Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa
File: 34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier: oP+8QeKWHWmpAFGtwZZ5D4gMJRvkqKGnuVLcpfENka0=
Subject key identifier: 20:4C:B8:FC:B5:99:F7:4F:74:40:DC:D2:D4:66:84:3C:05:12:1A:42
Certificate issuer: /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial: 288807AB484298FF88408DF5662F6070F0E6ECED
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa
Signing time: Tue 04 Feb 2025 18:45:22 +0000
ROA not before: Tue 04 Feb 2025 18:40:22 +0000
ROA not after: Tue 03 Feb 2026 18:45:22 +0000
asID: 266684
IP address blocks: 45.228.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 07:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:88:07:ab:48:42:98:ff:88:40:8d:f5:66:2f:60:70:f0:e6:ec:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Validity
Not Before: Feb 4 18:40:22 2025 GMT
Not After : Feb 3 18:45:22 2026 GMT
Subject: CN=204CB8FCB599F74F7440DCD2D466843C05121A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:4c:34:bb:b8:d2:b6:f6:41:ed:bf:f9:b2:
3d:6b:5e:e2:20:b1:ed:29:56:70:6d:fc:06:2e:5d:
14:7b:4c:82:e2:0f:b0:1e:69:cb:5a:9c:f8:86:3d:
33:b5:9a:53:48:f5:e9:dc:d8:9c:ef:50:a7:e4:dd:
36:fb:5b:d7:9b:be:3c:07:d9:a3:6b:8c:aa:1a:00:
2d:e9:51:b0:55:71:85:ed:fa:35:5f:13:bf:4d:41:
ee:ad:d1:80:4e:91:30:6b:cf:bf:a5:b7:d9:9e:cb:
f3:ff:c6:ce:73:0b:cd:e6:38:37:ff:85:23:e0:6f:
17:f1:6d:b8:05:37:37:4c:65:64:40:db:63:55:16:
77:ca:7f:10:a3:f3:7f:bc:90:18:5b:8c:4e:20:a9:
8b:2c:be:fd:05:a9:09:ae:6e:a8:15:94:2a:4f:3c:
c0:9c:6b:83:c4:71:e4:83:11:9a:b0:10:f1:9a:ae:
67:6c:dd:9e:39:19:49:e7:eb:34:3d:74:f5:5e:4a:
12:ba:7d:45:0e:8c:9e:57:9f:fa:87:1c:5a:d4:d3:
d8:8a:95:d9:82:bd:71:6d:84:17:56:aa:db:5c:53:
ef:6a:c8:c2:38:31:33:ea:50:98:a5:22:04:c6:6c:
66:ee:a4:4c:c7:6c:c5:a6:35:3e:20:76:3b:07:93:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:B8:FC:B5:99:F7:4F:74:40:DC:D2:D4:66:84:3C:05:12:1A:42
X509v3 Authority Key Identifier:
keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.221.0/24
Signature Algorithm: sha256WithRSAEncryption
93:27:5e:e5:c7:84:b7:9c:94:7a:25:53:c6:d2:79:d6:dd:81:
f8:e0:22:02:74:e5:50:73:22:bb:7e:51:fb:d9:16:53:48:d6:
99:6c:e7:f9:57:ae:18:bd:74:48:42:e6:4a:4b:52:6e:a3:96:
83:22:eb:8f:4f:a5:87:0c:30:51:33:e5:07:55:af:fc:10:ec:
fb:a6:11:18:fc:6e:1e:a9:39:b2:c4:97:ac:1a:f4:91:5b:81:
9d:3c:50:8e:e3:ea:44:72:aa:af:e6:9a:6e:83:2b:b3:a5:54:
d6:ae:c6:c5:8f:68:f2:05:a0:d7:de:4d:2e:e3:90:a1:c2:31:
75:f9:41:fa:54:58:00:5f:de:a0:6a:aa:ca:e8:ec:2f:98:d4:
48:6a:82:51:89:54:d0:14:e1:41:68:30:3f:78:56:c2:f3:ae:
40:3f:cd:f2:cd:42:51:d9:94:c1:9b:a1:3e:4e:7c:f8:42:fc:
15:af:4f:7d:54:e6:b7:7e:18:a4:04:89:3e:90:08:a2:30:39:
14:ac:97:61:f2:cf:66:ab:af:28:58:3f:b4:4c:e9:2b:19:d9:
bd:b2:3a:d1:30:13:90:d2:44:ce:1c:01:19:cc:8c:15:29:28:
25:d1:64:7c:23:af:e7:54:ca:28:27:db:9f:71:b8:3e:0e:b9:
57:c1:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:32 2025 by rpki-client