Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e3139362e3233362e302f32322d3232203d3e203532343835.roa
File: 3136382e3139362e3233362e302f32322d3232203d3e203532343835.roa (raw, json)
Hash identifier: D/wCXLeTNnulh2K/MiS4ZxrOyIlWhXcNQHZyit0atXw=
Subject key identifier: 68:9D:32:42:D1:A5:8A:ED:F8:5A:E8:0D:52:25:2B:AC:EE:43:48:0B
Certificate issuer: /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial: 3AB958909303E9F148CF50E4B58F55A7C7EFBA83
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e3139362e3233362e302f32322d3232203d3e203532343835.roa
Signing time: Tue 04 Feb 2025 18:39:56 +0000
ROA not before: Tue 04 Feb 2025 18:34:56 +0000
ROA not after: Tue 03 Feb 2026 18:39:56 +0000
asID: 52485
IP address blocks: 168.196.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 11:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b9:58:90:93:03:e9:f1:48:cf:50:e4:b5:8f:55:a7:c7:ef:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Validity
Not Before: Feb 4 18:34:56 2025 GMT
Not After : Feb 3 18:39:56 2026 GMT
Subject: CN=689D3242D1A58AEDF85AE80D52252BACEE43480B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:26:41:1d:0a:dd:5d:f3:f9:fa:f1:b0:a8:
c0:4e:0c:4f:62:87:12:25:02:d2:fa:28:14:42:bf:
3f:99:8d:00:f6:78:eb:76:a9:bf:57:77:b4:6a:b1:
58:b9:0a:cf:b9:8a:66:47:09:9f:14:82:fd:14:c8:
d3:b3:d0:bc:73:58:af:e1:6c:59:2c:e0:81:01:81:
ac:b0:a0:a9:23:9e:9c:8c:c7:b5:c2:63:41:e4:ec:
02:ba:82:ec:13:3b:77:af:ae:67:3d:8f:3d:68:a4:
e3:a4:ba:14:a7:c9:1f:8d:d7:ab:0e:5a:7f:7a:d9:
c5:b1:06:5b:d7:0d:02:d1:d1:32:fb:53:a8:e9:f5:
d7:b9:e4:b2:08:53:6c:e1:d2:67:7d:9c:e3:56:65:
40:ff:3e:08:d4:67:a0:38:23:f1:82:16:d2:78:8a:
b3:1d:09:19:d0:84:72:a3:49:09:dc:d7:2a:25:20:
a3:4d:be:46:ff:d4:2b:1b:00:71:95:79:61:eb:78:
7a:40:9d:41:fd:6c:53:98:38:78:bf:21:2d:15:38:
88:50:3e:34:41:03:cf:78:a6:e7:43:5f:b3:d3:94:
86:c0:fe:5d:27:c1:93:4f:ad:7b:1f:15:38:5f:93:
97:67:a7:96:86:dd:53:64:6e:a2:8b:72:f8:0e:1a:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:32:42:D1:A5:8A:ED:F8:5A:E8:0D:52:25:2B:AC:EE:43:48:0B
X509v3 Authority Key Identifier:
keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e3139362e3233362e302f32322d3232203d3e203532343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:60:4f:aa:42:02:70:b9:3d:d1:33:37:3a:bd:fd:79:58:2a:
bc:e0:b5:f7:2d:7a:b7:7f:b4:a3:b8:7c:58:34:cf:92:de:ec:
d0:fb:65:92:d9:a9:ce:e1:67:ad:03:1f:a2:91:55:75:5b:38:
11:1d:c0:a8:7a:43:bf:d0:7f:9a:c9:f6:54:cf:62:eb:9a:48:
2a:11:ca:f3:25:58:1e:3f:49:bb:14:66:03:df:02:f4:e5:cc:
21:d2:b8:84:3b:31:21:9d:97:47:e7:e3:01:4e:00:a7:82:7a:
e7:a8:74:79:87:2f:da:ec:34:f7:78:76:ff:5e:e9:98:22:36:
2a:0e:58:28:60:80:85:c4:8a:9a:2d:e5:9b:8b:5d:3f:55:1a:
af:3d:07:1a:a1:bd:18:1c:61:bb:3f:32:14:40:c3:92:6d:2d:
f1:54:54:e0:01:c4:a0:fb:05:91:6c:6b:6d:b9:ad:e6:78:49:
8f:3c:5c:0f:4b:c7:ea:9c:33:27:fe:1c:98:8b:a6:5c:fe:4f:
61:d1:4b:b7:b1:9b:1c:e6:91:43:59:af:a6:2f:9b:93:82:9b:
93:54:6e:03:01:f8:0b:67:12:62:6a:af:00:3e:fc:9d:ea:f0:
ee:d1:2c:71:fe:fc:36:55:ee:11:3d:b6:45:83:39:d4:9f:d3:
da:86:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:57:56 2025 by rpki-client