Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3133362e302f32322d3234203d3e2036343239.roa
File: 3139302e35342e3133362e302f32322d3234203d3e2036343239.roa (raw, json)
Hash identifier: 0zLZiM5B/hEeaay+dI0xrtC7l8/hIpVQE46FiFhFQYs=
Subject key identifier: E5:9F:1D:05:B2:67:EF:DB:0B:4F:6B:BE:F3:62:8D:D6:BD:12:33:10
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 35E267592B0E0C74DA13DE9A262771DB3BB9CCF9
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3133362e302f32322d3234203d3e2036343239.roa
Signing time: Tue 04 Feb 2025 20:03:29 +0000
ROA not before: Tue 04 Feb 2025 19:58:29 +0000
ROA not after: Tue 03 Feb 2026 20:03:29 +0000
asID: 6429
IP address blocks: 190.54.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 17:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e2:67:59:2b:0e:0c:74:da:13:de:9a:26:27:71:db:3b:b9:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Feb 4 19:58:29 2025 GMT
Not After : Feb 3 20:03:29 2026 GMT
Subject: CN=E59F1D05B267EFDB0B4F6BBEF3628DD6BD123310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:8d:f2:14:db:d1:40:e2:a4:56:8b:d1:be:
43:1b:70:33:2e:04:28:40:e6:88:0e:13:f0:86:db:
eb:9c:ad:a4:e6:f6:2b:a2:01:eb:b6:e7:3d:65:83:
0b:50:4a:0c:a1:23:a1:38:24:c9:c1:ec:53:1d:f1:
ed:e2:6b:49:99:46:6f:55:cf:18:54:57:67:f8:c7:
8c:97:45:dd:d3:2d:0f:1e:fa:b5:71:3f:72:04:95:
2b:aa:6c:f8:91:60:f2:d4:19:aa:ba:15:d6:84:51:
b6:13:01:6c:52:29:d9:88:d0:1b:69:cd:6c:61:ef:
10:13:f8:ae:b7:d0:7a:f1:e0:f7:9b:02:55:43:cf:
a4:b0:d4:54:8b:da:ce:dc:14:7c:bd:b1:89:99:45:
5a:38:01:e5:75:24:4a:61:46:55:2f:30:a4:e8:4b:
7e:a9:a3:fe:6e:50:7a:d4:97:a3:73:65:a1:6f:f7:
49:2a:43:90:64:df:19:75:c2:f3:04:83:a0:7a:39:
a2:dc:c6:b9:e4:c8:0d:c2:af:43:b3:69:d2:f5:d3:
13:25:f4:07:55:21:ab:a3:a1:57:bc:37:31:63:ff:
ea:b5:05:2f:c2:f0:0e:23:9e:91:7b:e7:42:f2:a3:
8b:d2:1d:0f:0b:43:2d:a3:01:bd:e8:65:54:2c:90:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:1D:05:B2:67:EF:DB:0B:4F:6B:BE:F3:62:8D:D6:BD:12:33:10
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3133362e302f32322d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.136.0/22
Signature Algorithm: sha256WithRSAEncryption
23:2a:61:34:fc:7f:32:51:05:d1:3a:7c:bd:88:44:75:c0:51:
1d:53:1a:94:02:ba:4f:bc:5e:24:a1:d1:e7:74:06:10:80:f0:
b2:05:80:46:0e:a4:01:be:a3:2a:2a:b9:e7:c4:24:0f:24:52:
ae:f1:67:a2:89:41:2a:f5:af:56:be:61:c3:09:ef:88:46:06:
1f:d9:af:79:d5:93:44:4d:f6:cf:d3:3c:ac:38:4c:87:54:4f:
9d:4c:1f:4b:ac:f7:af:41:e6:13:e8:9f:fd:d5:6c:31:a7:5f:
4c:e2:56:7f:d7:7f:0e:09:51:fa:31:81:b0:af:b3:50:70:d1:
51:e7:3c:6a:9d:fb:56:b9:68:22:c3:5c:ad:8b:6e:a8:a7:78:
80:98:44:68:5d:26:a1:16:79:51:52:35:07:91:bb:d5:8d:7f:
39:8b:36:7a:4f:ea:71:97:9f:81:be:b5:82:a7:f4:ba:cc:59:
4b:46:44:66:29:2d:a3:a1:b0:a5:d3:17:7a:b7:77:61:2c:ab:
d4:eb:e6:32:ab:2b:ac:47:c4:63:86:95:f0:88:9f:40:70:4e:
29:ba:5e:64:8d:32:96:91:74:9e:c7:8f:98:4a:18:f2:56:da:
bf:72:dd:e2:8f:9a:78:10:85:91:c1:23:a1:b6:c4:c2:1d:5c:
1b:25:a4:0d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNeJnWSsODHTaE96aJidx2zu5zPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNTAyMDQxOTU4MjlaFw0yNjAyMDMyMDAzMjlaMDMxMTAvBgNV
BAMTKEU1OUYxRDA1QjI2N0VGREIwQjRGNkJCRUYzNjI4REQ2QkQxMjMzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRo3yFNvRQOKkVovRvkMbcDMu
BChA5ogOE/CG2+ucraTm9iuiAeu25z1lgwtQSgyhI6E4JMnB7FMd8e3ia0mZRm9V
zxhUV2f4x4yXRd3TLQ8e+rVxP3IElSuqbPiRYPLUGaq6FdaEUbYTAWxSKdmI0Btp
zWxh7xAT+K630Hrx4PebAlVDz6Sw1FSL2s7cFHy9sYmZRVo4AeV1JEphRlUvMKTo
S36po/5uUHrUl6NzZaFv90kqQ5Bk3xl1wvMEg6B6OaLcxrnkyA3Cr0OzadL10xMl
9AdVIaujoVe8NzFj/+q1BS/C8A4jnpF750Lyo4vSHQ8LQy2jAb3oZVQskE+3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5Z8dBbJn79sLT2u+82KN1r0SMxAwHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+NogwDQYJ
KoZIhvcNAQELBQADggEBACMqYTT8fzJRBdE6fL2IRHXAUR1TGpQCuk+8XiSh0ed0
BhCA8LIFgEYOpAG+oyoquefEJA8kUq7xZ6KJQSr1r1a+YcMJ74hGBh/Zr3nVk0RN
9s/TPKw4TIdUT51MH0us969B5hPon/3VbDGnX0ziVn/Xfw4JUfoxgbCvs1Bw0VHn
PGqd+1a5aCLDXK2LbqineICYRGhdJqEWeVFSNQeRu9WNfzmLNnpP6nGXn4G+tYKn
9LrMWUtGRGYpLaOhsKXTF3q3d2Esq9Tr5jKrK6xHxGOGlfCIn0BwTim6XmSNMpaR
dJ7Hj5hKGPJW2r9y3eKPmngQhZHBI6G2xMIdXBslpA0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:39 2025 by rpki-client