Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
File: AS3816.roa (raw, json)
Hash identifier: l0fSPyjhythFI/jFAUP0pynBDG6JOGGpD+9LtGmj1rs=
Subject key identifier: 31:26:8B:CC:18:E7:90:CC:C9:B6:41:C0:06:BC:98:61:CC:6D:93:2F
Certificate issuer: /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial: 4B25EE75E08DB1BE96C8078BD52B74B76D46A1AE
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
Signing time: Thu 31 Oct 2024 14:40:00 +0000
ROA not before: Thu 31 Oct 2024 14:35:00 +0000
ROA not after: Thu 30 Oct 2025 14:40:00 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 22
152.200.32.0/19 maxlen: 24
152.200.128.0/18 maxlen: 22
152.200.192.0/20 maxlen: 22
152.200.208.0/20 maxlen: 24
152.200.224.0/21 maxlen: 21
152.200.232.0/24 maxlen: 24
152.200.233.0/24 maxlen: 24
152.201.32.0/19 maxlen: 24
152.201.64.0/18 maxlen: 24
152.201.128.0/17 maxlen: 24
152.202.0.0/15 maxlen: 24
152.204.0.0/17 maxlen: 24
152.204.128.0/22 maxlen: 24
152.204.132.0/24 maxlen: 24
152.204.134.0/24 maxlen: 24
152.204.136.0/21 maxlen: 21
152.204.144.0/20 maxlen: 21
152.204.160.0/19 maxlen: 21
152.204.192.0/18 maxlen: 21
152.205.0.0/18 maxlen: 21
152.205.192.0/18 maxlen: 18
161.10.0.0/18 maxlen: 22
161.10.64.0/20 maxlen: 20
161.10.64.0/22 maxlen: 22
161.10.80.0/20 maxlen: 22
161.10.96.0/19 maxlen: 22
161.10.128.0/17 maxlen: 22
161.18.0.0/20 maxlen: 20
161.18.32.0/19 maxlen: 22
161.18.64.0/19 maxlen: 22
161.18.104.0/21 maxlen: 22
161.18.112.0/20 maxlen: 22
161.18.128.0/17 maxlen: 22
167.0.0.0/16 maxlen: 20
179.32.0.0/16 maxlen: 24
179.33.0.0/18 maxlen: 24
179.33.64.0/19 maxlen: 24
179.33.96.0/21 maxlen: 24
179.33.104.0/22 maxlen: 24
179.33.110.0/23 maxlen: 24
179.33.112.0/20 maxlen: 24
179.33.128.0/17 maxlen: 24
181.32.0.0/15 maxlen: 20
181.234.0.0/15 maxlen: 20
181.236.0.0/19 maxlen: 19
181.236.32.0/19 maxlen: 19
181.236.64.0/19 maxlen: 19
181.236.96.0/19 maxlen: 19
181.236.128.0/19 maxlen: 20
181.236.160.0/20 maxlen: 20
181.236.176.0/20 maxlen: 24
181.236.200.0/21 maxlen: 21
181.236.208.0/22 maxlen: 22
181.236.214.0/23 maxlen: 23
181.236.217.0/24 maxlen: 24
181.236.218.0/24 maxlen: 24
181.236.221.0/24 maxlen: 24
181.236.222.0/24 maxlen: 24
181.236.223.0/24 maxlen: 24
181.236.226.0/24 maxlen: 24
181.236.228.0/22 maxlen: 24
181.236.232.0/21 maxlen: 24
181.236.240.0/22 maxlen: 24
181.237.0.0/16 maxlen: 20
186.98.0.0/16 maxlen: 22
186.99.0.0/17 maxlen: 22
186.99.128.0/18 maxlen: 22
186.99.192.0/19 maxlen: 22
186.99.224.0/20 maxlen: 22
186.99.240.0/21 maxlen: 22
186.99.252.0/23 maxlen: 24
186.99.254.0/24 maxlen: 24
186.102.0.0/17 maxlen: 24
186.102.160.0/19 maxlen: 24
186.102.192.0/24 maxlen: 24
186.103.0.0/18 maxlen: 18
186.103.64.0/18 maxlen: 24
186.112.0.0/16 maxlen: 24
186.113.0.0/21 maxlen: 24
186.113.8.0/24 maxlen: 24
186.113.10.0/23 maxlen: 24
186.113.14.0/24 maxlen: 24
186.113.16.0/21 maxlen: 24
186.113.24.0/22 maxlen: 24
186.113.28.0/23 maxlen: 24
186.113.30.0/24 maxlen: 24
186.113.32.0/19 maxlen: 23
186.113.64.0/18 maxlen: 23
186.113.128.0/19 maxlen: 23
186.113.160.0/21 maxlen: 23
186.113.168.0/23 maxlen: 23
186.113.172.0/22 maxlen: 24
186.113.176.0/20 maxlen: 24
186.113.192.0/18 maxlen: 24
186.114.0.0/15 maxlen: 24
186.116.0.0/14 maxlen: 24
186.168.0.0/17 maxlen: 24
186.168.128.0/18 maxlen: 24
186.168.192.0/20 maxlen: 24
186.168.208.0/21 maxlen: 24
186.168.216.0/22 maxlen: 24
186.168.224.0/19 maxlen: 24
186.169.4.0/22 maxlen: 24
186.169.8.0/21 maxlen: 24
186.169.16.0/20 maxlen: 24
186.169.32.0/19 maxlen: 24
186.169.64.0/18 maxlen: 24
186.169.128.0/17 maxlen: 24
186.170.0.0/18 maxlen: 24
186.170.64.0/20 maxlen: 24
186.170.80.0/21 maxlen: 24
186.170.88.0/22 maxlen: 24
186.170.92.0/23 maxlen: 24
186.170.94.0/24 maxlen: 24
186.170.96.0/19 maxlen: 20
186.170.128.0/17 maxlen: 20
186.171.0.0/17 maxlen: 20
186.171.128.0/17 maxlen: 24
190.13.96.0/20 maxlen: 24
190.52.0.0/19 maxlen: 24
190.65.0.0/16 maxlen: 24
190.66.0.0/22 maxlen: 24
190.66.5.0/24 maxlen: 24
190.66.6.0/23 maxlen: 24
190.66.8.0/21 maxlen: 24
190.66.16.0/20 maxlen: 24
190.66.32.0/19 maxlen: 24
190.66.64.0/20 maxlen: 24
190.66.80.0/21 maxlen: 24
190.66.88.0/21 maxlen: 21
190.66.88.0/22 maxlen: 24
190.66.96.0/19 maxlen: 22
190.66.128.0/19 maxlen: 22
190.66.160.0/20 maxlen: 22
190.66.176.0/22 maxlen: 22
190.66.184.0/21 maxlen: 24
190.66.192.0/18 maxlen: 24
190.67.0.0/16 maxlen: 24
190.68.0.0/15 maxlen: 24
190.252.0.0/14 maxlen: 24
191.104.0.0/16 maxlen: 19
191.105.0.0/16 maxlen: 24
191.106.0.0/17 maxlen: 24
191.106.128.0/17 maxlen: 20
191.107.0.0/16 maxlen: 20
191.108.0.0/14 maxlen: 20
200.21.0.0/16 maxlen: 24
200.30.96.0/19 maxlen: 24
200.89.192.0/19 maxlen: 24
201.228.0.0/17 maxlen: 24
201.228.128.0/18 maxlen: 24
201.228.208.0/20 maxlen: 22
201.228.224.0/19 maxlen: 22
2800:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 23 Nov 2024 22:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:25:ee:75:e0:8d:b1:be:96:c8:07:8b:d5:2b:74:b7:6d:46:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Validity
Not Before: Oct 31 14:35:00 2024 GMT
Not After : Oct 30 14:40:00 2025 GMT
Subject: CN=31268BCC18E790CCC9B641C006BC9861CC6D932F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:a6:c0:46:fa:e9:df:e7:f9:ec:12:ec:23:
68:bf:cd:49:25:0f:aa:40:c1:e6:4f:9c:5c:f6:a5:
30:c8:15:c6:bb:d7:66:4f:f8:a6:f3:bd:14:e9:fd:
e1:e5:c0:48:22:12:77:a4:e1:00:fd:77:fd:43:fd:
76:8e:ed:e0:64:ee:9b:c7:6d:e0:4f:b7:43:f9:94:
cb:41:42:62:d7:90:51:34:dc:f9:18:a3:0f:82:ff:
b7:1d:eb:55:90:4c:ec:ee:c9:e9:7d:6d:f8:f6:1e:
64:a5:13:0e:b7:35:36:c2:6e:52:dc:67:ac:52:e7:
43:cd:5f:0f:a1:75:33:83:59:53:68:97:b5:e0:9e:
98:a5:c3:f3:02:0c:2f:3a:30:04:69:02:f5:72:51:
75:41:04:ea:56:db:1e:8f:11:2c:52:11:9e:86:b1:
1f:79:c9:1a:f1:38:e3:ee:28:7c:fe:de:38:18:9e:
55:4a:5c:cb:6f:d4:b7:27:f5:d4:8e:2e:77:a3:b7:
ff:3e:f8:1d:ea:13:dc:ce:92:e2:bd:5e:7a:29:cf:
c7:47:da:5c:ac:13:9e:42:c1:34:8b:b7:e0:92:75:
56:90:b9:f8:b1:b9:ea:95:e1:4a:14:d5:b6:05:76:
a0:cc:63:4e:b0:34:7f:3a:86:56:97:b7:0a:9e:df:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:8B:CC:18:E7:90:CC:C9:B6:41:C0:06:BC:98:61:CC:6D:93:2F
X509v3 Authority Key Identifier:
keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.233.255
152.201.32.0-152.204.132.255
152.204.134.0/24
152.204.136.0-152.205.63.255
152.205.192.0/18
161.10.0.0/16
161.18.0.0/20
161.18.32.0-161.18.95.255
161.18.104.0-161.18.255.255
167.0.0.0/16
179.32.0.0-179.33.107.255
179.33.110.0-179.33.255.255
181.32.0.0/15
181.234.0.0-181.236.191.255
181.236.200.0-181.236.211.255
181.236.214.0/23
181.236.217.0-181.236.218.255
181.236.221.0-181.236.223.255
181.236.226.0/24
181.236.228.0-181.236.243.255
181.237.0.0/16
186.98.0.0-186.99.247.255
186.99.252.0-186.99.254.255
186.102.0.0/17
186.102.160.0-186.102.192.255
186.103.0.0/17
186.112.0.0-186.113.8.255
186.113.10.0/23
186.113.14.0/24
186.113.16.0-186.113.30.255
186.113.32.0-186.113.169.255
186.113.172.0-186.119.255.255
186.168.0.0-186.168.219.255
186.168.224.0/19
186.169.4.0-186.170.94.255
186.170.96.0-186.171.255.255
190.13.96.0/20
190.52.0.0/19
190.65.0.0-190.66.3.255
190.66.5.0-190.66.179.255
190.66.184.0-190.69.255.255
190.252.0.0/14
191.104.0.0/13
200.21.0.0/16
200.30.96.0/19
200.89.192.0/19
201.228.0.0-201.228.191.255
201.228.208.0-201.228.255.255
IPv6:
2800:680::/32
Signature Algorithm: sha256WithRSAEncryption
5d:f9:7d:2d:0b:74:f6:fe:bb:a3:62:c5:fe:37:87:30:8a:21:
e7:6f:1c:72:ea:a1:f3:23:c4:1c:70:a7:eb:bd:e7:6b:58:2d:
d5:71:41:21:0d:47:d8:74:43:da:ee:5a:18:e2:77:be:21:7d:
8b:ba:ab:f5:a2:83:8d:46:c9:cb:31:81:40:71:e3:a6:73:9c:
70:2c:bf:00:e1:4e:ec:6f:69:f0:5e:e4:fa:c1:2a:6b:e8:34:
7b:ef:8d:6b:86:07:ff:6b:a9:5a:be:1b:c6:40:55:83:e1:e9:
20:6a:64:71:d6:9d:eb:56:66:34:b5:0b:ca:39:83:d4:96:2e:
7a:3c:29:8f:25:f5:39:32:a2:f6:58:84:5c:21:dc:2b:e2:a6:
1e:9f:b3:0c:d7:7f:19:78:fc:66:7e:6d:c7:4b:cf:b5:46:72:
80:35:cb:12:59:6e:6d:17:6b:23:3a:b8:7f:b5:d5:4a:4d:dd:
f0:25:bb:dc:7c:c4:bf:d1:b3:c1:b3:e2:a4:4a:ef:24:83:c7:
46:01:94:ea:76:4d:52:e9:21:a8:3d:39:8d:fd:9a:40:e5:10:
e4:32:78:ec:da:ac:a9:99:9d:67:d0:4d:e5:c8:c0:d5:0d:f1:
44:fd:62:66:75:fc:7e:ff:3c:49:50:b2:db:7c:c2:b4:b1:8c:
6b:0b:60:6e
-----BEGIN CERTIFICATE-----
MIIHgzCCBmugAwIBAgIUSyXudeCNsb6WyAeL1St0t21Goa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNjIzNkI5NkVFMDA5MzRGQ0QzOUE1NjBFNUJDMDRF
QjdCOUVBNDAeFw0yNDEwMzExNDM1MDBaFw0yNTEwMzAxNDQwMDBaMDMxMTAvBgNV
BAMTKDMxMjY4QkNDMThFNzkwQ0NDOUI2NDFDMDA2QkM5ODYxQ0M2RDkzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FKbARvrp3+f57BLsI2i/zUkl
D6pAweZPnFz2pTDIFca712ZP+KbzvRTp/eHlwEgiEnek4QD9d/1D/XaO7eBk7pvH
beBPt0P5lMtBQmLXkFE03PkYow+C/7cd61WQTOzuyel9bfj2HmSlEw63NTbCblLc
Z6xS50PNXw+hdTODWVNol7Xgnpilw/MCDC86MARpAvVyUXVBBOpW2x6PESxSEZ6G
sR95yRrxOOPuKHz+3jgYnlVKXMtv1Lcn9dSOLnejt/8++B3qE9zOkuK9Xnopz8dH
2lysE55CwTSLt+CSdVaQufixueqV4UoU1bYFdqDMY06wNH86hlaXtwqe346pAgMB
AAGjggSNMIIEiTAdBgNVHQ4EFgQUMSaLzBjnkMzJtkHABryYYcxtky8wHwYDVR0j
BBgwFoAU2wYja5buAJNPzTmlYOW8BOt7nqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIx
RDI0N0Q3RTc3RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvREIwNjIzNkI5NkVFMDA5
MzRGQ0QzOUE1NjBFNUJDMDRFQjdCOUVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA2MjM2Qjk2RUUwMDkzNEZD
RDM5QTU2MEU1QkMwNEVCN0I5RUE0LmNlcjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMG
CCsGAQUFBzALhndyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIxRDI0N0Q3RTc3
RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvQVMzODE2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEwYIKwYBBQUHAQcBAf8EggICMIIB/jCCAesEAgABMIIB
4zALAwMDmMgDBAGYyOgwDAMEBZjJIAMEAJjMhAMEAJjMhjAMAwQDmMyIAwQGmM0A
AwQGmM3AAwMAoQoDBAShEgAwDAMEBaESIAMEBaESQDALAwQDoRJoAwMAoRIDAwCn
ADALAwMFsyADBAKzIWgwCwMEAbMhbgMDAbMgAwMBtSAwCwMDAbXqAwQGteyAMAwD
BAO17MgDBAK17NADBAG17NYwDAMEALXs2QMEALXs2jAMAwQAtezdAwQFtezAAwQA
teziMAwDBAK17OQDBAK17PADAwC17TALAwMBumIDBAO6Y/AwDAMEArpj/AMEALpj
/gMEB7pmADAMAwQFumagAwQAumbAAwQHumcAMAsDAwS6cAMEALpxCAMEAbpxCgME
ALpxDjAMAwQEunEQAwQAunEeMAwDBAW6cSADBAG6cagwCwMEArpxrAMDA7pwMAsD
AwO6qAMEArqo2AMEBbqo4DAMAwQCuqkEAwQAuqpeMAsDBAW6qmADAwK6qAMEBL4N
YAMEBb40ADALAwMAvkEDBAK+QgAwDAMEAL5CBQMEAr5CsDALAwQDvkK4AwMBvkQD
AwK+/AMDA79oAwMAyBUDBAXIHmADBAXIWcAwCwMDAsnkAwQGyeSAMAsDBATJ5NAD
AwDJ5DANBAIAAjAHAwUAKAAGgDANBgkqhkiG9w0BAQsFAAOCAQEAXfl9LQt09v67
o2LF/jeHMIoh528ccuqh8yPEHHCn673na1gt1XFBIQ1H2HRD2u5aGOJ3viF9i7qr
9aKDjUbJyzGBQHHjpnOccCy/AOFO7G9p8F7k+sEqa+g0e++Na4YH/2upWr4bxkBV
g+HpIGpkcdad61ZmNLULyjmD1JYuejwpjyX1OTKi9liEXCHcK+KmHp+zDNd/GXj8
Zn5tx0vPtUZygDXLEllubRdrIzq4f7XVSk3d8CW73HzEv9GzwbPipErvJIPHRgGU
6nZNUukhqD05jf2aQOUQ5DJ47NqsqZmdZ9BN5cjA1Q3xRP1iZnX8fv88SVCy23zC
tLGMawtgbg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org