Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: 8alMLH2YwvnMw9hVU2EY+/Trsb4Bho0/SWpEtdqqjHI=
Subject key identifier: 33:66:A7:E2:C7:3E:EB:35:D6:A6:AC:09:6F:E1:E2:C4:F0:E5:96:2A
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 71CB142A296E8452CF77E9A2A2AA4310C5A5CA0B
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:50 +0000
ROA not before: Tue 04 Feb 2025 18:33:50 +0000
ROA not after: Tue 03 Feb 2026 18:38:50 +0000
asID: 22122
IP address blocks: 148.209.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cb:14:2a:29:6e:84:52:cf:77:e9:a2:a2:aa:43:10:c5:a5:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:50 2025 GMT
Not After : Feb 3 18:38:50 2026 GMT
Subject: CN=3366A7E2C73EEB35D6A6AC096FE1E2C4F0E5962A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b4:93:2a:84:45:ca:c0:29:cf:81:71:7f:69:
aa:12:27:fd:bc:fe:fb:92:1d:7f:2e:ab:78:a6:d0:
a9:48:67:95:cc:e2:65:64:0e:5f:66:72:2d:b3:32:
d9:4e:91:17:f0:af:a9:cd:42:fa:e5:70:06:22:fe:
73:fd:14:05:49:eb:38:7c:23:6a:34:c4:f9:45:92:
f8:45:ba:7f:9f:2f:6b:3b:53:67:05:68:9c:b8:65:
40:c4:eb:cd:4f:12:f9:4c:03:dd:52:d1:1d:34:96:
d5:5b:dd:98:e9:0b:81:f4:a1:2b:af:aa:1e:ef:81:
46:ed:d5:f3:f9:5e:0a:3f:7b:ca:6c:44:d4:8c:0b:
45:26:0e:03:e2:33:6a:7e:97:fb:fe:06:63:79:cc:
4d:b1:8f:83:f6:b4:c9:4c:a1:17:d8:7d:3a:59:38:
22:a0:43:81:12:3b:17:ac:53:8b:ec:22:0d:ba:72:
e4:bd:93:6c:d3:97:9b:5d:cb:04:a8:f9:34:0e:06:
7e:6d:34:d1:f2:58:47:8f:ce:4f:2a:a4:5d:26:2e:
5e:e9:65:1f:45:6f:1a:5f:21:9d:b4:e7:35:c3:78:
14:32:60:30:6d:15:6f:c8:a8:15:0d:93:50:e5:ce:
64:81:b6:b2:29:19:76:2d:8f:8b:9c:34:56:e7:f5:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:A7:E2:C7:3E:EB:35:D6:A6:AC:09:6F:E1:E2:C4:F0:E5:96:2A
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:7f:02:dc:ca:d2:31:94:75:94:0a:20:cf:29:f5:a6:42:30:
a4:0a:b0:8c:74:2e:5f:ec:dd:3e:e7:02:b1:a7:37:00:5f:6e:
85:72:f1:41:07:bf:61:e1:cf:b8:5e:50:fa:d2:db:65:48:15:
d7:bd:f3:5c:7a:39:ac:b1:3e:b5:38:1e:dd:32:4a:ee:61:95:
f6:40:ad:83:eb:ce:9f:7d:bc:25:40:d3:c1:0c:8a:70:06:c2:
6c:cc:b5:c9:38:93:84:35:17:b1:d9:35:c9:45:52:72:8b:1e:
35:91:70:8c:d7:02:34:c5:1e:50:9c:76:23:11:79:8c:50:4c:
c0:1f:cc:1f:4d:40:d2:53:4a:73:f7:f8:70:56:82:6c:f0:23:
8b:fb:4c:82:7d:66:a0:60:e5:9f:37:7a:f9:fe:07:36:2c:8f:
c7:b1:19:a7:60:f0:2f:5f:8d:13:70:91:f1:5e:c0:0b:ef:8b:
07:0c:4a:05:e6:10:a2:1a:8f:d6:c8:64:84:1c:06:ed:07:84:
61:64:5a:30:2e:ed:9c:22:96:04:61:0a:93:57:90:72:59:41:
13:ec:b0:03:1f:a7:b4:e7:0d:ae:8f:25:35:34:67:33:30:fc:
be:92:61:c8:36:1b:79:eb:a0:23:6c:47:49:7f:d2:ce:e3:3a:
be:d8:ab:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:29:50 2025 by rpki-client