Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231302e302f32342d3234203d3e203232313232.roa
File: 3134382e3230392e3231302e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier: JpRlV4oTdfCdiTsnMm7YwJri/xCfClqZT20bElFxXw0=
Subject key identifier: 87:39:7A:D8:F5:2E:39:E7:7F:F7:FD:8B:98:A4:1F:57:22:E5:8B:CF
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 5BEA3CB1D852A34CE2E09ED7BBD316107BFC2E88
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231302e302f32342d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:53 +0000
ROA not before: Tue 04 Feb 2025 18:33:53 +0000
ROA not after: Tue 03 Feb 2026 18:38:53 +0000
asID: 22122
IP address blocks: 148.209.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ea:3c:b1:d8:52:a3:4c:e2:e0:9e:d7:bb:d3:16:10:7b:fc:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:53 2025 GMT
Not After : Feb 3 18:38:53 2026 GMT
Subject: CN=87397AD8F52E39E77FF7FD8B98A41F5722E58BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:c5:b6:6c:7f:98:82:43:5c:d9:45:2f:29:
58:77:28:42:59:b7:42:93:21:24:68:82:a3:35:d9:
69:f8:6d:0f:15:09:63:eb:3a:84:21:19:ff:83:5e:
da:2b:40:71:54:f6:fc:e5:cf:dd:79:27:26:c5:b0:
ad:4e:ec:11:4c:03:14:a3:23:bc:75:72:44:9f:bd:
d8:2a:0f:0a:e9:82:48:78:18:c7:33:38:11:7b:45:
42:2c:82:d9:77:d6:2a:66:2b:1b:a1:69:6a:9d:22:
f5:d1:28:5e:9d:3b:7a:5b:6d:9a:05:44:1f:83:28:
65:01:6f:1e:0c:67:a9:c0:ce:ea:9b:3e:5a:6a:3a:
28:21:27:f0:7a:0a:f9:6b:9c:e5:e7:1f:5a:39:52:
7a:7a:41:99:36:2a:a5:35:a3:20:f2:84:15:5d:7c:
7f:64:d0:99:cb:42:60:bc:8f:c9:58:cb:ba:92:91:
0b:8f:3d:7a:2c:7c:ac:37:87:f6:ef:eb:9d:f5:18:
9d:0f:1e:17:17:b7:9a:77:0c:a0:d2:a5:6f:74:a8:
ac:a3:34:22:36:ac:29:ba:73:74:85:ec:33:ef:e1:
7a:04:f5:e8:9f:60:66:6b:fa:50:98:09:bf:01:01:
39:09:c8:41:5e:9b:d4:8a:7b:de:9e:76:a1:91:e3:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:7A:D8:F5:2E:39:E7:7F:F7:FD:8B:98:A4:1F:57:22:E5:8B:CF
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231302e302f32342d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0f:ea:c3:8c:1e:c2:3b:d7:0a:20:7b:b6:df:6a:31:36:27:
ff:4e:29:d1:b1:ba:a4:19:e0:34:10:17:fa:d1:b9:42:fe:21:
c3:f3:c7:dd:c1:a2:f1:38:18:06:bb:e3:f6:6f:32:fe:ad:4b:
b8:d3:d1:88:12:44:ac:da:0e:b7:9d:85:13:26:e8:02:dc:a8:
06:7e:c3:24:7f:ed:ee:4b:6b:61:91:8d:9f:9a:3e:e4:39:72:
d0:c9:39:cc:be:a6:7f:29:6f:98:0d:5e:e3:41:22:b0:99:d8:
27:c7:ea:dd:59:f2:fd:9e:f0:ff:4d:1b:2a:65:fa:98:a8:0c:
6a:26:04:65:91:31:cd:b2:ca:e3:5f:b6:69:2b:46:ab:89:54:
74:1c:0d:04:22:c9:2d:76:5a:a5:41:84:42:e1:9b:7e:31:89:
d4:5c:01:39:b1:16:ce:e2:63:d5:30:a9:a5:41:20:a4:c8:18:
b2:31:f7:7b:e4:1a:22:b2:e6:08:86:9a:5a:b4:c2:25:2b:97:
19:fe:5d:84:74:37:03:bf:68:19:6c:8f:13:f4:85:fa:55:8b:
cd:6d:f8:94:af:b1:b4:99:cb:c1:cc:35:9c:8f:34:93:f5:20:
ed:5a:d0:da:3e:d4:56:d0:75:61:a9:92:bc:b9:1d:50:b7:ce:
7b:ae:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:30:01 2025 by rpki-client