Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa
File: 3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier: RowXjkLfB9qKkrS93bdIOiQT+3sLjYpKAc6Zu7YuH9E=
Subject key identifier: 6B:FD:E6:78:7C:34:BD:61:43:8B:61:B9:E7:AC:A5:7C:0B:DA:73:CA
Certificate issuer: /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial: 5902A9735F369D14B21865263AB072D46814B7D6
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa
Signing time: Mon 10 Feb 2025 20:09:32 +0000
ROA not before: Mon 10 Feb 2025 20:04:32 +0000
ROA not after: Mon 09 Feb 2026 20:09:32 +0000
asID: 262182
IP address blocks: 190.52.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 16:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:02:a9:73:5f:36:9d:14:b2:18:65:26:3a:b0:72:d4:68:14:b7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Validity
Not Before: Feb 10 20:04:32 2025 GMT
Not After : Feb 9 20:09:32 2026 GMT
Subject: CN=6BFDE6787C34BD61438B61B9E7ACA57C0BDA73CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:9d:98:0e:df:92:00:47:0f:84:8e:0b:80:
bb:bd:f9:bb:5c:53:ef:54:69:cb:69:d5:5d:c1:e6:
09:c9:ed:7f:36:02:6c:00:37:9b:42:77:d1:6f:db:
74:51:23:cf:1e:40:5b:80:4b:28:2f:a8:4c:1b:2a:
a8:96:53:01:85:7a:27:ec:f2:aa:2c:14:ac:b7:7a:
d3:a1:2d:e9:65:fa:2d:34:fb:36:59:aa:74:2b:61:
2e:9b:ee:e6:85:88:db:00:12:d0:06:96:90:6e:c2:
9e:aa:cb:3c:c6:c4:81:8b:0e:42:ed:01:c6:ef:4a:
22:ab:fe:f3:78:ad:8c:4a:20:72:6d:41:4b:05:a3:
d2:d6:0e:1a:0e:f1:8b:4e:c0:8d:2c:5f:66:e5:49:
21:65:91:19:5f:fa:e6:22:ae:16:0c:8f:54:49:ff:
5f:8d:44:10:ea:35:bc:dd:19:bc:c0:98:d6:d6:fc:
60:91:f1:2e:85:14:75:a1:24:c0:27:a5:8c:44:d2:
78:02:94:3a:58:85:cc:dd:d2:b2:33:65:8f:2c:13:
5f:b1:01:ca:86:b2:bc:69:a6:c0:49:64:44:47:cc:
0f:e0:10:0e:b2:36:6b:ea:08:92:c4:ca:c9:6c:5a:
c8:89:a6:66:3f:9c:bc:6f:52:97:91:79:24:23:8e:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:E6:78:7C:34:BD:61:43:8B:61:B9:E7:AC:A5:7C:0B:DA:73:CA
X509v3 Authority Key Identifier:
keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.127.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9b:a3:5e:a3:e1:dd:6b:e2:42:3f:b5:16:8c:d9:22:b3:58:
c1:0d:31:98:73:b8:b2:18:43:32:8e:51:0d:b3:31:fa:82:02:
6b:80:1c:f0:5f:5c:d5:6d:f4:19:ab:00:45:02:4b:4a:46:62:
db:96:7c:ce:48:6f:ba:1d:cd:dc:bc:2f:f5:fc:9e:2a:c9:a3:
2e:bb:a0:84:74:7e:21:f1:6d:55:17:48:63:40:eb:95:e6:7a:
64:3b:1a:38:57:30:f7:a3:07:6d:b0:e6:4a:88:75:f9:4e:d8:
0d:1e:c8:96:6f:8f:95:82:f6:f1:e7:73:1e:cd:ee:aa:3d:a7:
6b:43:e6:b1:ef:f5:d5:ca:66:45:11:81:50:1b:40:90:07:fd:
a9:6d:ee:4b:b3:68:9a:16:61:cf:6c:32:30:90:92:13:28:0f:
9b:11:39:16:0d:1c:3e:38:10:41:01:c6:64:e4:b7:01:53:11:
7a:ff:42:83:8a:87:1b:31:b5:08:db:b7:47:65:a1:6c:c0:5b:
93:4d:ea:e9:a4:9b:8f:ec:02:66:6d:f9:2f:6a:7e:06:99:71:
72:e1:91:0d:12:13:26:2c:11:12:02:ef:b7:5e:f7:18:e3:6f:
38:1c:32:b9:1a:84:d7:e6:55:5b:00:6c:94:b6:9c:6f:81:61:
fc:1d:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:36 2025 by rpki-client