Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/34352e3136372e38382e302f32322d3234203d3e20323637373335.roa
File: 34352e3136372e38382e302f32322d3234203d3e20323637373335.roa (raw, json)
Hash identifier: Pe7KlTWsYwYkkeiaRWCacbR4/Y0TtDKBqik089YRaFY=
Subject key identifier: B1:A1:7D:17:4F:80:A9:A6:58:CB:BD:AC:C3:84:56:4B:79:E3:3A:49
Certificate issuer: /CN=9E37B5F5D41561B61BB52734CEC0DD26DC074DDF
Certificate serial: 2809F8BC91C188BE76E29D551B371B2EA3F1905C
Authority key identifier: 9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/34352e3136372e38382e302f32322d3234203d3e20323637373335.roa
Signing time: Tue 04 Feb 2025 18:47:41 +0000
ROA not before: Tue 04 Feb 2025 18:42:41 +0000
ROA not after: Tue 03 Feb 2026 18:47:41 +0000
asID: 267735
IP address blocks: 45.167.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.crl
rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 05:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:09:f8:bc:91:c1:88:be:76:e2:9d:55:1b:37:1b:2e:a3:f1:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E37B5F5D41561B61BB52734CEC0DD26DC074DDF
Validity
Not Before: Feb 4 18:42:41 2025 GMT
Not After : Feb 3 18:47:41 2026 GMT
Subject: CN=B1A17D174F80A9A658CBBDACC384564B79E33A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:2a:56:79:8a:68:e7:fc:f6:db:ce:ac:70:
14:9f:f3:d0:87:cc:06:59:26:50:55:a8:63:7e:fb:
c3:db:71:81:1b:c8:e1:32:d5:60:24:0b:6d:dd:c6:
c8:fa:a1:ad:df:e9:4f:54:b3:dd:86:5c:f4:12:f6:
9f:35:23:21:a1:44:26:20:aa:98:51:67:2e:c4:53:
f8:cc:cf:ed:8a:d2:21:46:75:08:c3:a7:13:47:96:
3c:f6:43:17:1a:26:93:ac:3a:96:c7:cb:62:a7:83:
57:8a:b7:9b:1c:ea:7b:9f:c6:b8:66:c8:23:c3:3e:
c0:ca:ba:00:c4:01:dc:c0:1f:36:ea:cd:c6:62:d9:
72:8d:d1:a1:ab:1e:93:06:ca:4c:e2:75:1b:0c:5c:
2b:2f:ea:65:ae:5d:36:b0:16:fb:fb:83:1a:56:40:
86:ab:04:d6:7e:e0:21:c3:01:2c:08:51:42:11:b5:
bf:c8:60:e9:20:29:4b:6b:19:24:16:2e:be:9e:6a:
01:ce:6f:d3:91:84:57:42:2f:87:e4:1c:79:3f:1a:
b5:50:76:c9:eb:85:40:c4:ba:40:24:00:1c:85:93:
2e:51:bd:c9:f3:f7:ba:86:e3:9c:24:d2:04:06:10:
70:7d:29:ff:16:ac:09:fc:2d:ec:31:90:bd:62:75:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:7D:17:4F:80:A9:A6:58:CB:BD:AC:C3:84:56:4B:79:E3:3A:49
X509v3 Authority Key Identifier:
keyid:9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/34352e3136372e38382e302f32322d3234203d3e20323637373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:a1:6a:5d:65:cf:13:c9:fc:4a:9f:5a:d8:83:72:19:fb:52:
85:fe:ef:e0:5d:97:74:59:da:4c:d3:47:69:fc:6f:d9:2f:59:
be:4b:60:e8:87:16:33:04:41:11:16:84:17:44:5d:b8:e7:36:
48:02:91:75:52:9c:92:95:be:fe:a5:5c:15:73:c7:52:33:d9:
77:51:77:9b:ba:df:30:d3:db:d0:da:72:43:b2:f6:ff:ba:78:
d3:16:bb:db:55:d4:50:8b:45:fe:b4:f6:0e:b0:54:23:28:2d:
24:e6:75:50:c3:8a:92:25:a6:81:ea:77:06:be:24:74:d7:6d:
73:6a:de:fa:df:53:0a:0f:00:7d:61:1f:55:03:6f:af:3d:45:
39:75:fe:e2:40:bf:eb:82:00:f4:be:85:86:8a:68:0e:b8:9f:
fe:9a:c4:87:de:4f:86:1f:45:bb:b4:5b:25:c2:d2:97:f8:26:
af:09:d6:1c:66:98:e4:39:88:a2:94:15:ca:6d:e0:89:4e:3f:
d4:6b:c1:fe:81:41:50:c2:8a:35:31:87:d4:15:95:c3:35:de:
fb:8c:8e:a2:38:f8:83:ff:91:57:7d:be:f6:fd:42:81:d2:ae:
6a:91:0b:88:3d:6c:70:a9:66:22:49:da:4b:14:6a:68:45:b2:
3a:49:c4:4a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKAn4vJHBiL524p1VGzcbLqPxkFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUzN0I1RjVENDE1NjFCNjFCQjUyNzM0Q0VDMEREMjZE
QzA3NERERjAeFw0yNTAyMDQxODQyNDFaFw0yNjAyMDMxODQ3NDFaMDMxMTAvBgNV
BAMTKEIxQTE3RDE3NEY4MEE5QTY1OENCQkRBQ0MzODQ1NjRCNzlFMzNBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjCpWeYpo5/z2286scBSf89CH
zAZZJlBVqGN++8PbcYEbyOEy1WAkC23dxsj6oa3f6U9Us92GXPQS9p81IyGhRCYg
qphRZy7EU/jMz+2K0iFGdQjDpxNHljz2QxcaJpOsOpbHy2Kng1eKt5sc6nufxrhm
yCPDPsDKugDEAdzAHzbqzcZi2XKN0aGrHpMGykzidRsMXCsv6mWuXTawFvv7gxpW
QIarBNZ+4CHDASwIUUIRtb/IYOkgKUtrGSQWLr6eagHOb9ORhFdCL4fkHHk/GrVQ
dsnrhUDEukAkAByFky5Rvcnz97qG45wk0gQGEHB9Kf8WrAn8LewxkL1idaCVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsaF9F0+AqaZYy72sw4RWS3njOkkwHwYDVR0j
BBgwFoAUnje19dQVYbYbtSc0zsDdJtwHTd8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82M0ZFODkyMjJCNTA5QjU4RDI4NDY0OEQxQTBGNDFCRkU5
QzMyRkM4QTI2Rjk1OTFBRDgyMTUxODcwOEYzODYzLzAvOUUzN0I1RjVENDE1NjFC
NjFCQjUyNzM0Q0VDMEREMjZEQzA3NERERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTM3QjVGNUQ0MTU2MUI2MUJC
NTI3MzRDRUMwREQyNkRDMDc0RERGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjNGRTg5MjIyQjUwOUI1OEQyODQ2NDhEMUEwRjQxQkZFOUMzMkZDOEEy
NkY5NTkxQUQ4MjE1MTg3MDhGMzg2My8wLzM0MzUyZTMxMzYzNzJlMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2nWDAN
BgkqhkiG9w0BAQsFAAOCAQEAKKFqXWXPE8n8Sp9a2INyGftShf7v4F2XdFnaTNNH
afxv2S9Zvktg6IcWMwRBERaEF0RduOc2SAKRdVKckpW+/qVcFXPHUjPZd1F3m7rf
MNPb0NpyQ7L2/7p40xa721XUUItF/rT2DrBUIygtJOZ1UMOKkiWmgep3Br4kdNdt
c2re+t9TCg8AfWEfVQNvrz1FOXX+4kC/64IA9L6FhopoDrif/prEh95Phh9Fu7Rb
JcLSl/gmrwnWHGaY5DmIopQVym3giU4/1GvB/oFBUMKKNTGH1BWVwzXe+4yOojj4
g/+RV32+9v1CgdKuapELiD1scKlmIknaSxRqaEWyOknESg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:01 2025 by rpki-client