Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa
File: 3138362e31352e3136302e302f32302d3234203d3e203532323238.roa (raw, json)
Hash identifier: d5/W3U2itxGUesc+fVQexv8VtrFK5o00jCGVwyIYCkY=
Subject key identifier: 06:36:BC:7F:93:21:23:FE:14:92:BE:88:03:93:15:A8:CB:65:19:F2
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 5829887DE9364B0FA22D54589202B37D0CD24144
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa
Signing time: Tue 04 Feb 2025 18:01:48 +0000
ROA not before: Tue 04 Feb 2025 17:56:48 +0000
ROA not after: Tue 03 Feb 2026 18:01:48 +0000
asID: 52228
IP address blocks: 186.15.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 14:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:29:88:7d:e9:36:4b:0f:a2:2d:54:58:92:02:b3:7d:0c:d2:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Feb 4 17:56:48 2025 GMT
Not After : Feb 3 18:01:48 2026 GMT
Subject: CN=0636BC7F932123FE1492BE88039315A8CB6519F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:ab:7d:11:19:c8:f2:42:7a:ce:93:df:71:
68:9a:fe:37:76:e6:41:67:ba:58:ea:55:91:17:e8:
89:1d:68:d0:76:ce:64:25:34:83:d7:38:ff:ca:7d:
e7:98:ed:69:3b:d2:ce:62:e1:9c:c2:a7:42:c6:9a:
60:07:96:fe:9d:e2:75:d5:56:3c:d5:6d:a2:b4:11:
3d:7c:a2:e4:a5:6a:2f:89:0b:3f:12:74:be:00:23:
67:88:9f:92:ea:94:4b:a5:97:a8:7a:22:14:69:e2:
2c:10:39:77:94:61:2d:97:be:6a:52:3a:bb:eb:1f:
ba:e0:41:2f:ae:94:f2:b4:04:63:de:16:42:3d:0c:
c3:67:5a:3d:6d:1d:2e:7a:5d:a9:c1:c5:a6:33:23:
22:bf:77:13:8c:05:f3:6a:2e:99:d0:b7:8c:74:db:
ff:44:c2:93:bc:53:79:4c:c9:de:6d:83:3e:e4:36:
05:8d:ca:c5:3f:20:51:33:ae:b5:ed:6c:ce:28:56:
6e:13:03:b1:9f:bb:6e:86:a1:52:0b:78:a2:0e:55:
e9:19:74:7f:f2:7b:9f:c8:ad:61:97:a6:54:15:a2:
af:b2:ad:9d:6c:a1:04:38:63:e6:38:11:32:fb:cc:
2c:0a:9f:9e:11:b6:8d:59:c3:7a:8f:da:db:ac:ea:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:BC:7F:93:21:23:FE:14:92:BE:88:03:93:15:A8:CB:65:19:F2
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.15.160.0/20
Signature Algorithm: sha256WithRSAEncryption
19:22:7f:a1:cf:20:42:c8:f5:81:ff:95:24:b6:29:32:c6:08:
34:81:23:9d:8c:6a:15:3f:c2:80:3e:73:95:05:c8:4c:e4:e0:
a2:69:e9:cf:1a:5a:5f:9a:5c:57:24:ea:31:ba:98:cc:ac:c5:
90:f4:dd:fa:72:69:d5:ba:d3:06:5d:33:1a:2f:d2:4b:f0:a9:
bb:46:e2:cf:5e:2a:2b:0d:c0:cf:e3:8d:94:1e:dd:87:74:7f:
da:51:27:1a:99:80:a0:3e:c6:a8:e7:6d:53:22:4b:cb:7f:2f:
36:84:55:6d:3b:42:38:fc:df:02:40:df:4b:d7:98:36:cc:21:
46:8d:97:bd:c3:db:b0:ca:a1:4d:65:34:8c:d5:05:59:ec:e0:
88:42:8f:0d:0f:88:20:8c:0b:ee:fe:d8:22:a1:c4:61:49:05:
48:fd:1f:ef:fb:4b:ff:cd:d8:22:e7:b0:8e:f0:88:aa:3a:ca:
42:67:2e:da:fe:4d:56:f1:a3:3a:25:b3:9f:cc:ea:e6:ad:e6:
77:4e:e3:fd:f8:97:40:bb:fa:0d:11:13:21:12:a5:26:a1:a0:
fc:a3:3c:b5:cf:16:24:14:dd:83:6f:41:35:9d:8c:70:7b:29:
01:ad:fa:af:2e:6a:10:2f:c7:09:4e:5c:6b:cd:86:ab:41:4a:
05:b2:07:9d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWCmIfek2Sw+iLVRYkgKzfQzSQUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNTAyMDQxNzU2NDhaFw0yNjAyMDMxODAxNDhaMDMxMTAvBgNV
BAMTKDA2MzZCQzdGOTMyMTIzRkUxNDkyQkU4ODAzOTMxNUE4Q0I2NTE5RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxKt9ERnI8kJ6zpPfcWia/jd2
5kFnuljqVZEX6IkdaNB2zmQlNIPXOP/KfeeY7Wk70s5i4ZzCp0LGmmAHlv6d4nXV
VjzVbaK0ET18ouSlai+JCz8SdL4AI2eIn5LqlEull6h6IhRp4iwQOXeUYS2XvmpS
OrvrH7rgQS+ulPK0BGPeFkI9DMNnWj1tHS56XanBxaYzIyK/dxOMBfNqLpnQt4x0
2/9EwpO8U3lMyd5tgz7kNgWNysU/IFEzrrXtbM4oVm4TA7Gfu26GoVILeKIOVekZ
dH/ye5/IrWGXplQVoq+yrZ1soQQ4Y+Y4ETL7zCwKn54Rto1Zw3qP2tus6pyzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBja8f5MhI/4Ukr6IA5MVqMtlGfIwHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTJlMzEzNjMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLoPoDAN
BgkqhkiG9w0BAQsFAAOCAQEAGSJ/oc8gQsj1gf+VJLYpMsYINIEjnYxqFT/CgD5z
lQXITOTgomnpzxpaX5pcVyTqMbqYzKzFkPTd+nJp1brTBl0zGi/SS/Cpu0biz14q
Kw3Az+ONlB7dh3R/2lEnGpmAoD7GqOdtUyJLy38vNoRVbTtCOPzfAkDfS9eYNswh
Ro2XvcPbsMqhTWU0jNUFWezgiEKPDQ+IIIwL7v7YIqHEYUkFSP0f7/tL/83YIuew
jvCIqjrKQmcu2v5NVvGjOiWzn8zq5q3md07j/fiXQLv6DRETIRKlJqGg/KM8tc8W
JBTdg29BNZ2McHspAa36ry5qEC/HCU5ca82Gq0FKBbIHnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:05:48 2025 by rpki-client