
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
File: 3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier: IqPS4MrJVGW6l/WA05Xy9OH0QPvoHTmV0/2rMw4CDwQ=
Subject key identifier: 76:2B:E1:AD:AB:EE:44:7A:B1:51:DB:2F:7A:E2:6D:8F:BA:79:45:B5
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 3C40DC0D7F5142997E044E8DFB852846977A2C0F
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:18 +0000
ROA not before: Tue 04 Feb 2025 19:57:18 +0000
ROA not after: Tue 03 Feb 2026 20:02:18 +0000
asID: 27773
IP address blocks: 190.150.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 23:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:40:dc:0d:7f:51:42:99:7e:04:4e:8d:fb:85:28:46:97:7a:2c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:18 2025 GMT
Not After : Feb 3 20:02:18 2026 GMT
Subject: CN=762BE1ADABEE447AB151DB2F7AE26D8FBA7945B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:77:5e:ea:8c:2c:b4:47:10:e4:c9:f6:51:
4d:c4:60:45:be:52:4d:3d:72:45:a9:90:da:ae:1b:
89:44:64:90:79:f4:56:27:49:f8:24:af:87:e6:05:
80:6d:fe:e3:76:37:7f:82:99:dd:88:64:1d:eb:fd:
44:ef:4f:d7:b1:7f:9c:35:5f:5c:27:19:e4:b8:5e:
b9:3c:bc:58:0b:6f:75:46:28:23:8f:40:fc:96:3e:
0b:1d:c6:fc:6e:0f:7e:02:a5:c7:f3:31:50:6b:22:
97:2d:5e:c5:77:d7:dc:ae:c5:0a:ba:cd:cb:bb:84:
8d:b3:96:29:a5:df:3f:b4:23:ec:56:b9:66:34:6d:
29:c5:cb:c4:ae:3c:93:1d:d2:51:6c:a9:c6:ae:de:
97:dd:b4:03:7c:48:77:28:04:30:af:54:fc:7c:c4:
ba:20:4f:20:cb:1c:98:95:d8:e4:16:9a:32:f8:7b:
4f:58:8a:8d:d3:18:76:cc:8f:9f:2c:51:bb:1c:00:
c5:50:b7:12:68:0f:53:d8:01:89:f2:6e:d5:82:e3:
89:98:6a:cc:7b:10:b4:a6:2d:d7:6e:a9:1a:09:db:
a8:7d:4f:70:23:53:8b:4e:04:18:e2:6c:37:7a:93:
9f:77:66:22:1d:06:bc:8e:29:58:44:90:32:24:cd:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:E1:AD:AB:EE:44:7A:B1:51:DB:2F:7A:E2:6D:8F:BA:79:45:B5
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.150.240.0/21
Signature Algorithm: sha256WithRSAEncryption
62:1a:58:da:75:14:d9:5c:18:ad:38:60:78:28:5b:fb:48:10:
fb:01:b7:66:7e:69:55:39:79:56:72:f8:a8:40:0d:d6:cf:d1:
9b:a0:45:a1:7a:87:44:87:28:c4:f4:c7:c5:46:49:5b:3a:20:
b7:e5:73:03:4b:98:e6:91:16:43:f8:0a:88:55:0c:ac:84:f5:
e0:82:74:36:43:b2:fb:87:1c:4f:a6:4f:2b:60:0d:a9:a6:00:
eb:51:cf:67:2a:68:46:ba:64:4d:3a:db:91:19:e1:b3:c1:10:
17:38:6f:6e:70:91:95:96:1e:f6:25:38:5b:e0:b8:37:ae:c6:
61:d2:03:5d:78:69:da:74:85:18:24:6c:bd:98:ee:38:ff:ec:
13:d4:e0:09:20:e7:c0:a7:9f:a1:22:5e:a2:24:a0:d9:38:06:
17:7b:54:0c:ac:60:e1:db:78:dd:5c:23:6b:dd:61:84:c6:81:
9c:54:36:a8:68:98:c8:44:75:c9:bd:29:57:5d:c7:16:6c:a2:
af:99:42:f7:55:5c:c8:85:b2:ea:8b:bb:7b:9b:fa:0c:4e:46:
a2:71:8d:64:c1:a1:58:37:1c:0b:20:a3:32:fa:c1:39:d4:60:
1b:52:c0:76:88:9b:16:e9:c1:ad:b8:45:af:95:6b:5e:48:26:
bd:83:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:06 2025 by rpki-client