Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
File: AS3816.roa (raw, json)
Hash identifier: zx4QvNJynRa9jAFtvN72i5FLTAbXL5p9XuaGXKAtEzw=
Subject key identifier: 0D:EA:E8:D6:1B:F6:AC:1F:CD:49:2B:47:38:56:E4:13:B5:56:AB:E7
Certificate issuer: /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial: 7D5B26DA769356E155B948F0813375C3D4C25824
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
Signing time: Mon 21 Jul 2025 13:30:00 +0000
ROA not before: Mon 21 Jul 2025 13:25:00 +0000
ROA not after: Mon 20 Jul 2026 13:30:00 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 22
152.200.32.0/19 maxlen: 24
152.200.128.0/18 maxlen: 22
152.200.192.0/20 maxlen: 22
152.200.208.0/20 maxlen: 24
152.200.224.0/21 maxlen: 21
152.200.232.0/24 maxlen: 24
152.200.233.0/24 maxlen: 24
152.200.234.0/24 maxlen: 24
152.200.235.0/24 maxlen: 24
152.200.236.0/24 maxlen: 24
152.200.237.0/24 maxlen: 24
152.200.238.0/23 maxlen: 24
152.200.240.0/24 maxlen: 24
152.200.241.0/24 maxlen: 24
152.200.242.0/24 maxlen: 24
152.200.243.0/24 maxlen: 24
152.200.244.0/24 maxlen: 24
152.201.32.0/19 maxlen: 24
152.201.64.0/18 maxlen: 24
152.201.128.0/17 maxlen: 24
152.202.0.0/15 maxlen: 24
152.204.0.0/17 maxlen: 24
152.204.128.0/22 maxlen: 24
152.204.132.0/24 maxlen: 24
152.204.134.0/24 maxlen: 24
152.204.136.0/21 maxlen: 21
152.204.144.0/20 maxlen: 21
152.204.160.0/19 maxlen: 21
152.204.192.0/18 maxlen: 21
152.205.0.0/18 maxlen: 21
152.205.192.0/18 maxlen: 18
161.10.0.0/18 maxlen: 22
161.10.64.0/20 maxlen: 20
161.10.64.0/22 maxlen: 22
161.10.80.0/20 maxlen: 22
161.10.96.0/19 maxlen: 22
161.10.128.0/17 maxlen: 22
161.18.0.0/20 maxlen: 20
161.18.32.0/19 maxlen: 22
161.18.64.0/19 maxlen: 22
161.18.104.0/21 maxlen: 22
161.18.112.0/20 maxlen: 22
161.18.128.0/17 maxlen: 22
167.0.0.0/16 maxlen: 20
179.32.0.0/16 maxlen: 24
179.33.0.0/18 maxlen: 24
179.33.64.0/19 maxlen: 24
179.33.96.0/21 maxlen: 24
179.33.104.0/22 maxlen: 24
179.33.110.0/23 maxlen: 24
179.33.112.0/20 maxlen: 24
179.33.128.0/17 maxlen: 24
181.32.0.0/15 maxlen: 20
181.234.0.0/15 maxlen: 20
181.236.0.0/19 maxlen: 19
181.236.32.0/19 maxlen: 19
181.236.64.0/19 maxlen: 19
181.236.96.0/19 maxlen: 19
181.236.128.0/19 maxlen: 20
181.236.160.0/20 maxlen: 20
181.236.176.0/20 maxlen: 24
181.236.200.0/21 maxlen: 21
181.236.208.0/22 maxlen: 22
181.236.214.0/23 maxlen: 23
181.236.217.0/24 maxlen: 24
181.236.218.0/24 maxlen: 24
181.236.221.0/24 maxlen: 24
181.236.222.0/24 maxlen: 24
181.236.223.0/24 maxlen: 24
181.236.226.0/24 maxlen: 24
181.236.228.0/22 maxlen: 24
181.236.232.0/21 maxlen: 24
181.236.240.0/22 maxlen: 24
181.237.0.0/16 maxlen: 20
186.98.0.0/16 maxlen: 22
186.99.0.0/17 maxlen: 22
186.99.128.0/18 maxlen: 22
186.99.192.0/19 maxlen: 22
186.99.224.0/20 maxlen: 22
186.99.240.0/21 maxlen: 22
186.99.252.0/23 maxlen: 24
186.99.254.0/24 maxlen: 24
186.102.0.0/17 maxlen: 24
186.102.160.0/19 maxlen: 24
186.102.192.0/24 maxlen: 24
186.103.0.0/18 maxlen: 18
186.103.64.0/18 maxlen: 24
186.112.0.0/16 maxlen: 24
186.113.0.0/21 maxlen: 24
186.113.8.0/24 maxlen: 24
186.113.10.0/23 maxlen: 24
186.113.14.0/24 maxlen: 24
186.113.16.0/21 maxlen: 24
186.113.24.0/22 maxlen: 24
186.113.28.0/23 maxlen: 24
186.113.30.0/24 maxlen: 24
186.113.32.0/19 maxlen: 23
186.113.64.0/18 maxlen: 23
186.113.128.0/19 maxlen: 23
186.113.160.0/21 maxlen: 23
186.113.168.0/23 maxlen: 23
186.113.172.0/22 maxlen: 24
186.113.176.0/20 maxlen: 24
186.113.192.0/18 maxlen: 24
186.114.0.0/15 maxlen: 24
186.116.0.0/14 maxlen: 24
186.168.0.0/17 maxlen: 24
186.168.128.0/18 maxlen: 24
186.168.192.0/20 maxlen: 24
186.168.208.0/21 maxlen: 24
186.168.216.0/22 maxlen: 24
186.168.224.0/19 maxlen: 24
186.169.3.0/24 maxlen: 24
186.169.4.0/22 maxlen: 24
186.169.8.0/21 maxlen: 24
186.169.16.0/20 maxlen: 24
186.169.32.0/19 maxlen: 24
186.169.64.0/18 maxlen: 24
186.169.128.0/17 maxlen: 24
186.170.0.0/18 maxlen: 24
186.170.64.0/20 maxlen: 24
186.170.80.0/21 maxlen: 24
186.170.88.0/22 maxlen: 24
186.170.92.0/23 maxlen: 24
186.170.94.0/24 maxlen: 24
186.170.96.0/19 maxlen: 20
186.170.128.0/17 maxlen: 20
186.171.0.0/17 maxlen: 20
186.171.128.0/17 maxlen: 24
190.13.96.0/20 maxlen: 24
190.52.0.0/19 maxlen: 24
190.65.0.0/16 maxlen: 24
190.66.0.0/22 maxlen: 24
190.66.5.0/24 maxlen: 24
190.66.6.0/23 maxlen: 24
190.66.8.0/21 maxlen: 24
190.66.16.0/20 maxlen: 24
190.66.32.0/19 maxlen: 24
190.66.64.0/20 maxlen: 24
190.66.80.0/21 maxlen: 24
190.66.88.0/21 maxlen: 21
190.66.88.0/22 maxlen: 24
190.66.96.0/19 maxlen: 22
190.66.128.0/19 maxlen: 22
190.66.160.0/20 maxlen: 22
190.66.176.0/22 maxlen: 22
190.66.184.0/21 maxlen: 24
190.66.192.0/18 maxlen: 24
190.67.0.0/16 maxlen: 24
190.68.0.0/15 maxlen: 24
190.252.0.0/14 maxlen: 24
191.104.0.0/16 maxlen: 19
191.105.0.0/16 maxlen: 24
191.106.0.0/17 maxlen: 24
191.106.128.0/17 maxlen: 20
191.107.0.0/16 maxlen: 20
191.108.0.0/14 maxlen: 20
200.21.0.0/16 maxlen: 24
200.30.96.0/19 maxlen: 24
200.89.192.0/19 maxlen: 24
201.228.0.0/17 maxlen: 24
201.228.128.0/18 maxlen: 24
201.228.208.0/20 maxlen: 22
201.228.224.0/19 maxlen: 22
2800:680::/32 maxlen: 32
2800:8b0::/38 maxlen: 38
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 30 Jul 2025 02:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5b:26:da:76:93:56:e1:55:b9:48:f0:81:33:75:c3:d4:c2:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Validity
Not Before: Jul 21 13:25:00 2025 GMT
Not After : Jul 20 13:30:00 2026 GMT
Subject: CN=0DEAE8D61BF6AC1FCD492B473856E413B556ABE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:29:8b:46:51:19:78:b6:c3:2b:2c:d7:19:
3c:3b:1f:e1:c6:b8:06:cb:46:49:a4:23:29:27:a2:
92:68:67:0a:71:00:b7:d4:23:f0:d0:ef:a6:d5:0c:
be:65:50:bb:58:4c:75:20:65:36:f9:97:26:0c:a2:
c5:0d:e5:b7:e5:6e:fa:40:a1:18:f5:af:30:dd:b0:
43:1b:6d:f9:96:6d:c4:74:97:54:e6:f4:fe:52:23:
55:7a:eb:45:3e:13:a4:6d:b3:b3:1e:3b:a5:98:a0:
49:2f:86:17:15:2d:d4:91:c1:36:b6:39:7b:09:ee:
fe:be:94:44:b6:8d:64:9b:69:cf:29:e4:b8:99:cf:
e0:7f:4a:fa:3c:f7:7a:1b:86:20:ba:26:c4:d4:10:
bf:b5:2e:95:20:33:a9:37:e9:54:ed:20:60:08:5e:
1d:35:fa:0b:4f:cc:2d:de:54:67:18:ec:2f:bb:8f:
b7:b5:49:a6:cd:45:e0:50:54:9a:68:2a:c5:cb:ed:
b7:ab:c0:30:8c:6a:d7:38:1c:d4:ad:c2:2c:d9:7a:
db:ab:97:96:05:c1:89:64:08:aa:4e:c4:e4:c0:13:
3e:f2:79:36:44:7e:01:e4:3b:93:72:84:cc:3a:92:
ff:ae:46:7b:fb:21:b2:a2:fa:e9:fb:cf:59:99:6e:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:E8:D6:1B:F6:AC:1F:CD:49:2B:47:38:56:E4:13:B5:56:AB:E7
X509v3 Authority Key Identifier:
keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.244.255
152.201.32.0-152.204.132.255
152.204.134.0/24
152.204.136.0-152.205.63.255
152.205.192.0/18
161.10.0.0/16
161.18.0.0/20
161.18.32.0-161.18.95.255
161.18.104.0-161.18.255.255
167.0.0.0/16
179.32.0.0-179.33.107.255
179.33.110.0-179.33.255.255
181.32.0.0/15
181.234.0.0-181.236.191.255
181.236.200.0-181.236.211.255
181.236.214.0/23
181.236.217.0-181.236.218.255
181.236.221.0-181.236.223.255
181.236.226.0/24
181.236.228.0-181.236.243.255
181.237.0.0/16
186.98.0.0-186.99.247.255
186.99.252.0-186.99.254.255
186.102.0.0/17
186.102.160.0-186.102.192.255
186.103.0.0/17
186.112.0.0-186.113.8.255
186.113.10.0/23
186.113.14.0/24
186.113.16.0-186.113.30.255
186.113.32.0-186.113.169.255
186.113.172.0-186.119.255.255
186.168.0.0-186.168.219.255
186.168.224.0/19
186.169.3.0-186.170.94.255
186.170.96.0-186.171.255.255
190.13.96.0/20
190.52.0.0/19
190.65.0.0-190.66.3.255
190.66.5.0-190.66.179.255
190.66.184.0-190.69.255.255
190.252.0.0/14
191.104.0.0/13
200.21.0.0/16
200.30.96.0/19
200.89.192.0/19
201.228.0.0-201.228.191.255
201.228.208.0-201.228.255.255
IPv6:
2800:680::/32
2800:8b0::/38
Signature Algorithm: sha256WithRSAEncryption
a7:55:65:17:10:25:5d:65:4a:98:1a:1d:29:92:aa:7c:0e:6f:
b7:e2:09:38:aa:0b:79:b5:86:2f:0a:55:cc:c9:16:40:da:02:
a6:b7:f5:0f:c1:77:13:d6:90:14:8f:cb:4a:0c:0b:5f:a8:f4:
57:84:99:e4:02:0f:0f:e9:82:96:44:55:f3:1f:2b:55:10:48:
50:29:5f:27:98:8e:63:ca:56:25:20:6a:7f:40:d2:13:70:1f:
84:8a:2c:b9:a3:2b:9f:72:8b:82:82:08:c3:67:a7:ab:86:f9:
f4:17:bd:5d:19:c4:cc:18:77:bd:f7:2d:28:b8:3f:92:14:91:
c0:10:bc:57:83:90:8b:0a:2a:b4:2a:02:70:c1:09:4b:00:69:
f7:7f:1c:5e:43:96:94:2f:04:4c:79:92:1e:8a:4c:d5:11:02:
6e:dc:f3:ee:09:fa:53:1b:8e:1a:eb:66:66:4e:c2:3a:ee:a1:
f4:04:e9:08:a1:8b:24:bd:a5:f4:ff:8b:bf:d2:b4:3b:41:8c:
0b:06:67:bb:8a:73:de:67:8b:c8:44:eb:c9:06:b3:f6:5b:57:
7c:27:41:6d:ea:46:08:58:29:0d:11:63:06:d7:9c:51:fb:e2:
5a:10:8b:33:f5:f1:88:e8:20:8b:b4:d0:e8:79:89:1b:a2:c3:
4a:a4:b3:8a
-----BEGIN CERTIFICATE-----
MIIHizCCBnOgAwIBAgIUfVsm2naTVuFVuUjwgTN1w9TCWCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNjIzNkI5NkVFMDA5MzRGQ0QzOUE1NjBFNUJDMDRF
QjdCOUVBNDAeFw0yNTA3MjExMzI1MDBaFw0yNjA3MjAxMzMwMDBaMDMxMTAvBgNV
BAMTKDBERUFFOEQ2MUJGNkFDMUZDRDQ5MkI0NzM4NTZFNDEzQjU1NkFCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKwCmLRlEZeLbDKyzXGTw7H+HG
uAbLRkmkIyknopJoZwpxALfUI/DQ76bVDL5lULtYTHUgZTb5lyYMosUN5bflbvpA
oRj1rzDdsEMbbfmWbcR0l1Tm9P5SI1V660U+E6Rts7MeO6WYoEkvhhcVLdSRwTa2
OXsJ7v6+lES2jWSbac8p5LiZz+B/Svo893obhiC6JsTUEL+1LpUgM6k36VTtIGAI
Xh01+gtPzC3eVGcY7C+7j7e1SabNReBQVJpoKsXL7berwDCMatc4HNStwizZetur
l5YFwYlkCKpOxOTAEz7yeTZEfgHkO5NyhMw6kv+uRnv7IbKi+un7z1mZboDJAgMB
AAGjggSVMIIEkTAdBgNVHQ4EFgQUDero1hv2rB/NSStHOFbkE7VWq+cwHwYDVR0j
BBgwFoAU2wYja5buAJNPzTmlYOW8BOt7nqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIx
RDI0N0Q3RTc3RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvREIwNjIzNkI5NkVFMDA5
MzRGQ0QzOUE1NjBFNUJDMDRFQjdCOUVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA2MjM2Qjk2RUUwMDkzNEZD
RDM5QTU2MEU1QkMwNEVCN0I5RUE0LmNlcjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMG
CCsGAQUFBzALhndyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIxRDI0N0Q3RTc3
RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvQVMzODE2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGwYIKwYBBQUHAQcBAf8EggIKMIICBjCCAesEAgABMIIB
4zALAwMDmMgDBACYyPQwDAMEBZjJIAMEAJjMhAMEAJjMhjAMAwQDmMyIAwQGmM0A
AwQGmM3AAwMAoQoDBAShEgAwDAMEBaESIAMEBaESQDALAwQDoRJoAwMAoRIDAwCn
ADALAwMFsyADBAKzIWgwCwMEAbMhbgMDAbMgAwMBtSAwCwMDAbXqAwQGteyAMAwD
BAO17MgDBAK17NADBAG17NYwDAMEALXs2QMEALXs2jAMAwQAtezdAwQFtezAAwQA
teziMAwDBAK17OQDBAK17PADAwC17TALAwMBumIDBAO6Y/AwDAMEArpj/AMEALpj
/gMEB7pmADAMAwQFumagAwQAumbAAwQHumcAMAsDAwS6cAMEALpxCAMEAbpxCgME
ALpxDjAMAwQEunEQAwQAunEeMAwDBAW6cSADBAG6cagwCwMEArpxrAMDA7pwMAsD
AwO6qAMEArqo2AMEBbqo4DAMAwQAuqkDAwQAuqpeMAsDBAW6qmADAwK6qAMEBL4N
YAMEBb40ADALAwMAvkEDBAK+QgAwDAMEAL5CBQMEAr5CsDALAwQDvkK4AwMBvkQD
AwK+/AMDA79oAwMAyBUDBAXIHmADBAXIWcAwCwMDAsnkAwQGyeSAMAsDBATJ5NAD
AwDJ5DAVBAIAAjAPAwUAKAAGgAMGAigACLAAMA0GCSqGSIb3DQEBCwUAA4IBAQCn
VWUXECVdZUqYGh0pkqp8Dm+34gk4qgt5tYYvClXMyRZA2gKmt/UPwXcT1pAUj8tK
DAtfqPRXhJnkAg8P6YKWRFXzHytVEEhQKV8nmI5jylYlIGp/QNITcB+Eiiy5oyuf
couCggjDZ6erhvn0F71dGcTMGHe99y0ouD+SFJHAELxXg5CLCiq0KgJwwQlLAGn3
fxxeQ5aULwRMeZIeikzVEQJu3PPuCfpTG44a62ZmTsI67qH0BOkIoYskvaX0/4u/
0rQ7QYwLBme7inPeZ4vIROvJBrP2W1d8J0Ft6kYIWCkNEWMG15xR++JaEIsz9fGI
6CCLtNDoeYkbosNKpLOK
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:18:17 2025 by rpki-client