Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3131322e302f32332d3234203d3e20323633313733.roa
File: 3139302e35342e3131322e302f32332d3234203d3e20323633313733.roa (raw, json)
Hash identifier: 6bZIIwLAunRQ4STvReqy3ip5ASnjJ92SpJdz+hmrprc=
Subject key identifier: E2:44:3F:4D:A0:9A:65:54:45:27:5B:05:6B:D9:9B:4C:CB:77:3C:52
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 64A2A7C06E9EA0BDB5F38DCAF40B5122365DE159
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3131322e302f32332d3234203d3e20323633313733.roa
Signing time: Tue 04 Feb 2025 20:03:28 +0000
ROA not before: Tue 04 Feb 2025 19:58:28 +0000
ROA not after: Tue 03 Feb 2026 20:03:28 +0000
asID: 263173
IP address blocks: 190.54.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 17:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a2:a7:c0:6e:9e:a0:bd:b5:f3:8d:ca:f4:0b:51:22:36:5d:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Feb 4 19:58:28 2025 GMT
Not After : Feb 3 20:03:28 2026 GMT
Subject: CN=E2443F4DA09A655445275B056BD99B4CCB773C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:46:90:00:da:e4:eb:43:f1:f5:bf:36:d2:
03:23:b8:2a:8f:d5:18:db:4c:b0:bb:06:36:c1:f7:
89:9d:8d:ba:97:48:c2:7b:ae:89:94:0f:d8:4b:d8:
10:96:54:c4:03:e8:d7:18:20:df:ab:9a:48:4c:01:
f9:81:ec:11:b9:3f:30:50:68:d1:c7:10:cd:7b:77:
4a:39:3d:5f:5c:55:8f:e1:2a:95:9f:99:a1:c1:64:
ae:07:c5:98:0c:3b:06:3e:6a:78:ba:80:98:f0:46:
83:18:d4:66:ab:e2:e9:86:ee:b3:60:05:65:8a:f0:
25:d1:30:27:f2:b2:3a:30:2f:b8:4c:d2:0e:29:e8:
09:cc:2e:37:20:91:07:22:a4:6f:ba:d1:45:a0:66:
9e:05:f0:bc:f1:ed:11:32:96:20:f2:0d:9e:91:84:
39:6c:08:71:5d:29:7a:55:c6:2c:fe:9a:23:af:26:
36:74:17:31:dc:d8:6f:45:98:2f:79:c4:46:49:d4:
ab:a4:a7:83:10:25:d0:76:11:f7:30:5a:27:96:8e:
dc:46:46:eb:c5:22:6a:0d:61:cd:27:54:57:84:7d:
36:b6:3a:6c:b7:73:78:77:91:71:f2:11:9d:ba:9b:
e6:b9:19:d8:77:aa:f3:b6:d7:87:e2:cb:b8:7c:95:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:3F:4D:A0:9A:65:54:45:27:5B:05:6B:D9:9B:4C:CB:77:3C:52
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3131322e302f32332d3234203d3e20323633313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.112.0/23
Signature Algorithm: sha256WithRSAEncryption
68:6b:fb:73:7d:b5:00:47:fa:b1:77:9d:7b:26:00:3a:ad:ea:
aa:5e:a5:03:fe:6a:75:ec:aa:6c:51:4a:87:aa:99:74:34:19:
1b:65:d1:d9:75:83:2d:e0:f1:57:aa:1b:21:f3:9d:e2:1f:79:
17:c2:92:92:60:6a:dd:13:fa:c8:87:ff:a9:fb:62:28:71:cf:
8b:0e:50:8b:94:3e:29:d2:95:87:e3:de:05:8c:1b:bd:22:cb:
dc:bf:a6:ac:3f:93:8a:6c:6e:7a:4c:07:fc:8d:77:96:7c:25:
86:c8:49:78:e9:25:5d:a9:4b:b5:48:d3:01:de:c6:9e:46:1a:
3c:fb:1c:f1:2f:8e:c1:b7:9d:b9:0e:2d:fc:f8:82:a2:39:2d:
90:8c:c6:97:39:88:16:eb:55:77:5c:6f:14:e8:99:1a:80:4c:
21:97:63:fc:09:7a:63:e9:40:4d:f4:9b:48:4e:29:f5:c4:ff:
99:90:83:26:d3:67:cd:bb:6f:bb:9f:5f:f1:7a:e4:f5:81:29:
1e:8f:96:0b:21:80:18:82:c2:b2:5c:66:cf:0c:35:67:36:b3:
23:a3:c1:3d:92:24:94:7c:de:a6:4c:bc:b5:b1:4f:6a:17:92:
54:b7:a1:ca:e8:63:10:7c:f3:f8:28:fc:19:a1:45:d4:3e:31:
3b:9a:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:40 2025 by rpki-client