issuer: /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial: 0933BABB312AAB31C2861D17C449CD0B0004A56D
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32322d3232203d3e20323636363533.roa
Signing time: Fri 28 Feb 2025 15:35:00 +0000
ROA not before: Fri 28 Feb 2025 15:30:00 +0000
ROA not after: Fri 27 Feb 2026 15:35:00 +0000
asID: 266653
IP address blocks: 45.227.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Apr 2025 16:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:33:ba:bb:31:2a:ab:31:c2:86:1d:17:c4:49:cd:0b:00:04:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Validity
Not Before: Feb 28 15:30:00 2025 GMT
Not After : Feb 27 15:35:00 2026 GMT
Subject: CN=2EC621680510638A53808300BC32F4CFC9F1D3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:12:84:ad:18:1c:2b:5d:c6:1e:71:a1:ed:
8e:c3:cc:0e:1b:bf:69:a8:02:4f:6f:36:8d:77:1e:
b4:76:9c:df:19:23:bc:60:91:ba:0e:1c:8a:05:b3:
0e:a6:ba:e4:21:43:61:5e:f7:77:12:71:63:a8:55:
72:07:ff:99:44:31:5f:b8:9b:46:c6:39:be:e3:be:
4d:ad:3d:20:05:d3:b0:9a:32:a7:f4:ee:5d:ba:b5:
64:63:80:43:d0:d7:72:ad:e0:bd:eb:87:70:44:aa:
46:84:6e:d4:8c:74:10:c4:35:ba:93:fe:27:aa:b5:
7e:7d:00:ae:0c:ef:78:84:b6:a8:ab:7f:76:7b:31:
73:a5:5c:5b:0e:82:d4:a8:5e:ca:a3:8e:a3:ce:42:
44:cd:9b:cc:6e:7a:e6:ee:50:51:40:82:41:12:68:
22:c6:8a:83:74:ee:fa:b2:5a:b7:88:e8:b4:dc:7a:
e4:e8:14:19:4e:8f:3a:cd:60:d0:81:5e:ed:b4:35:
cf:dc:d8:df:fb:77:da:e6:5f:51:03:10:94:13:37:
a8:57:a2:59:47:38:95:1b:f9:de:8b:c5:26:1b:6a:
c1:d2:b2:d0:bb:59:8a:a1:49:f7:a8:de:8e:bd:8c:
a7:58:31:5a:15:a1:15:e9:db:43:58:52:c9:54:8a:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:21:68:05:10:63:8A:53:80:83:00:BC:32:F4:CF:C9:F1:D3:B7
X509v3 Authority Key Identifier:
keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32322d3232203d3e20323636363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.92.0/22
Signature Algorithm: sha256WithRSAEncryption
82:94:a6:9d:2d:84:22:4a:f4:a2:eb:64:60:d6:03:16:9a:20:
b9:b3:d7:18:81:18:0d:5d:d2:34:0b:ef:fc:f1:c2:1a:ed:7a:
e9:a5:65:56:a1:10:20:23:65:6a:e3:57:9b:f7:9e:4f:3e:eb:
b9:7f:b5:b9:11:ec:b8:b8:d8:e6:33:10:d0:ec:02:34:47:3f:
b4:9c:70:f5:dc:1e:a0:ea:d0:e7:5a:20:3c:21:31:8b:69:32:
90:21:c7:71:4d:44:23:90:72:62:3f:8b:48:5c:8f:38:23:01:
9d:a7:2c:14:5d:c6:d8:fb:4a:73:5a:98:1c:58:e0:97:e3:0a:
62:46:30:35:09:84:3f:a6:6a:dc:fb:e5:cb:8f:03:51:a8:d1:
f1:36:92:bb:ac:4d:58:60:e8:47:40:57:06:b1:b7:d5:e9:2e:
de:44:3e:68:36:07:0e:d7:d3:67:a3:4e:9a:61:e7:f6:f5:7d:
83:85:7f:2b:f5:9a:cb:69:75:25:63:b9:d7:02:68:3f:02:52:
64:d7:18:3e:6a:65:32:3d:4d:7e:62:2e:0c:cc:65:12:7b:80:
2f:b9:e8:a9:a8:44:6c:79:46:ab:f7:41:b1:e4:ff:2f:8c:56:
80:0d:8e:3b:8e:60:8e:9e:0e:04:ca:81:74:2b:ba:1f:2e:cc:
d0:09:c6:9e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCTO6uzEqqzHChh0XxEnNCwAEpW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZCQTUxMDZFNzBEOTFFMzg2MUI1Mzk1QjJEMTU2QzU2
RTk1ODlFNDAeFw0yNTAyMjgxNTMwMDBaFw0yNjAyMjcxNTM1MDBaMDMxMTAvBgNV
BAMTKDJFQzYyMTY4MDUxMDYzOEE1MzgwODMwMEJDMzJGNENGQzlGMUQzQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIBKErRgcK13GHnGh7Y7DzA4b
v2moAk9vNo13HrR2nN8ZI7xgkboOHIoFsw6muuQhQ2Fe93cScWOoVXIH/5lEMV+4
m0bGOb7jvk2tPSAF07CaMqf07l26tWRjgEPQ13Kt4L3rh3BEqkaEbtSMdBDENbqT
/ieqtX59AK4M73iEtqirf3Z7MXOlXFsOgtSoXsqjjqPOQkTNm8xueubuUFFAgkES
aCLGioN07vqyWreI6LTceuToFBlOjzrNYNCBXu20Nc/c2N/7d9rmX1EDEJQTN6hX
ollHOJUb+d6LxSYbasHSstC7WYqhSfeo3o69jKdYMVoVoRXp20NYUslUioFtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULsYhaAUQY4pTgIMAvDL0z8nx07cwHwYDVR0j
BBgwFoAU/7pRBucNkeOGG1OVstFWxW6VieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRkZDQTc2NzYzOEE0REQzOUM2QTZEN0UyQkEzOTc3MkNE
QTI5NkRFRTZCRjM2QTMzM0M3RkRDRTg5RDdGMjI1LzAvRkZCQTUxMDZFNzBEOTFF
Mzg2MUI1Mzk1QjJEMTU2QzU2RTk1ODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkJBNTEwNkU3MEQ5MUUzODYx
QjUzOTVCMkQxNTZDNTZFOTU4OUU0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEZGQ0E3Njc2MzhBNEREMzlDNkE2RDdFMkJBMzk3NzJDREEyOTZERUU2
QkYzNkEzMzNDN0ZEQ0U4OUQ3RjIyNS8wLzM0MzUyZTMyMzIzNzJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3jXDAN
BgkqhkiG9w0BAQsFAAOCAQEAgpSmnS2EIkr0outkYNYDFpogubPXGIEYDV3SNAvv
/PHCGu166aVlVqEQICNlauNXm/eeTz7ruX+1uRHsuLjY5jMQ0OwCNEc/tJxw9dwe
oOrQ51ogPCExi2kykCHHcU1EI5ByYj+LSFyPOCMBnacsFF3G2PtKc1qYHFjgl+MK
YkYwNQmEP6Zq3Pvly48DUajR8TaSu6xNWGDoR0BXBrG31eku3kQ+aDYHDtfTZ6NO
mmHn9vV9g4V/K/Way2l1JWO51wJoPwJSZNcYPmplMj1NfmIuDMxlEnuAL7noqahE
bHlGq/dBseT/L4xWgA2OO45gjp4OBMqBdCu6Hy7M0AnGng==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:37:48 2025 by rpki-client