Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138362e302f32342d3234203d3e203236363139.roa
File: 3139302e39302e3138362e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier: WZhAiOt9RSuYYIALuLUgHC0ewzOXOk0sCFGoHPTqskc=
Subject key identifier: 49:6D:E3:1B:97:2B:5B:F4:7C:B7:8A:1C:8A:E7:40:E4:12:89:B6:42
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 58ECE113A48615364339DE1CCDF123DD93C06C25
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138362e302f32342d3234203d3e203236363139.roa
Signing time: Tue 04 Feb 2025 18:17:18 +0000
ROA not before: Tue 04 Feb 2025 18:12:18 +0000
ROA not after: Tue 03 Feb 2026 18:17:18 +0000
asID: 26619
IP address blocks: 190.90.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 01 May 2025 04:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ec:e1:13:a4:86:15:36:43:39:de:1c:cd:f1:23:dd:93:c0:6c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:18 2025 GMT
Not After : Feb 3 18:17:18 2026 GMT
Subject: CN=496DE31B972B5BF47CB78A1C8AE740E41289B642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:38:6b:94:77:dd:a4:01:c8:63:0a:94:2d:
dd:ae:61:32:d4:ef:97:24:e5:4d:40:9e:d1:f0:07:
8d:22:ad:9b:dc:9e:4d:9f:be:5c:2a:34:c4:fa:df:
f5:fd:7f:b9:24:61:02:ab:7b:97:41:af:5f:9a:31:
60:eb:d6:0c:e7:70:c7:e0:0a:c5:e6:31:c7:f5:01:
35:e9:35:22:11:50:d3:68:ff:b6:27:ed:8b:cc:ef:
24:f3:66:9d:e8:e0:55:0e:f5:01:ce:8b:7a:bb:1a:
db:87:80:2c:79:41:d8:57:24:13:a0:67:6e:ff:02:
82:ce:d0:83:b2:d6:f8:9d:81:4d:56:9e:92:5f:6d:
2d:8a:40:22:1d:27:c9:9b:9a:da:48:9e:14:c9:8d:
1a:42:41:32:23:d9:92:52:34:45:1d:95:ff:bf:a6:
15:61:f7:4a:8b:45:7a:9f:66:5e:f6:c2:ba:30:4a:
1c:61:6e:e3:0b:16:f1:73:06:d2:e0:e2:70:5c:c4:
ef:18:09:bb:56:e4:24:64:88:61:9b:26:3f:7b:95:
47:23:5f:ad:27:c7:f3:69:80:df:4f:89:de:22:bb:
b5:9d:1f:f9:14:0e:85:d1:80:2a:54:54:d3:f9:70:
60:4e:c1:bc:fd:9d:f9:1e:36:56:a4:81:b3:0e:25:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:E3:1B:97:2B:5B:F4:7C:B7:8A:1C:8A:E7:40:E4:12:89:B6:42
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138362e302f32342d3234203d3e203236363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6d:11:0b:91:29:92:11:4c:f1:1e:27:89:fe:1a:38:12:b0:
31:19:58:d4:b2:6d:70:4d:1c:79:d3:c5:a8:c9:a2:e3:7a:e1:
a6:01:a6:9f:c4:5c:59:fd:d5:43:50:02:f7:0e:33:26:ae:db:
39:07:32:91:12:52:c5:55:50:9d:14:a2:56:ad:35:d4:e9:26:
4e:f5:a4:1d:cc:bd:1d:97:64:7c:00:07:10:9c:81:05:be:65:
1d:16:a5:27:bb:c7:b5:d7:c9:a1:24:3f:76:f2:6e:42:08:bb:
c2:25:25:48:4c:29:2c:63:a3:47:b6:ed:ff:7e:7b:d1:e6:84:
29:6b:76:4e:61:68:56:a5:a7:fe:f3:69:93:c1:a4:c3:b4:09:
77:f7:50:01:03:17:9c:b0:52:0a:35:b8:cf:6b:0f:47:b8:93:
28:9b:d0:15:f5:b0:e0:d6:6c:12:38:7e:9f:aa:80:40:fa:de:
78:8f:08:5f:a8:3d:b6:88:3b:9a:8e:bf:20:15:d8:ee:47:fe:
04:c8:29:3f:d0:57:bb:a5:e2:64:c8:ca:e7:cc:44:30:ed:36:
53:c2:7e:87:93:3d:ac:3e:2b:8b:69:e5:ac:7e:cf:4f:6a:6c:
dd:a6:14:85:07:d0:a4:0a:b7:39:37:0b:3d:44:cf:67:57:5a:
f3:04:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:55:33 2025 by rpki-client