Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3136382e3232372e3130342e302f32322d3234203d3e203532333330.roa
File: 3136382e3232372e3130342e302f32322d3234203d3e203532333330.roa (raw, json)
Hash identifier: vUbhip8iH8k/FaNhp6m/yPu+9SqW9jHYkFno4fmUPLY=
Subject key identifier: F6:D0:44:DA:6D:C9:C1:C4:E1:AA:B1:23:B3:FB:C5:0E:9D:A1:30:A5
Certificate issuer: /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial: 2CC21B69CEB706076155AE37ECC041E3B2CBA02D
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3136382e3232372e3130342e302f32322d3234203d3e203532333330.roa
Signing time: Tue 04 Feb 2025 18:15:15 +0000
ROA not before: Tue 04 Feb 2025 18:10:15 +0000
ROA not after: Tue 03 Feb 2026 18:15:15 +0000
asID: 52330
IP address blocks: 168.227.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c2:1b:69:ce:b7:06:07:61:55:ae:37:ec:c0:41:e3:b2:cb:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Validity
Not Before: Feb 4 18:10:15 2025 GMT
Not After : Feb 3 18:15:15 2026 GMT
Subject: CN=F6D044DA6DC9C1C4E1AAB123B3FBC50E9DA130A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:54:41:af:74:39:36:57:7f:c7:a3:86:0b:
bb:9c:35:61:c4:ac:7b:a3:c7:21:60:f2:97:4c:4e:
32:44:8c:31:68:a6:34:e6:f5:40:5a:75:a5:cb:a9:
b1:65:2b:d0:62:fb:bf:2c:39:b8:07:86:4a:b7:9b:
90:13:b2:80:c6:af:1a:88:28:81:01:bf:1e:a9:41:
d4:46:27:bd:9e:49:50:c8:62:ab:db:ed:8a:7f:22:
3f:a5:84:c7:1c:43:36:e0:06:90:b9:51:f8:c1:9f:
d6:f3:70:e3:e8:ca:9e:d4:04:d6:d8:86:01:8d:14:
3e:28:e2:01:5a:4f:7b:25:b2:27:e3:02:4d:14:ad:
1e:df:51:43:0a:6b:c0:e6:70:3b:6e:36:66:ec:67:
c4:b7:c2:2b:fc:1d:f5:d6:77:d4:ee:1d:c6:68:74:
73:a6:4e:54:91:5b:21:88:3b:85:ac:97:56:01:34:
3c:8b:83:18:cd:c2:63:21:e9:46:16:c0:06:57:8b:
12:13:95:94:46:79:35:69:96:c4:0c:94:09:fd:8f:
7a:32:15:cb:e6:53:32:ae:be:68:b6:ad:7a:ac:32:
46:73:58:02:c5:6e:c8:49:21:73:3e:6b:75:e3:b3:
cc:0f:d7:2b:47:92:ab:97:8c:b1:e7:9a:15:3d:d0:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:44:DA:6D:C9:C1:C4:E1:AA:B1:23:B3:FB:C5:0E:9D:A1:30:A5
X509v3 Authority Key Identifier:
keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3136382e3232372e3130342e302f32322d3234203d3e203532333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:44:6f:cf:0f:82:f5:5a:1a:ac:35:9a:a2:71:e4:f4:1a:aa:
7f:f3:de:97:d5:eb:e5:32:1f:75:1c:70:bd:09:c4:2d:1c:20:
2d:1e:3c:77:e2:f2:0e:c2:4c:e7:6f:c6:56:03:43:04:78:8e:
10:24:61:db:b5:56:b4:fb:bc:85:d9:d1:33:7f:dd:64:a3:a0:
fd:b8:c4:40:39:90:9e:11:b8:0d:f6:61:8b:b3:b3:56:1f:83:
ea:79:4c:97:27:d3:da:06:31:a2:ec:d8:e9:f0:13:ad:29:51:
15:e2:8e:3a:79:37:39:93:7e:19:de:bb:3c:9d:42:f2:25:8a:
b8:9e:48:5a:13:37:70:90:81:0f:e4:0c:93:94:92:fb:c2:c0:
65:99:68:e5:8c:ec:02:b0:4f:39:cc:01:73:f4:2f:3d:2e:db:
a3:5a:4f:af:2e:f4:20:6a:f2:c1:7e:b8:ad:50:aa:c3:b9:be:
4b:79:02:ba:a5:e4:d9:96:2d:a9:66:5d:23:b0:52:96:e5:a2:
c3:90:b4:99:8b:31:eb:23:37:57:e1:a6:93:7e:48:b1:05:6b:
8d:66:f5:cb:d8:ae:56:56:01:2f:54:85:b0:fe:26:25:e0:ad:
8f:c0:8c:d6:f9:64:95:b8:33:00:54:06:92:49:eb:57:ef:73:
4b:23:27:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULMIbac63BgdhVa437MBB47LLoC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGQjc5MUExNDU1ODIzNDQ5NTRERjk1MDY3RUJFNEY3
QzU2N0VDQjAeFw0yNTAyMDQxODEwMTVaFw0yNjAyMDMxODE1MTVaMDMxMTAvBgNV
BAMTKEY2RDA0NERBNkRDOUMxQzRFMUFBQjEyM0IzRkJDNTBFOURBMTMwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2VRBr3Q5Nld/x6OGC7ucNWHE
rHujxyFg8pdMTjJEjDFopjTm9UBadaXLqbFlK9Bi+78sObgHhkq3m5ATsoDGrxqI
KIEBvx6pQdRGJ72eSVDIYqvb7Yp/Ij+lhMccQzbgBpC5UfjBn9bzcOPoyp7UBNbY
hgGNFD4o4gFaT3slsifjAk0UrR7fUUMKa8DmcDtuNmbsZ8S3wiv8HfXWd9TuHcZo
dHOmTlSRWyGIO4Wsl1YBNDyLgxjNwmMh6UYWwAZXixITlZRGeTVplsQMlAn9j3oy
FcvmUzKuvmi2rXqsMkZzWALFbshJIXM+a3Xjs8wP1ytHkquXjLHnmhU90OitAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9tBE2m3JwcThqrEjs/vFDp2hMKUwHwYDVR0j
BBgwFoAUnvt5GhRVgjRJVN+VBn6+T3xWfsswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTIyRDE1ODc4NUFBQjE3MDRGNzA3NTNCRDRENUFGRjk5
MEVBOUI5NDgyOUIxRkRERTFEODZCRUI2NjgwQzVGLzAvOUVGQjc5MUExNDU1ODIz
NDQ5NTRERjk1MDY3RUJFNEY3QzU2N0VDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RUZCNzkxQTE0NTU4MjM0NDk1
NERGOTUwNjdFQkU0RjdDNTY3RUNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyMkQxNTg3ODVBQUIxNzA0RjcwNzUzQkQ0RDVBRkY5OTBFQTlCOTQ4
MjlCMUZEREUxRDg2QkVCNjY4MEM1Ri8wLzMxMzYzODJlMzIzMjM3MmUzMTMwMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqONo
MA0GCSqGSIb3DQEBCwUAA4IBAQBsRG/PD4L1WhqsNZqiceT0Gqp/896X1evlMh91
HHC9CcQtHCAtHjx34vIOwkznb8ZWA0MEeI4QJGHbtVa0+7yF2dEzf91ko6D9uMRA
OZCeEbgN9mGLs7NWH4PqeUyXJ9PaBjGi7Njp8BOtKVEV4o46eTc5k34Z3rs8nULy
JYq4nkhaEzdwkIEP5AyTlJL7wsBlmWjljOwCsE85zAFz9C89LtujWk+vLvQgavLB
fritUKrDub5LeQK6peTZli2pZl0jsFKW5aLDkLSZizHrIzdX4aaTfkixBWuNZvXL
2K5WVgEvVIWw/iYl4K2PwIzW+WSVuDMAVAaSSetX73NLIycw
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:17:22 2025 by rpki-client