Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa
File: 3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier: eKyBgG+7tA/+V43TMNBLTCLt5rUZbPU1ahFvvERCXK0=
Subject key identifier: 02:16:D9:80:D4:4E:77:6E:30:4E:C9:29:35:15:2C:34:18:13:0D:49
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 57DEFFB86E92C76C083A2C788441F8206D7D03EC
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa
Signing time: Tue 04 Feb 2025 20:07:58 +0000
ROA not before: Tue 04 Feb 2025 20:02:58 +0000
ROA not after: Tue 03 Feb 2026 20:07:58 +0000
asID: 13381
IP address blocks: 200.112.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:de:ff:b8:6e:92:c7:6c:08:3a:2c:78:84:41:f8:20:6d:7d:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Feb 4 20:02:58 2025 GMT
Not After : Feb 3 20:07:58 2026 GMT
Subject: CN=0216D980D44E776E304EC92935152C3418130D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:55:83:9e:24:de:b9:3f:66:92:19:ae:04:
3d:43:ef:59:3e:d8:27:ed:6e:2a:59:57:4a:33:c4:
18:37:a7:df:9c:61:bf:44:6b:f8:39:55:00:b8:80:
03:22:85:21:4f:3d:ff:bd:70:b5:e0:fb:e4:be:ed:
1a:4d:2a:b5:b2:68:c0:a1:8c:d0:01:96:71:ea:dd:
30:ec:55:2c:62:46:b5:61:8c:49:87:4c:11:1a:0a:
e7:ad:17:88:ed:4f:4d:e4:e1:12:0b:27:bb:41:aa:
e8:e5:78:9f:08:9c:1c:ae:a6:29:16:b0:f4:b3:18:
b3:d6:3a:ec:7e:54:87:db:4d:58:08:80:73:60:1f:
55:8a:10:69:42:c2:b9:c3:62:37:6f:40:a7:de:ef:
24:4d:b1:e7:92:27:46:63:99:6f:67:ea:27:32:36:
47:5d:56:91:db:c4:9e:e0:81:d3:eb:c0:c4:10:76:
3d:9b:8d:7c:0a:3a:98:d1:73:ca:ad:15:58:22:15:
e5:c9:75:e6:66:21:67:c0:5c:fb:b5:84:bd:29:45:
87:bc:d4:42:f5:b0:25:eb:1b:79:93:b5:38:36:e5:
c9:3c:f5:b5:9b:02:0d:b8:09:db:a4:78:03:de:06:
cb:3b:7b:90:14:62:fe:47:94:6d:b7:5a:1a:69:dc:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:D9:80:D4:4E:77:6E:30:4E:C9:29:35:15:2C:34:18:13:0D:49
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9e:32:81:e5:a6:52:c6:01:83:59:cd:8a:7d:92:90:8c:5e:
98:44:78:dd:53:d1:9f:3f:d3:ca:4e:16:c0:0a:e6:62:51:dc:
94:49:e7:9d:41:2e:66:43:70:11:24:05:06:59:8a:6f:76:c9:
48:57:f7:77:08:17:29:a2:f7:6b:fa:b8:17:ee:a6:31:03:6e:
b0:05:e9:36:4f:3b:5f:20:00:5c:22:ba:9a:45:66:7d:05:55:
6c:e5:97:97:f2:ca:3b:59:b0:fb:75:6c:cf:df:0b:e3:88:65:
e5:86:91:60:52:74:b3:39:8b:97:87:07:0d:63:bc:fd:4e:1b:
b6:33:45:2e:eb:c7:46:45:47:67:96:13:6c:60:03:e8:aa:5f:
f1:b4:01:3a:2c:b9:76:af:2a:67:2e:89:9b:24:a7:f0:d0:d1:
5e:fd:3b:9d:a8:26:59:61:c1:b5:b1:0c:5d:ff:59:4c:c0:26:
4f:8c:24:21:a0:29:e5:69:69:81:66:6e:03:f7:e9:3e:a2:50:
eb:55:ee:69:59:1c:e8:fa:5e:4a:ee:14:ac:88:f3:17:78:89:
d6:eb:8e:cd:6c:2e:30:06:8d:53:3f:8d:82:3d:f4:3f:5c:ac:
1b:f0:4a:d1:a6:63:58:db:07:90:f2:80:70:a1:ff:a7:1f:97:
e5:d4:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:24 2025 by rpki-client