Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132352e302f32342d3234203d3e20323637383831.roa
File: 34352e3137372e3132352e302f32342d3234203d3e20323637383831.roa (raw, json)
Hash identifier: RbI44PdbiJ2yzAqUtdkFBygQTXyQiPyNJjoEo9Choy0=
Subject key identifier: DC:D6:2C:47:8F:DB:80:67:4B:FE:84:1F:A7:4F:D2:BE:BD:89:B6:C8
Certificate issuer: /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial: 129829E0E2A842CAB040334238E643F289A8714E
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132352e302f32342d3234203d3e20323637383831.roa
Signing time: Tue 04 Feb 2025 18:47:44 +0000
ROA not before: Tue 04 Feb 2025 18:42:44 +0000
ROA not after: Tue 03 Feb 2026 18:47:44 +0000
asID: 267881
IP address blocks: 45.177.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl
rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 07:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:98:29:e0:e2:a8:42:ca:b0:40:33:42:38:e6:43:f2:89:a8:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Validity
Not Before: Feb 4 18:42:44 2025 GMT
Not After : Feb 3 18:47:44 2026 GMT
Subject: CN=DCD62C478FDB80674BFE841FA74FD2BEBD89B6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:8b:1e:9d:e2:a3:5a:1b:e8:d0:48:32:07:
fe:52:a5:6a:32:21:07:21:e8:b4:e6:05:8e:21:29:
26:62:7f:4f:75:01:e6:a1:f4:ba:e1:d7:9f:7c:84:
19:8d:75:0b:f5:19:18:6d:bd:27:2d:fc:4f:50:41:
41:fa:0e:f1:58:f6:b2:66:e1:33:30:a8:d4:62:35:
74:44:76:e7:be:71:48:ad:39:14:1a:a6:95:8f:c2:
b6:9c:2a:b2:9e:7c:f1:0c:ed:68:26:fb:b1:62:00:
1e:22:77:67:48:a6:76:40:69:47:ea:a9:19:9e:8f:
eb:bb:d8:f3:32:c4:cc:21:bf:36:fe:d5:21:fe:b9:
ee:c3:e4:30:58:ba:0a:97:7a:7d:7e:ca:47:32:7c:
4b:91:d6:5c:ce:ee:98:22:0a:c3:09:b9:6a:47:52:
8f:2c:39:88:04:17:f0:0d:ee:d9:17:91:35:f4:93:
9b:3e:c8:9d:c3:54:4c:c6:3d:80:f4:77:bf:af:df:
23:9d:5c:25:94:cd:56:2a:f9:d5:7c:6d:7c:bb:4d:
1d:9a:ed:5c:8b:c5:17:8a:03:24:37:a7:69:5d:78:
4f:55:4c:7e:6f:ed:58:b6:53:59:da:a6:27:0d:37:
6c:76:07:8c:b5:31:eb:b3:28:3c:8f:76:5c:81:76:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:2C:47:8F:DB:80:67:4B:FE:84:1F:A7:4F:D2:BE:BD:89:B6:C8
X509v3 Authority Key Identifier:
keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132352e302f32342d3234203d3e20323637383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.125.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c2:d7:f6:be:fe:c5:39:36:d5:a7:02:f0:13:ba:2b:9a:1d:
cf:48:3d:24:f4:19:9c:f4:3a:7d:7a:a1:e8:bb:9d:90:6b:cf:
4e:2c:ce:e5:ca:20:99:18:cb:19:3e:a1:c5:3f:a5:96:d6:ad:
f7:ab:3e:fe:50:99:df:c1:c3:f5:39:a1:f4:19:3b:ce:71:ea:
e6:cd:15:2f:69:a2:2e:8c:32:e5:b9:bf:fc:59:69:b4:07:7f:
67:fe:97:aa:1e:a9:ab:2f:3e:56:7e:8c:fc:f5:e7:5d:a1:67:
89:1b:f4:57:91:b0:a3:35:e8:7b:ea:10:cc:2d:9e:54:67:df:
6f:60:4d:92:a0:d8:77:6b:ac:c8:4a:4f:7f:a4:83:10:5c:f1:
bc:f8:74:cd:26:99:20:2b:51:0a:a7:21:ca:d7:0b:14:50:7a:
99:1b:5b:6d:45:ab:6d:a5:60:18:63:52:b8:12:ea:f8:cb:a7:
55:1a:d2:94:15:0c:57:73:b5:44:e4:80:0b:74:47:78:87:c0:
22:01:3a:5c:89:7b:0f:0c:0f:54:f7:be:a3:48:70:fa:05:e7:
00:5c:0f:a8:f5:da:86:03:66:56:06:15:f0:4d:ee:b4:e3:fc:
89:db:b4:8c:20:5f:de:2c:61:3a:2b:0d:6a:79:e8:10:b3:af:
2b:ba:88:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEpgp4OKoQsqwQDNCOOZD8omocU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIxNDVGQUZDNzA4QzNCRDEzNjE5NUMzQTJBNDA1OTAy
NEVFNDA0QTAeFw0yNTAyMDQxODQyNDRaFw0yNjAyMDMxODQ3NDRaMDMxMTAvBgNV
BAMTKERDRDYyQzQ3OEZEQjgwNjc0QkZFODQxRkE3NEZEMkJFQkQ4OUI2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwIseneKjWhvo0EgyB/5SpWoy
IQch6LTmBY4hKSZif091Aeah9Lrh1598hBmNdQv1GRhtvSct/E9QQUH6DvFY9rJm
4TMwqNRiNXREdue+cUitORQappWPwracKrKefPEM7Wgm+7FiAB4id2dIpnZAaUfq
qRmej+u72PMyxMwhvzb+1SH+ue7D5DBYugqXen1+ykcyfEuR1lzO7pgiCsMJuWpH
Uo8sOYgEF/AN7tkXkTX0k5s+yJ3DVEzGPYD0d7+v3yOdXCWUzVYq+dV8bXy7TR2a
7VyLxReKAyQ3p2ldeE9VTH5v7Vi2U1napicNN2x2B4y1MeuzKDyPdlyBdmnfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3NYsR4/bgGdL/oQfp0/Svr2JtsgwHwYDVR0j
BBgwFoAU2xRfr8cIw70TYZXDoqQFkCTuQEowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MURBQkYzNTgwRTZBQTVFQzlCRUQ5QTk5ODZFQjcwMEFD
MjgwMEREODNCQkFDODcxMzA4QzZBMTg2MkREODhDLzAvREIxNDVGQUZDNzA4QzNC
RDEzNjE5NUMzQTJBNDA1OTAyNEVFNDA0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjE0NUZBRkM3MDhDM0JEMTM2
MTk1QzNBMkE0MDU5MDI0RUU0MDRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzFEQUJGMzU4MEU2QUE1RUM5QkVEOUE5OTg2RUI3MDBBQzI4MDBERDgz
QkJBQzg3MTMwOEM2QTE4NjJERDg4Qy8wLzM0MzUyZTMxMzczNzJlMzEzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbF9
MA0GCSqGSIb3DQEBCwUAA4IBAQCZwtf2vv7FOTbVpwLwE7ormh3PSD0k9Bmc9Dp9
eqHou52Qa89OLM7lyiCZGMsZPqHFP6WW1q33qz7+UJnfwcP1OaH0GTvOcermzRUv
aaIujDLlub/8WWm0B39n/peqHqmrLz5Wfoz89eddoWeJG/RXkbCjNeh76hDMLZ5U
Z99vYE2SoNh3a6zISk9/pIMQXPG8+HTNJpkgK1EKpyHK1wsUUHqZG1ttRattpWAY
Y1K4Eur4y6dVGtKUFQxXc7VE5IALdEd4h8AiATpciXsPDA9U976jSHD6BecAXA+o
9dqGA2ZWBhXwTe604/yJ27SMIF/eLGE6Kw1qeegQs68ruohP
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:23 2025 by rpki-client