Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/3139302e332e3138342e302f32312d3234203d3e20323637373635.roa
File: 3139302e332e3138342e302f32312d3234203d3e20323637373635.roa (raw, json)
Hash identifier: jCTSuNUTw3iL88ALxwBMdf40j9ru7v7I68iHHCCLfRY=
Subject key identifier: D6:D7:73:67:40:AB:00:02:AB:86:2B:14:92:C6:F5:11:C7:55:1A:75
Certificate issuer: /CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
Certificate serial: 5EE22B7461ABB152AD8B7BA6DC7E2344E8597DC0
Authority key identifier: A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/3139302e332e3138342e302f32312d3234203d3e20323637373635.roa
Signing time: Tue 04 Feb 2025 18:30:30 +0000
ROA not before: Tue 04 Feb 2025 18:25:30 +0000
ROA not after: Tue 03 Feb 2026 18:30:30 +0000
asID: 267765
IP address blocks: 190.3.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl
rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 15:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e2:2b:74:61:ab:b1:52:ad:8b:7b:a6:dc:7e:23:44:e8:59:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
Validity
Not Before: Feb 4 18:25:30 2025 GMT
Not After : Feb 3 18:30:30 2026 GMT
Subject: CN=D6D7736740AB0002AB862B1492C6F511C7551A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:06:bd:f8:b3:30:b7:8d:3c:b5:cd:6d:a3:
6a:2d:ad:b0:96:d2:a2:36:0d:1a:78:91:24:bb:9a:
90:4d:1a:c9:85:46:be:6c:bf:95:7c:0d:46:1c:8a:
f7:a1:2e:eb:3b:6b:1c:05:66:fc:1b:66:bd:22:04:
52:97:90:0b:44:33:80:1e:cc:ed:09:dd:5d:01:98:
e8:2f:be:51:a0:0c:97:1d:cd:ec:dc:04:b9:60:e1:
6d:77:c4:41:3a:76:3f:77:8c:03:8f:42:8a:b8:47:
98:f1:46:5d:5e:35:04:97:8d:68:05:30:49:3d:5e:
2d:0d:08:ee:9f:44:46:d9:5b:3f:df:dd:dc:44:be:
88:49:b9:59:5f:78:64:35:00:61:f7:ba:97:23:4d:
60:37:20:8f:41:f1:92:4a:e9:d7:d1:62:82:d6:a1:
39:47:ce:25:bf:73:ea:54:ef:2f:d7:d5:0e:40:38:
66:75:27:8c:2e:fa:3a:54:f8:63:56:2b:f8:b8:39:
8b:87:89:c8:cf:4f:ff:94:a8:1b:3a:0d:17:73:a5:
a4:2f:e7:ad:9a:32:65:68:1a:3a:49:3a:c8:b3:24:
27:62:c4:b4:8d:b8:6f:07:0d:19:9f:f5:f7:00:b4:
87:a5:f0:2d:c2:86:8b:c4:6c:06:60:8d:74:71:18:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:73:67:40:AB:00:02:AB:86:2B:14:92:C6:F5:11:C7:55:1A:75
X509v3 Authority Key Identifier:
keyid:A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/3139302e332e3138342e302f32312d3234203d3e20323637373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.3.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:f8:16:77:6f:87:c2:dd:35:35:dd:87:bd:30:42:3c:bf:33:
7a:db:85:4b:3e:1f:aa:42:50:79:ed:83:de:41:9c:6a:72:3f:
c1:ef:12:74:ae:d5:d2:6d:34:b6:1e:9a:63:6e:ff:39:d5:8c:
26:1f:fe:cc:19:18:a4:8c:80:5a:9d:c6:3a:9f:72:19:7b:3d:
2d:c6:2e:28:8a:42:2e:f6:b3:2c:5c:dc:db:09:13:76:bb:8a:
f1:d7:b9:d3:cb:ec:8a:96:02:35:7f:da:eb:42:e1:4a:e6:1f:
c3:de:5d:6f:89:32:01:a1:69:82:f1:07:1f:01:31:37:62:9f:
2a:65:4b:72:9b:b8:bc:32:cf:9e:0a:ae:67:db:9f:63:91:41:
72:6e:e4:d5:0d:16:42:3c:1b:96:64:a7:a9:20:64:46:cd:d9:
6f:b8:47:57:b2:66:0a:2b:59:42:84:53:b6:01:87:9f:f3:52:
95:72:e0:6a:b1:e6:a1:fc:7a:c9:46:a6:e2:f9:34:fd:71:5b:
79:43:df:32:17:38:19:f8:45:3e:1d:e8:72:d2:9e:c8:4f:06:
5f:c1:cb:a5:48:f9:01:bf:7e:ef:46:91:ad:1e:e6:a9:8c:04:
99:73:6e:71:fb:05:e0:a5:5d:ba:5c:4e:d3:ef:52:b2:de:de:
9d:a7:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:58:37 2025 by rpki-client