Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230312e3233362e3132382e302f31382d3234203d3e203135333131.roa
File: 3230312e3233362e3132382e302f31382d3234203d3e203135333131.roa (raw, json)
Hash identifier: Vc7udlfZWD/XdSk3cv6BIjVYfcw1+QS3y7rzjBoUyik=
Subject key identifier: 36:52:D7:EA:CC:4D:CF:40:9F:88:47:07:DB:1E:DC:69:B9:AE:38:AF
Certificate issuer: /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial: 45C8E482D29383F69376856390D8EECB72565003
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230312e3233362e3132382e302f31382d3234203d3e203135333131.roa
Signing time: Tue 04 Feb 2025 20:01:01 +0000
ROA not before: Tue 04 Feb 2025 19:56:01 +0000
ROA not after: Tue 03 Feb 2026 20:01:01 +0000
asID: 15311
IP address blocks: 201.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c8:e4:82:d2:93:83:f6:93:76:85:63:90:d8:ee:cb:72:56:50:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Validity
Not Before: Feb 4 19:56:01 2025 GMT
Not After : Feb 3 20:01:01 2026 GMT
Subject: CN=3652D7EACC4DCF409F884707DB1EDC69B9AE38AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:b0:2d:70:04:b6:66:52:30:d9:b2:dd:ef:
eb:30:6d:47:a2:24:4a:c5:98:24:16:47:aa:65:46:
4b:b4:10:bd:e8:22:06:aa:11:17:17:03:fe:d9:d2:
cb:0a:3d:d0:05:0c:86:59:bf:1b:0c:09:72:4b:82:
cb:0a:02:fc:6a:97:16:0e:d0:3e:c3:a3:8e:95:ff:
bc:dc:02:c9:61:7b:19:c2:bb:da:62:b3:aa:ca:11:
cb:dc:d2:85:ad:26:9d:72:a6:24:4f:be:85:b0:bc:
3f:80:3c:c3:84:fd:e9:86:64:95:fb:29:5a:93:de:
e7:ee:d0:86:58:03:e2:1f:cd:18:66:37:44:37:40:
d7:79:61:ad:6d:5a:56:93:ac:b0:c6:19:dd:12:2c:
d2:61:1f:dd:b6:45:58:18:ac:7f:80:19:e8:8c:28:
bc:0f:dd:7f:3c:5c:61:30:3e:fb:1b:25:c4:9b:df:
6a:b1:09:f3:42:42:2e:db:81:a0:8a:35:1a:0b:db:
bd:ee:8f:1a:53:1c:46:a1:79:bf:ae:c1:33:b3:d2:
39:3a:c8:10:ed:89:26:90:de:b6:24:f7:b8:4b:98:
18:c1:55:4a:d6:a4:f1:3d:d2:fd:80:f3:97:82:8b:
26:60:bd:cf:b0:a7:bb:9f:35:2f:ad:5a:9c:76:a1:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:52:D7:EA:CC:4D:CF:40:9F:88:47:07:DB:1E:DC:69:B9:AE:38:AF
X509v3 Authority Key Identifier:
keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230312e3233362e3132382e302f31382d3234203d3e203135333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:2d:fa:35:be:a6:16:25:8e:4b:56:46:6d:b8:5f:59:6c:cc:
64:d6:5a:12:00:8a:72:54:a7:73:89:41:80:ed:36:f6:06:d1:
55:a4:9c:c6:02:24:14:a7:39:da:9a:1a:2f:31:eb:de:a5:04:
28:c3:3d:89:da:28:f4:dc:e1:5a:51:b5:4b:de:f1:9d:ac:66:
a5:d4:6a:9b:bb:79:a9:f0:18:62:4f:8c:75:a7:a2:1b:0b:c8:
97:d6:01:3f:87:a9:17:58:30:ee:77:57:ad:17:38:4a:cb:28:
33:ea:3a:3a:e9:34:45:73:37:52:d2:c3:8d:3b:d7:8c:5c:c8:
68:ad:1b:bb:99:2c:81:70:4b:31:45:24:11:e5:7a:4d:10:69:
dd:c1:b0:3b:4c:59:44:85:c8:bc:42:bf:1f:a8:61:1b:0a:f2:
07:3a:a8:08:52:06:64:cd:d5:4d:18:51:e5:28:40:10:ca:60:
8f:13:7d:fb:8f:f0:7e:02:45:0d:ec:40:31:c1:65:cd:88:59:
1e:64:0f:16:c7:75:a4:79:30:8d:df:12:a8:b0:7f:99:ff:c2:
e3:c8:75:1d:e7:16:b0:83:4d:e8:b8:2f:62:21:b0:36:5e:9a:
b3:62:d5:c6:cb:e1:73:0e:3b:fd:eb:d7:a1:ce:c5:a5:22:c1:
af:26:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:28:58 2025 by rpki-client