Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
File: AS3816.roa (raw, json)
Hash identifier: 36dQDoZYyGznDvNSWSMURTcfPMb8vS7C+JFZnoYSf1o=
Subject key identifier: FC:26:95:2D:C4:F8:77:AA:77:1E:70:D0:2E:CD:12:EA:A6:42:A5:4D
Certificate issuer: /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial: 6F952DC66C638CBC6112FD1C77F8B82545FCD3B2
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
Signing time: Thu 12 Dec 2024 16:50:00 +0000
ROA not before: Thu 12 Dec 2024 16:45:00 +0000
ROA not after: Thu 11 Dec 2025 16:50:00 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 22
152.200.32.0/19 maxlen: 24
152.200.128.0/18 maxlen: 22
152.200.192.0/20 maxlen: 22
152.200.208.0/20 maxlen: 24
152.200.224.0/21 maxlen: 21
152.200.232.0/24 maxlen: 24
152.200.233.0/24 maxlen: 24
152.200.234.0/24 maxlen: 24
152.200.235.0/24 maxlen: 24
152.200.236.0/24 maxlen: 24
152.201.32.0/19 maxlen: 24
152.201.64.0/18 maxlen: 24
152.201.128.0/17 maxlen: 24
152.202.0.0/15 maxlen: 24
152.204.0.0/17 maxlen: 24
152.204.128.0/22 maxlen: 24
152.204.132.0/24 maxlen: 24
152.204.134.0/24 maxlen: 24
152.204.136.0/21 maxlen: 21
152.204.144.0/20 maxlen: 21
152.204.160.0/19 maxlen: 21
152.204.192.0/18 maxlen: 21
152.205.0.0/18 maxlen: 21
152.205.192.0/18 maxlen: 18
161.10.0.0/18 maxlen: 22
161.10.64.0/20 maxlen: 20
161.10.64.0/22 maxlen: 22
161.10.80.0/20 maxlen: 22
161.10.96.0/19 maxlen: 22
161.10.128.0/17 maxlen: 22
161.18.0.0/20 maxlen: 20
161.18.32.0/19 maxlen: 22
161.18.64.0/19 maxlen: 22
161.18.104.0/21 maxlen: 22
161.18.112.0/20 maxlen: 22
161.18.128.0/17 maxlen: 22
167.0.0.0/16 maxlen: 20
179.32.0.0/16 maxlen: 24
179.33.0.0/18 maxlen: 24
179.33.64.0/19 maxlen: 24
179.33.96.0/21 maxlen: 24
179.33.104.0/22 maxlen: 24
179.33.110.0/23 maxlen: 24
179.33.112.0/20 maxlen: 24
179.33.128.0/17 maxlen: 24
181.32.0.0/15 maxlen: 20
181.234.0.0/15 maxlen: 20
181.236.0.0/19 maxlen: 19
181.236.32.0/19 maxlen: 19
181.236.64.0/19 maxlen: 19
181.236.96.0/19 maxlen: 19
181.236.128.0/19 maxlen: 20
181.236.160.0/20 maxlen: 20
181.236.176.0/20 maxlen: 24
181.236.200.0/21 maxlen: 21
181.236.208.0/22 maxlen: 22
181.236.214.0/23 maxlen: 23
181.236.217.0/24 maxlen: 24
181.236.218.0/24 maxlen: 24
181.236.221.0/24 maxlen: 24
181.236.222.0/24 maxlen: 24
181.236.223.0/24 maxlen: 24
181.236.226.0/24 maxlen: 24
181.236.228.0/22 maxlen: 24
181.236.232.0/21 maxlen: 24
181.236.240.0/22 maxlen: 24
181.237.0.0/16 maxlen: 20
186.98.0.0/16 maxlen: 22
186.99.0.0/17 maxlen: 22
186.99.128.0/18 maxlen: 22
186.99.192.0/19 maxlen: 22
186.99.224.0/20 maxlen: 22
186.99.240.0/21 maxlen: 22
186.99.252.0/23 maxlen: 24
186.99.254.0/24 maxlen: 24
186.102.0.0/17 maxlen: 24
186.102.160.0/19 maxlen: 24
186.102.192.0/24 maxlen: 24
186.103.0.0/18 maxlen: 18
186.103.64.0/18 maxlen: 24
186.112.0.0/16 maxlen: 24
186.113.0.0/21 maxlen: 24
186.113.8.0/24 maxlen: 24
186.113.10.0/23 maxlen: 24
186.113.14.0/24 maxlen: 24
186.113.16.0/21 maxlen: 24
186.113.24.0/22 maxlen: 24
186.113.28.0/23 maxlen: 24
186.113.30.0/24 maxlen: 24
186.113.32.0/19 maxlen: 23
186.113.64.0/18 maxlen: 23
186.113.128.0/19 maxlen: 23
186.113.160.0/21 maxlen: 23
186.113.168.0/23 maxlen: 23
186.113.172.0/22 maxlen: 24
186.113.176.0/20 maxlen: 24
186.113.192.0/18 maxlen: 24
186.114.0.0/15 maxlen: 24
186.116.0.0/14 maxlen: 24
186.168.0.0/17 maxlen: 24
186.168.128.0/18 maxlen: 24
186.168.192.0/20 maxlen: 24
186.168.208.0/21 maxlen: 24
186.168.216.0/22 maxlen: 24
186.168.224.0/19 maxlen: 24
186.169.3.0/24 maxlen: 24
186.169.4.0/22 maxlen: 24
186.169.8.0/21 maxlen: 24
186.169.16.0/20 maxlen: 24
186.169.32.0/19 maxlen: 24
186.169.64.0/18 maxlen: 24
186.169.128.0/17 maxlen: 24
186.170.0.0/18 maxlen: 24
186.170.64.0/20 maxlen: 24
186.170.80.0/21 maxlen: 24
186.170.88.0/22 maxlen: 24
186.170.92.0/23 maxlen: 24
186.170.94.0/24 maxlen: 24
186.170.96.0/19 maxlen: 20
186.170.128.0/17 maxlen: 20
186.171.0.0/17 maxlen: 20
186.171.128.0/17 maxlen: 24
190.13.96.0/20 maxlen: 24
190.52.0.0/19 maxlen: 24
190.65.0.0/16 maxlen: 24
190.66.0.0/22 maxlen: 24
190.66.5.0/24 maxlen: 24
190.66.6.0/23 maxlen: 24
190.66.8.0/21 maxlen: 24
190.66.16.0/20 maxlen: 24
190.66.32.0/19 maxlen: 24
190.66.64.0/20 maxlen: 24
190.66.80.0/21 maxlen: 24
190.66.88.0/21 maxlen: 21
190.66.88.0/22 maxlen: 24
190.66.96.0/19 maxlen: 22
190.66.128.0/19 maxlen: 22
190.66.160.0/20 maxlen: 22
190.66.176.0/22 maxlen: 22
190.66.184.0/21 maxlen: 24
190.66.192.0/18 maxlen: 24
190.67.0.0/16 maxlen: 24
190.68.0.0/15 maxlen: 24
190.252.0.0/14 maxlen: 24
191.104.0.0/16 maxlen: 19
191.105.0.0/16 maxlen: 24
191.106.0.0/17 maxlen: 24
191.106.128.0/17 maxlen: 20
191.107.0.0/16 maxlen: 20
191.108.0.0/14 maxlen: 20
200.21.0.0/16 maxlen: 24
200.30.96.0/19 maxlen: 24
200.89.192.0/19 maxlen: 24
201.228.0.0/17 maxlen: 24
201.228.128.0/18 maxlen: 24
201.228.208.0/20 maxlen: 22
201.228.224.0/19 maxlen: 22
2800:680::/32 maxlen: 32
2800:8b0::/38 maxlen: 38
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 08 Apr 2025 12:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:95:2d:c6:6c:63:8c:bc:61:12:fd:1c:77:f8:b8:25:45:fc:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Validity
Not Before: Dec 12 16:45:00 2024 GMT
Not After : Dec 11 16:50:00 2025 GMT
Subject: CN=FC26952DC4F877AA771E70D02ECD12EAA642A54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:a2:1b:e9:d7:44:3c:0a:b7:9a:ea:d0:9e:
82:57:50:04:cb:ec:54:61:11:b1:8a:a7:61:00:46:
95:e9:3a:73:6e:e0:eb:06:fe:8d:e1:5a:80:cd:4e:
5f:8d:1a:5d:1a:50:52:95:f1:66:03:da:49:9b:22:
c9:70:7d:f0:83:1c:c5:cb:13:84:37:06:68:b9:2e:
94:83:64:80:4e:26:a7:e8:72:fe:f3:32:35:28:1e:
5b:1c:64:0f:36:76:7a:5a:9e:36:f2:63:61:12:f9:
93:6b:8c:51:c3:39:5b:af:52:c7:4c:8a:1c:b0:1a:
9d:f9:a7:6a:e1:7d:15:6d:19:1e:ac:2d:19:84:8f:
39:88:3b:4e:6b:45:b2:a3:0a:df:50:ac:fa:24:00:
d2:e0:e6:df:b8:0d:94:e2:30:df:be:4c:2d:6b:2d:
74:73:67:19:c2:a9:bf:08:06:e0:4e:3f:78:ec:4b:
c0:1e:0e:76:44:84:fd:d5:95:ee:ff:dc:63:da:fc:
97:d2:c4:45:c6:c0:8a:dc:54:57:8f:7a:b6:5e:e0:
ab:d7:dd:e7:7a:9b:f9:04:20:ad:3d:a6:d0:db:36:
b7:46:48:90:ba:cd:71:a5:d7:4d:78:9f:ed:3b:34:
67:f4:79:c6:9a:e6:56:f1:50:8f:a2:0b:7f:78:55:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:95:2D:C4:F8:77:AA:77:1E:70:D0:2E:CD:12:EA:A6:42:A5:4D
X509v3 Authority Key Identifier:
keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.236.255
152.201.32.0-152.204.132.255
152.204.134.0/24
152.204.136.0-152.205.63.255
152.205.192.0/18
161.10.0.0/16
161.18.0.0/20
161.18.32.0-161.18.95.255
161.18.104.0-161.18.255.255
167.0.0.0/16
179.32.0.0-179.33.107.255
179.33.110.0-179.33.255.255
181.32.0.0/15
181.234.0.0-181.236.191.255
181.236.200.0-181.236.211.255
181.236.214.0/23
181.236.217.0-181.236.218.255
181.236.221.0-181.236.223.255
181.236.226.0/24
181.236.228.0-181.236.243.255
181.237.0.0/16
186.98.0.0-186.99.247.255
186.99.252.0-186.99.254.255
186.102.0.0/17
186.102.160.0-186.102.192.255
186.103.0.0/17
186.112.0.0-186.113.8.255
186.113.10.0/23
186.113.14.0/24
186.113.16.0-186.113.30.255
186.113.32.0-186.113.169.255
186.113.172.0-186.119.255.255
186.168.0.0-186.168.219.255
186.168.224.0/19
186.169.3.0-186.170.94.255
186.170.96.0-186.171.255.255
190.13.96.0/20
190.52.0.0/19
190.65.0.0-190.66.3.255
190.66.5.0-190.66.179.255
190.66.184.0-190.69.255.255
190.252.0.0/14
191.104.0.0/13
200.21.0.0/16
200.30.96.0/19
200.89.192.0/19
201.228.0.0-201.228.191.255
201.228.208.0-201.228.255.255
IPv6:
2800:680::/32
2800:8b0::/38
Signature Algorithm: sha256WithRSAEncryption
60:68:1a:51:5e:13:61:d7:2f:1d:51:f2:2f:c4:b1:55:bd:90:
00:b3:c5:09:a3:88:2f:6b:12:43:9a:66:b0:30:86:bc:f8:3f:
3a:77:e9:12:37:9a:e1:d1:38:86:fe:f2:a0:a7:c9:3f:45:e0:
0f:89:b0:5f:8f:02:30:26:30:ae:b4:44:e7:47:2f:e9:91:ed:
5d:8e:41:e2:47:9e:5d:ae:5d:4c:19:89:29:b3:2c:8c:13:86:
ea:ea:c3:1d:75:0e:5a:db:8b:a6:1b:ba:b4:4a:7e:09:b9:b6:
91:1f:4f:e0:4f:5b:c3:08:f3:5d:95:b9:42:ab:b1:c9:9b:a1:
f8:f1:50:d5:14:0f:1b:85:19:9f:51:2f:65:18:80:a9:a4:1e:
c6:a5:ac:8d:0b:96:f4:2d:76:ee:a2:18:15:78:32:bc:d8:bf:
6e:ad:2a:bb:ff:17:3a:3b:38:e9:24:8e:2b:14:57:b0:87:d4:
73:02:d6:42:fd:df:4a:e5:1a:61:ed:1c:1d:14:67:c6:68:cc:
05:85:c5:6a:a3:e6:6d:3c:9c:c1:9a:86:ab:ae:3d:93:e3:41:
0a:b1:06:89:67:d4:9a:e4:39:3e:c6:ec:71:ca:db:1b:fb:87:
78:ce:66:01:31:4b:62:63:86:8a:d3:3c:17:eb:9b:8b:e3:59:
79:f6:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:32 2025 by rpki-client