Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa
File: 3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa (raw, json)
Hash identifier: F1xVgce7EzEJjFLYDi93pcV3xy6rzj+QBl3lBXxELwY=
Subject key identifier: F0:39:E9:F3:72:C9:A8:1E:62:5E:6D:87:6C:9A:FD:F5:18:CA:24:4D
Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial: 3C958A9E303D784C434C9D47CA325ABF477EE843
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa
Signing time: Tue 04 Feb 2025 18:02:20 +0000
ROA not before: Tue 04 Feb 2025 17:57:20 +0000
ROA not after: Tue 03 Feb 2026 18:02:20 +0000
asID: 264628
IP address blocks: 190.120.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 06:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:95:8a:9e:30:3d:78:4c:43:4c:9d:47:ca:32:5a:bf:47:7e:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Validity
Not Before: Feb 4 17:57:20 2025 GMT
Not After : Feb 3 18:02:20 2026 GMT
Subject: CN=F039E9F372C9A81E625E6D876C9AFDF518CA244D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:42:10:31:87:04:6c:b2:41:df:2f:e1:87:
3d:f7:fa:b2:77:9e:b0:07:de:3e:d3:5f:d9:5c:7e:
8b:d2:d1:74:8c:37:61:a6:5a:88:72:57:d1:82:c8:
c7:36:f7:61:2d:a5:e4:95:db:bc:39:31:3e:78:8e:
fe:fd:1f:78:26:f4:31:12:78:81:30:1c:03:bf:0a:
fc:fb:73:27:f7:eb:f7:d7:7b:f6:4e:4e:38:5a:97:
af:aa:7d:e9:a3:48:ad:e3:dc:df:35:66:cd:3d:82:
c8:65:fc:99:7c:f3:60:9b:31:5e:27:2d:61:e7:71:
cd:1b:26:c6:5f:0b:5a:8a:62:9b:32:3d:4b:1c:06:
13:bc:f7:d5:b4:1e:f5:ea:fd:5b:0d:c8:d2:09:74:
cc:1b:3e:f5:ae:36:9a:e9:37:81:96:b8:52:d4:72:
85:02:8f:d9:a2:c9:cc:3b:e7:8b:1f:9b:22:45:0c:
4a:ae:46:ea:98:fd:9c:89:e1:d6:63:1a:e6:4a:01:
16:61:40:f8:89:a7:16:a1:2d:bb:87:f0:cf:df:c3:
75:ac:bc:55:5d:a4:d7:36:df:6e:f7:e7:f6:e8:37:
d3:22:81:54:cf:55:4b:ba:7c:2e:46:9c:bc:5a:e5:
e0:8a:9e:78:c0:8f:6e:0b:42:ba:53:4f:c6:47:b6:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:E9:F3:72:C9:A8:1E:62:5E:6D:87:6C:9A:FD:F5:18:CA:24:4D
X509v3 Authority Key Identifier:
keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:e0:19:08:35:c6:97:da:92:a4:d6:c8:5f:25:7c:ba:37:c3:
b5:5b:ed:62:fa:13:91:b4:14:ce:6b:46:85:c3:b8:4d:fb:23:
9d:a3:33:84:bf:8e:cf:91:59:b1:bb:3e:65:48:c5:d0:1e:8f:
37:c3:20:a2:3e:f9:4a:f3:62:52:a4:e1:2f:f7:80:df:e9:9b:
8d:5e:ce:37:40:dc:58:f3:86:82:c3:8c:32:ca:d3:9c:6e:07:
80:ec:a9:e5:0d:60:d1:6e:b5:af:1a:6a:4c:c1:59:c9:52:4b:
4b:a5:75:fb:f1:60:2c:7a:83:9e:47:e0:ce:0b:ed:47:cf:a4:
fe:a6:2b:58:8f:35:70:cd:62:e4:11:bf:3a:f7:2a:61:9d:94:
d1:c8:69:96:12:85:8b:c5:75:80:91:b0:ae:78:92:34:b9:ce:
7f:5d:2f:42:3d:30:89:89:84:13:66:ba:d9:b1:35:6b:61:a1:
ae:79:8b:5a:8b:f6:82:f1:59:ae:e3:4a:13:dc:1f:10:6a:fa:
3e:b9:d5:b5:07:af:a9:c4:76:41:67:9a:19:93:2d:e6:a6:75:
3f:73:23:80:f6:e7:2a:5a:a8:78:41:83:a4:53:34:5c:d5:c8:
41:32:9e:f0:61:35:d7:56:d6:b7:43:e8:fb:90:18:c7:1a:e4:
20:a1:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:57:45 2025 by rpki-client