Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa
File: 3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier: tBPXv5LmYXEKvGcP08B2ZVzglKitY5gBXpkZk1rOlD4=
Subject key identifier: 15:C8:04:3C:F0:55:C8:CD:DF:8E:FE:24:9E:9F:69:83:D3:1E:72:8F
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 5FC4EE8B930EB76A2D6149ADB1CA5E209789132D
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa
Signing time: Tue 04 Feb 2025 20:07:53 +0000
ROA not before: Tue 04 Feb 2025 20:02:53 +0000
ROA not after: Tue 03 Feb 2026 20:07:53 +0000
asID: 13381
IP address blocks: 200.112.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c4:ee:8b:93:0e:b7:6a:2d:61:49:ad:b1:ca:5e:20:97:89:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Feb 4 20:02:53 2025 GMT
Not After : Feb 3 20:07:53 2026 GMT
Subject: CN=15C8043CF055C8CDDF8EFE249E9F6983D31E728F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:28:81:07:f3:e1:23:77:87:be:ce:d4:04:
aa:1c:1f:92:8d:06:50:4c:b9:6a:54:fa:b2:95:78:
f8:02:6d:20:4d:90:21:9c:d8:68:c6:fc:10:25:05:
16:e2:5e:f7:ac:91:06:de:e1:15:0f:69:68:3c:3e:
5a:2b:e1:08:29:c5:06:34:4c:57:ca:bb:05:f3:c5:
c9:d4:8b:2e:40:35:42:1c:cb:ea:ee:a9:88:7f:0e:
69:e1:b9:c1:16:3c:2c:17:05:cc:1b:26:91:58:c9:
dc:0f:c2:31:f9:8e:4d:14:e9:6a:49:57:35:b7:c8:
10:df:38:df:91:b5:ea:25:7c:11:e8:86:7a:ed:e8:
73:ca:2d:b2:89:dd:50:fa:5e:71:ef:79:d1:c7:dd:
58:0f:40:7a:5e:d4:d3:d8:2a:22:74:21:76:19:65:
fb:1f:42:67:f2:9f:81:c2:36:c6:a2:8a:d2:5f:6a:
28:bf:54:b5:5e:1b:88:7b:21:be:53:79:69:46:66:
8b:e0:e1:8e:9a:76:8c:94:9f:03:d4:e4:f7:ae:f0:
70:a1:db:13:d4:6a:67:bd:71:f9:4a:c6:2e:d7:8b:
fd:30:99:a8:13:9b:46:ba:d8:d0:1d:5a:5b:07:5b:
e1:f1:d0:30:c6:7a:6f:98:a6:58:ae:44:b4:13:71:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:04:3C:F0:55:C8:CD:DF:8E:FE:24:9E:9F:69:83:D3:1E:72:8F
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.241.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b0:b4:2a:49:6f:84:21:e1:66:97:c0:18:23:0c:f6:1e:7a:
6c:e6:47:52:00:9f:a5:e0:1c:0e:4d:43:41:22:c2:a6:fb:82:
0e:d8:fa:2f:0c:df:62:ca:cc:f8:c0:24:c1:dc:b2:0f:1f:84:
d0:6a:76:23:b8:ac:71:19:95:fb:90:26:8c:9f:1d:b3:eb:5d:
d8:fc:9c:9e:08:e7:0d:6d:f5:c0:bc:22:61:f2:55:7a:a6:f6:
49:06:55:e4:ef:21:d2:e6:fe:39:02:8c:73:3c:e1:2e:2c:5a:
86:db:44:85:61:50:7d:fd:92:26:25:64:37:0d:22:5c:8e:fc:
08:f4:76:4c:87:db:ab:f8:3c:0f:37:20:b5:a8:cf:69:1d:c1:
d1:bd:77:3c:5f:68:83:51:26:5e:cf:1d:51:04:e3:1e:8a:79:
38:3f:8e:9e:f1:a0:39:ca:4b:9b:98:42:b4:fc:5e:af:61:ea:
f8:df:1b:b4:9c:a4:08:a5:4a:88:09:09:62:bd:a2:c0:8f:c3:
ea:c5:e1:c5:a2:19:d5:71:79:80:b6:77:9a:52:7a:43:e7:f6:
96:38:55:34:c3:e5:2e:0c:e6:9c:91:a8:a7:2f:a0:9e:49:da:
be:dc:89:b6:13:62:24:a4:55:08:d1:80:4b:91:6f:c9:c5:3c:
ab:4b:1d:3e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX8Tui5MOt2otYUmtscpeIJeJEy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTAyMDQyMDAyNTNaFw0yNjAyMDMyMDA3NTNaMDMxMTAvBgNV
BAMTKDE1QzgwNDNDRjA1NUM4Q0RERjhFRkUyNDlFOUY2OTgzRDMxRTcyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7SiBB/PhI3eHvs7UBKocH5KN
BlBMuWpU+rKVePgCbSBNkCGc2GjG/BAlBRbiXveskQbe4RUPaWg8Plor4QgpxQY0
TFfKuwXzxcnUiy5ANUIcy+ruqYh/DmnhucEWPCwXBcwbJpFYydwPwjH5jk0U6WpJ
VzW3yBDfON+RteolfBHohnrt6HPKLbKJ3VD6XnHvedHH3VgPQHpe1NPYKiJ0IXYZ
ZfsfQmfyn4HCNsaiitJfaii/VLVeG4h7Ib5TeWlGZovg4Y6adoyUnwPU5Peu8HCh
2xPUame9cflKxi7Xi/0wmagTm0a62NAdWlsHW+Hx0DDGem+YpliuRLQTcSMZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFcgEPPBVyM3fjv4knp9pg9Meco8wHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDx
MA0GCSqGSIb3DQEBCwUAA4IBAQBmsLQqSW+EIeFml8AYIwz2Hnps5kdSAJ+l4BwO
TUNBIsKm+4IO2PovDN9iysz4wCTB3LIPH4TQanYjuKxxGZX7kCaMnx2z613Y/Jye
COcNbfXAvCJh8lV6pvZJBlXk7yHS5v45AoxzPOEuLFqG20SFYVB9/ZImJWQ3DSJc
jvwI9HZMh9ur+DwPNyC1qM9pHcHRvXc8X2iDUSZezx1RBOMeink4P46e8aA5ykub
mEK0/F6vYer43xu0nKQIpUqICQlivaLAj8PqxeHFohnVcXmAtneaUnpD5/aWOFU0
w+UuDOackainL6CeSdq+3Im2E2IkpFUI0YBLkW/JxTyrSx0+
-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:23 2025 by rpki-client