Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
File: 3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa (raw, json)
Hash identifier: ruSpjbUTAfVM1Q+2VZZZG0ESJw5TmOKXIx7YFZTRm4Y=
Subject key identifier: 3A:E7:A5:9A:CB:7A:1A:43:4E:67:04:DB:67:21:99:60:42:34:1B:91
Certificate issuer: /CN=B9A10B1D1207BBEB3179CE7270A94F80E4A641D3
Certificate serial: 6E1EA0999720915A49394ABA2890F15307EF372C
Authority key identifier: B9:A1:0B:1D:12:07:BB:EB:31:79:CE:72:70:A9:4F:80:E4:A6:41:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
Signing time: Tue 04 Feb 2025 18:52:01 +0000
ROA not before: Tue 04 Feb 2025 18:47:01 +0000
ROA not after: Tue 03 Feb 2026 18:52:01 +0000
asID: 270038
IP address blocks: 190.111.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.crl
rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 05:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1e:a0:99:97:20:91:5a:49:39:4a:ba:28:90:f1:53:07:ef:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9A10B1D1207BBEB3179CE7270A94F80E4A641D3
Validity
Not Before: Feb 4 18:47:01 2025 GMT
Not After : Feb 3 18:52:01 2026 GMT
Subject: CN=3AE7A59ACB7A1A434E6704DB6721996042341B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:1a:c1:d8:de:e3:5f:e8:ef:3c:c6:ce:ce:
30:72:e0:1d:ff:46:e7:aa:64:85:55:6d:9d:09:21:
73:6f:45:fb:61:b5:da:d8:d6:4c:9b:31:eb:27:df:
64:9b:f6:8a:d2:fb:48:86:bf:d0:94:7b:57:8b:bd:
05:f0:20:8b:d1:d2:76:9f:cf:9e:e3:2e:3f:86:13:
c0:d7:53:dc:e6:3c:dc:4a:b8:89:ab:52:ae:da:8d:
ba:a8:a0:49:cd:4d:cc:65:22:97:de:ff:16:1b:9c:
4f:44:23:8a:41:ea:c7:5c:3c:59:a1:6b:cf:16:a6:
54:85:69:9d:a7:db:66:77:03:c9:cf:25:dd:16:95:
65:05:8b:65:fa:df:46:e9:fc:f2:bf:a3:a2:3a:8e:
f6:0f:0f:77:84:37:26:ec:e8:e8:5f:f7:fe:e5:2a:
31:fa:16:01:94:8b:18:dd:4a:d8:29:dd:66:43:ab:
ee:fa:21:a2:47:90:4c:bf:6d:29:01:1c:06:86:6b:
6c:e9:21:f5:35:08:e7:99:c8:d0:a3:e2:14:fb:c2:
3f:8b:2c:2f:9d:6b:6d:8f:3a:d1:74:92:b3:e8:55:
04:0c:dd:4a:c0:59:9f:f1:df:6f:79:cf:9f:bf:7d:
f7:b9:47:32:a2:6f:6f:75:5c:fb:e6:00:18:5b:98:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:A5:9A:CB:7A:1A:43:4E:67:04:DB:67:21:99:60:42:34:1B:91
X509v3 Authority Key Identifier:
keyid:B9:A1:0B:1D:12:07:BB:EB:31:79:CE:72:70:A9:4F:80:E4:A6:41:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:b1:95:95:b9:13:d3:4d:cc:a0:9a:dd:af:8b:71:0b:98:90:
07:8e:01:c3:a0:47:48:a9:80:bd:74:6d:a0:0f:01:76:99:f9:
d9:c8:5e:c5:49:7c:88:be:f2:a2:90:e6:80:f6:57:58:5c:40:
36:d7:49:32:53:9b:25:58:eb:af:fb:e6:73:2d:ab:62:df:be:
f3:0b:20:03:c3:ea:26:b3:c3:a4:46:38:4b:5b:d8:be:43:a9:
32:f5:32:c4:15:56:ee:8d:6f:25:16:d7:f8:79:47:dc:a1:fe:
c4:0c:af:14:54:f4:7b:64:e2:e4:8f:f6:9f:17:37:08:0c:8e:
18:3b:8a:58:a7:9c:17:5b:14:9e:d9:8d:74:09:07:74:96:6d:
ef:a7:fb:9d:c1:2f:61:7d:3a:d8:85:a7:4b:9b:b1:b8:a8:e2:
a0:12:e2:1d:b9:d6:8b:4e:84:69:88:26:11:39:90:68:81:2c:
82:33:b6:87:36:6d:76:34:8c:40:6f:90:fd:b3:7b:f0:bf:73:
76:36:9a:82:ac:25:f2:07:4f:73:68:f4:b2:eb:ad:71:59:3a:
68:25:b3:8b:c1:28:87:06:e3:ef:23:60:cb:77:a4:7f:cc:fd:
76:94:a9:52:03:b2:fd:a4:95:9b:0a:a8:29:f9:c2:93:0b:21:
77:3c:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:28 2025 by rpki-client