Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139362e302f32322d3232203d3e20323633373434.roa
File: 3137302e38312e3139362e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier: GSaQw3mLs5DsCnfzcVnL9D6oAIS5wCXIP9pra7P+5dc=
Subject key identifier: A0:2D:67:51:53:34:2D:07:AE:29:7D:E9:0A:DE:2B:41:37:23:63:2A
Certificate issuer: /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial: 1088AA1D5FC0036248F5ADA742F9D35EE0D4D8E4
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139362e302f32322d3232203d3e20323633373434.roa
Signing time: Tue 04 Feb 2025 18:13:54 +0000
ROA not before: Tue 04 Feb 2025 18:08:54 +0000
ROA not after: Tue 03 Feb 2026 18:13:54 +0000
asID: 263744
IP address blocks: 170.81.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 13:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:88:aa:1d:5f:c0:03:62:48:f5:ad:a7:42:f9:d3:5e:e0:d4:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
Validity
Not Before: Feb 4 18:08:54 2025 GMT
Not After : Feb 3 18:13:54 2026 GMT
Subject: CN=A02D675153342D07AE297DE90ADE2B413723632A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:2d:66:b4:60:2d:43:c9:8a:89:90:bd:12:
fc:f4:58:ec:0a:93:6e:1a:fd:6a:eb:b7:d1:b8:da:
7d:f3:40:68:93:7d:be:e6:20:ac:66:f2:da:0d:86:
1b:6e:58:93:c0:d7:f4:c2:7c:89:c0:6e:32:87:bd:
4e:ea:e2:5b:5f:cb:e4:e9:42:fb:1c:eb:35:23:42:
a7:35:b8:00:3b:e1:b4:23:56:74:7e:42:d4:71:62:
ee:8e:d1:8e:06:60:ba:fe:32:ba:cf:5f:1c:6e:d3:
72:6c:4b:be:01:e8:9d:d5:2a:9c:ec:bd:6c:96:49:
be:14:47:7b:6b:5b:19:4e:1e:b8:d0:25:c1:8c:cf:
f2:43:02:b3:a3:c1:4d:12:17:1b:79:e2:7c:bb:5f:
a5:58:cc:6a:ca:8b:f0:11:24:52:18:d9:f1:1f:1f:
db:2b:a4:1a:63:99:40:69:8e:52:cb:87:d8:10:e4:
26:d5:c4:18:5b:59:2c:d5:4c:d9:26:1d:2f:84:f0:
4d:7c:26:a1:e7:7d:7d:f9:33:3d:10:b9:82:1d:05:
52:0c:15:1c:f0:b9:91:16:d9:56:b2:88:50:10:79:
69:2c:4d:30:c5:86:cf:c2:ad:07:7f:19:b9:fc:a6:
3f:da:37:a9:99:9c:cd:55:51:af:a0:eb:54:dc:2d:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:67:51:53:34:2D:07:AE:29:7D:E9:0A:DE:2B:41:37:23:63:2A
X509v3 Authority Key Identifier:
keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139362e302f32322d3232203d3e20323633373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:44:02:0f:b8:d1:f2:2c:e4:a1:47:48:89:57:38:6b:dc:79:
60:fc:ee:47:56:28:6f:c8:98:5c:e7:c5:ef:12:6a:ba:ad:75:
19:b4:89:2e:06:3c:21:ed:b0:41:da:ba:04:05:b2:30:07:2c:
fd:05:b6:38:c9:76:34:c1:82:36:e1:6e:4b:8f:52:01:1b:a9:
f2:6c:78:b0:16:32:b1:47:13:b7:50:7e:8e:da:38:df:75:e6:
07:78:a5:48:1c:08:25:73:4b:d3:0b:c6:61:51:39:de:25:f1:
3c:d4:34:79:b3:31:cd:81:be:c1:97:6c:e3:50:c1:98:47:39:
77:9a:03:80:f9:6a:c8:51:37:23:cd:5f:0d:a9:08:fe:1b:f3:
79:60:b2:d1:84:ae:5b:b8:89:1e:24:69:3a:b7:bd:29:65:ba:
66:b0:50:05:15:01:81:dc:e3:11:34:c4:0b:cd:95:5d:91:60:
35:ba:05:b8:1d:82:cb:a6:78:72:e8:67:25:32:e3:27:69:76:
d8:57:83:bb:27:71:58:8e:ad:36:22:03:7f:dd:c3:0a:80:96:
0c:cb:8a:8b:c9:c0:87:ad:e8:2e:cc:14:36:34:62:f5:8f:1b:
58:58:e8:b6:15:09:e1:96:b0:9b:65:c5:e0:ef:14:f0:e6:ba:
8c:02:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:42 2025 by rpki-client