Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS198949.roa
File: AS198949.roa (raw, json)
Hash identifier: SC6nB3mdEXba0qL7PzqSavcCw+aZ22ZFMVDcdCRV3j4=
Subject key identifier: 46:6A:A5:E9:A2:BD:CA:9D:82:11:4D:D7:B9:6A:92:AA:BE:D0:CF:2F
Certificate issuer: /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial: 25033CC3A204ABB0552A8C9F66CF93D189A24C11
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS198949.roa
Signing time: Tue 04 Feb 2025 18:44:14 +0000
ROA not before: Tue 04 Feb 2025 18:39:14 +0000
ROA not after: Tue 03 Feb 2026 18:44:14 +0000
asID: 198949
IP address blocks: 181.112.35.0/24 maxlen: 24
181.112.62.0/24 maxlen: 24
181.112.136.0/24 maxlen: 24
181.112.137.0/24 maxlen: 24
181.112.138.0/24 maxlen: 24
181.112.155.0/24 maxlen: 24
181.112.158.0/24 maxlen: 24
181.112.220.0/24 maxlen: 24
181.112.226.0/24 maxlen: 24
181.113.20.0/24 maxlen: 24
181.113.21.0/24 maxlen: 24
181.113.25.0/24 maxlen: 24
181.113.27.0/24 maxlen: 24
181.113.57.0/24 maxlen: 24
181.113.66.0/24 maxlen: 24
181.113.120.0/24 maxlen: 24
181.196.4.0/24 maxlen: 24
181.196.18.0/24 maxlen: 24
181.196.26.0/24 maxlen: 24
181.196.29.0/24 maxlen: 24
181.196.49.0/24 maxlen: 24
181.196.51.0/24 maxlen: 24
181.211.13.0/24 maxlen: 24
181.211.36.0/24 maxlen: 24
181.211.37.0/24 maxlen: 24
181.211.115.0/24 maxlen: 24
181.211.132.0/24 maxlen: 24
181.211.242.0/24 maxlen: 24
186.42.188.0/24 maxlen: 24
186.42.193.0/24 maxlen: 24
186.42.213.0/24 maxlen: 24
186.46.31.0/24 maxlen: 24
186.46.74.0/24 maxlen: 24
186.46.86.0/24 maxlen: 24
186.46.151.0/24 maxlen: 24
186.47.16.0/24 maxlen: 24
186.47.18.0/24 maxlen: 24
186.47.40.0/24 maxlen: 24
186.47.74.0/24 maxlen: 24
186.47.86.0/24 maxlen: 24
186.47.101.0/24 maxlen: 24
186.47.153.0/24 maxlen: 24
186.47.213.0/24 maxlen: 24
186.47.225.0/24 maxlen: 24
186.178.5.0/24 maxlen: 24
186.178.8.0/24 maxlen: 24
186.178.32.0/24 maxlen: 24
190.11.14.0/24 maxlen: 24
190.11.18.0/24 maxlen: 24
190.11.20.0/24 maxlen: 24
190.11.31.0/24 maxlen: 24
190.152.23.0/24 maxlen: 24
190.152.44.0/24 maxlen: 24
190.152.45.0/24 maxlen: 24
190.152.46.0/24 maxlen: 24
190.152.47.0/24 maxlen: 24
190.152.52.0/24 maxlen: 24
190.152.53.0/24 maxlen: 24
190.152.54.0/24 maxlen: 24
190.152.55.0/24 maxlen: 24
190.152.62.0/24 maxlen: 24
190.152.75.0/24 maxlen: 24
190.152.147.0/24 maxlen: 24
190.152.152.0/24 maxlen: 24
190.152.153.0/24 maxlen: 24
190.152.154.0/24 maxlen: 24
190.152.155.0/24 maxlen: 24
190.152.156.0/24 maxlen: 24
190.152.157.0/24 maxlen: 24
190.152.215.0/24 maxlen: 24
190.152.245.0/24 maxlen: 24
190.152.255.0/24 maxlen: 24
190.214.0.0/24 maxlen: 24
190.214.23.0/24 maxlen: 24
190.214.46.0/24 maxlen: 24
190.214.49.0/24 maxlen: 24
190.214.216.0/24 maxlen: 24
200.107.7.0/24 maxlen: 24
200.107.9.0/24 maxlen: 24
200.107.10.0/24 maxlen: 24
200.107.15.0/24 maxlen: 24
200.107.34.0/24 maxlen: 24
200.107.61.0/24 maxlen: 24
200.125.193.0/24 maxlen: 24
200.125.206.0/24 maxlen: 24
200.125.208.0/24 maxlen: 24
200.125.209.0/24 maxlen: 24
200.125.247.0/24 maxlen: 24
201.219.1.0/24 maxlen: 24
2800:370::/48 maxlen: 48
2800:370:10::/48 maxlen: 48
2800:4f0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 28 Mar 2025 02:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:03:3c:c3:a2:04:ab:b0:55:2a:8c:9f:66:cf:93:d1:89:a2:4c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Validity
Not Before: Feb 4 18:39:14 2025 GMT
Not After : Feb 3 18:44:14 2026 GMT
Subject: CN=466AA5E9A2BDCA9D82114DD7B96A92AABED0CF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:20:5c:02:b7:50:b9:6c:08:31:3e:93:62:
e7:82:8f:ff:8c:97:c1:ad:16:6d:63:5e:6d:82:1b:
f5:02:e4:ad:f1:b7:4a:e2:83:56:d9:af:bb:13:eb:
db:e7:02:a7:ae:c0:b9:b7:92:10:46:5a:c3:11:85:
32:32:b8:45:8d:43:10:aa:9f:a1:a6:d1:24:0d:9e:
c7:78:d0:c7:e9:db:74:5e:9c:61:08:91:90:a0:a7:
4a:a0:55:5c:73:9e:0c:97:71:86:07:4a:f6:a1:c5:
fa:72:6a:7f:fc:f3:51:b4:3d:ed:a7:20:07:a7:de:
85:91:27:d2:7c:15:71:4d:bc:eb:dc:69:e7:00:33:
15:63:04:ef:84:f4:de:f1:eb:99:fc:d8:80:34:3b:
a0:25:61:03:1c:8e:b5:33:ad:11:38:7c:06:3d:3c:
56:20:db:bb:b3:eb:18:bd:8d:f2:37:42:71:f4:ab:
b1:f7:9d:21:64:be:6e:a3:3b:07:8a:7f:2d:ba:77:
66:1f:53:86:a1:da:2f:22:ec:fa:95:b2:18:27:46:
4c:bf:c9:0a:b0:10:db:bc:ea:4b:60:49:b1:9f:52:
46:7b:81:db:5b:00:e4:15:56:30:b6:56:54:3e:2a:
0e:c6:14:df:de:7e:7d:b0:fa:87:6f:07:89:1f:c5:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:A5:E9:A2:BD:CA:9D:82:11:4D:D7:B9:6A:92:AA:BE:D0:CF:2F
X509v3 Authority Key Identifier:
keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS198949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.112.35.0/24
181.112.62.0/24
181.112.136.0-181.112.138.255
181.112.155.0/24
181.112.158.0/24
181.112.220.0/24
181.112.226.0/24
181.113.20.0/23
181.113.25.0/24
181.113.27.0/24
181.113.57.0/24
181.113.66.0/24
181.113.120.0/24
181.196.4.0/24
181.196.18.0/24
181.196.26.0/24
181.196.29.0/24
181.196.49.0/24
181.196.51.0/24
181.211.13.0/24
181.211.36.0/23
181.211.115.0/24
181.211.132.0/24
181.211.242.0/24
186.42.188.0/24
186.42.193.0/24
186.42.213.0/24
186.46.31.0/24
186.46.74.0/24
186.46.86.0/24
186.46.151.0/24
186.47.16.0/24
186.47.18.0/24
186.47.40.0/24
186.47.74.0/24
186.47.86.0/24
186.47.101.0/24
186.47.153.0/24
186.47.213.0/24
186.47.225.0/24
186.178.5.0/24
186.178.8.0/24
186.178.32.0/24
190.11.14.0/24
190.11.18.0/24
190.11.20.0/24
190.11.31.0/24
190.152.23.0/24
190.152.44.0/22
190.152.52.0/22
190.152.62.0/24
190.152.75.0/24
190.152.147.0/24
190.152.152.0-190.152.157.255
190.152.215.0/24
190.152.245.0/24
190.152.255.0/24
190.214.0.0/24
190.214.23.0/24
190.214.46.0/24
190.214.49.0/24
190.214.216.0/24
200.107.7.0/24
200.107.9.0-200.107.10.255
200.107.15.0/24
200.107.34.0/24
200.107.61.0/24
200.125.193.0/24
200.125.206.0/24
200.125.208.0/23
200.125.247.0/24
201.219.1.0/24
IPv6:
2800:370::/48
2800:370:10::/48
2800:4f0:8::/48
Signature Algorithm: sha256WithRSAEncryption
58:5b:4c:5c:39:16:c6:96:e4:d9:8d:5d:da:06:78:c8:97:a5:
de:83:a7:66:4e:41:78:90:83:a6:2f:20:5e:88:57:d2:91:bf:
69:a6:10:0c:a2:cd:71:05:db:59:db:e8:75:a6:e2:10:15:b5:
24:d9:fc:59:80:fb:cd:df:8a:5c:ff:38:68:20:ce:41:a7:67:
02:54:f1:0c:fa:76:27:3f:0e:0d:1d:37:80:ba:12:12:50:d6:
a6:05:24:3b:f4:ca:cd:87:06:db:42:3d:84:ec:29:5b:9c:b3:
96:94:33:9d:70:4d:42:c6:4b:2e:5a:96:5d:08:c8:e3:77:9f:
41:15:e1:3b:3f:2a:65:0a:0d:7e:b9:af:58:5e:c4:96:a0:21:
b7:08:53:30:79:14:b1:c9:fe:17:7a:d2:a6:88:b4:24:3e:66:
85:63:d7:8a:ed:cb:96:ec:bf:0b:12:ae:5f:5a:ec:82:07:f9:
df:82:8a:2d:f2:5e:1c:e9:3b:3a:13:5b:24:93:d1:d9:19:43:
69:4a:85:11:0b:d6:cc:50:e2:7e:ad:1a:0f:e9:0d:c4:d4:d0:
48:f3:f1:a5:c1:56:9a:76:b4:2b:1c:6a:26:b0:89:2d:ce:e8:
0c:f1:fe:05:53:3e:07:6c:b2:e0:db:ae:e0:83:b1:31:3f:f2:
bc:ec:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 24 20:41:07 2025 by rpki-client