
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa
File: 3139302e35332e34322e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier: nfUHPOzN2UKMdqE2bSIz8szwFrNih1XNrxKNnuF5Ez4=
Subject key identifier: B2:D9:7D:D3:E7:21:CB:2F:2E:80:80:D1:12:1F:9B:F4:30:BD:EF:64
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 50D8A52E518C5C0EFD87CCC916221E6E5190A00A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa
Signing time: Tue 04 Feb 2025 20:02:18 +0000
ROA not before: Tue 04 Feb 2025 19:57:18 +0000
ROA not after: Tue 03 Feb 2026 20:02:18 +0000
asID: 27742
IP address blocks: 190.53.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 23:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d8:a5:2e:51:8c:5c:0e:fd:87:cc:c9:16:22:1e:6e:51:90:a0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:18 2025 GMT
Not After : Feb 3 20:02:18 2026 GMT
Subject: CN=B2D97DD3E721CB2F2E8080D1121F9BF430BDEF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:05:fd:e3:3f:75:c9:77:1a:14:6e:5d:1f:
8d:69:30:15:42:cd:a9:57:24:a1:84:d3:d3:dd:c2:
57:db:50:89:d4:e7:f4:39:85:e7:b8:ff:e6:03:d6:
e3:37:cf:f4:d2:4a:d9:b5:f8:94:6e:95:93:4f:d3:
c1:29:f1:a9:15:4f:04:0b:81:e1:92:80:18:32:3c:
65:fe:b5:01:be:30:18:bb:fe:be:78:ce:a7:d8:70:
a3:a0:15:5e:ee:e4:c4:e8:85:4b:c1:73:fa:76:70:
e5:c6:ee:72:e5:98:c2:eb:fb:52:0b:77:18:75:9b:
4a:f6:cb:af:fc:18:24:1c:5a:7a:4a:28:76:ad:77:
d5:9d:f1:c2:65:33:67:c3:c7:fc:cc:88:bd:44:78:
a0:d2:97:45:82:08:a5:df:87:ba:b6:33:66:16:c4:
eb:cd:a0:68:26:20:03:fd:4c:ce:c1:bb:57:0b:81:
ef:0c:ce:a3:14:5f:27:8d:4d:8e:e8:3a:7c:7d:1f:
50:09:2d:28:e2:9f:1d:9b:76:85:89:55:bc:66:df:
3a:dc:f8:ec:c6:52:4f:2f:2e:ca:96:3d:67:80:26:
b4:c7:55:83:41:4f:44:5e:11:59:19:bc:67:f8:7c:
dd:7f:41:99:29:cb:39:80:ed:63:6d:52:f0:3b:f0:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:7D:D3:E7:21:CB:2F:2E:80:80:D1:12:1F:9B:F4:30:BD:EF:64
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.53.42.0/23
Signature Algorithm: sha256WithRSAEncryption
78:63:39:1e:8b:59:4b:ea:bf:da:db:3a:11:0e:9c:65:fa:4b:
1f:2e:dd:12:15:99:37:15:b9:05:52:d5:fe:2e:c1:f6:67:61:
f9:72:4c:f2:ae:9e:69:59:18:22:05:48:b3:6c:f1:56:ea:09:
28:78:14:2e:65:60:a8:6f:f0:dd:11:ea:0a:82:3c:d9:fc:38:
d5:b2:69:d9:0f:8e:01:82:5c:e0:09:98:34:64:08:08:ef:9b:
dc:54:b4:95:1e:79:7e:5b:02:21:dd:4f:73:da:b3:3a:88:21:
a4:eb:a2:fa:d0:d9:fc:5a:37:9a:65:3a:15:f6:02:6c:ca:ec:
f7:85:ef:3e:26:ac:37:c8:32:31:f6:7d:56:65:83:5d:7c:b8:
99:05:21:37:b4:6c:2b:80:ae:df:7b:ae:a3:e0:94:72:8a:c1:
b1:c5:e3:91:bd:f4:bf:f7:d6:3f:59:74:1a:66:d0:f7:ee:43:
c5:ab:b4:50:ed:fe:bb:34:c0:ff:d0:89:4f:03:3e:ee:33:67:
72:a1:56:3c:fa:5f:a3:7d:d2:02:5a:9a:36:ef:4a:1e:de:04:
63:35:21:aa:14:73:ff:3f:55:8b:e0:59:0e:c9:2c:91:c4:f7:
f7:11:b4:ed:7c:27:ba:bf:db:d6:cb:5c:f7:07:77:f0:61:23:
d5:2b:91:3b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUNilLlGMXA79h8zJFiIeblGQoAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MThaFw0yNjAyMDMyMDAyMThaMDMxMTAvBgNV
BAMTKEIyRDk3REQzRTcyMUNCMkYyRTgwODBEMTEyMUY5QkY0MzBCREVGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFAX94z91yXcaFG5dH41pMBVC
zalXJKGE09PdwlfbUInU5/Q5hee4/+YD1uM3z/TSStm1+JRulZNP08Ep8akVTwQL
geGSgBgyPGX+tQG+MBi7/r54zqfYcKOgFV7u5MTohUvBc/p2cOXG7nLlmMLr+1IL
dxh1m0r2y6/8GCQcWnpKKHatd9Wd8cJlM2fDx/zMiL1EeKDSl0WCCKXfh7q2M2YW
xOvNoGgmIAP9TM7Bu1cLge8MzqMUXyeNTY7oOnx9H1AJLSjinx2bdoWJVbxm3zrc
+OzGUk8vLsqWPWeAJrTHVYNBT0ReEVkZvGf4fN1/QZkpyzmA7WNtUvA78DLjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUstl90+chyy8ugIDREh+b9DC972QwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzUzMzJlMzQzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczNzM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+NSowDQYJ
KoZIhvcNAQELBQADggEBAHhjOR6LWUvqv9rbOhEOnGX6Sx8u3RIVmTcVuQVS1f4u
wfZnYflyTPKunmlZGCIFSLNs8VbqCSh4FC5lYKhv8N0R6gqCPNn8ONWyadkPjgGC
XOAJmDRkCAjvm9xUtJUeeX5bAiHdT3PaszqIIaTrovrQ2fxaN5plOhX2AmzK7PeF
7z4mrDfIMjH2fVZlg118uJkFITe0bCuArt97rqPglHKKwbHF45G99L/31j9ZdBpm
0PfuQ8WrtFDt/rs0wP/QiU8DPu4zZ3KhVjz6X6N90gJamjbvSh7eBGM1IaoUc/8/
VYvgWQ7JLJHE9/cRtO18J7q/29bLXPcHd/BhI9UrkTs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:42 2025 by rpki-client