Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa
File: 3230302e33302e3133332e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier: My7ux3Xe3zt1mWfSxJfx8WgOcMjCIpkHFK4kNTTvVvg=
Subject key identifier: DE:62:F9:B0:06:A5:05:4F:EE:05:CE:D5:90:0C:3E:21:E3:3A:9D:E5
Certificate issuer: /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial: 09D24E405FEB1329E919A9ECEE67863544B5BD98
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa
Signing time: Tue 04 Feb 2025 18:38:35 +0000
ROA not before: Tue 04 Feb 2025 18:33:35 +0000
ROA not after: Tue 03 Feb 2026 18:38:35 +0000
asID: 20299
IP address blocks: 200.30.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d2:4e:40:5f:eb:13:29:e9:19:a9:ec:ee:67:86:35:44:b5:bd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
Validity
Not Before: Feb 4 18:33:35 2025 GMT
Not After : Feb 3 18:38:35 2026 GMT
Subject: CN=DE62F9B006A5054FEE05CED5900C3E21E33A9DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:79:7b:53:8a:7c:e0:ea:0d:c4:d6:77:c4:
45:d5:36:77:e7:32:a5:cd:2e:d2:21:d6:67:0e:aa:
23:47:78:91:37:87:d2:44:7a:f9:2c:27:74:f8:c9:
04:43:35:00:b9:6f:40:08:2d:9b:8d:c5:00:38:15:
45:f8:be:44:de:02:1c:57:58:b5:b4:c5:e3:c8:f6:
0d:e9:25:61:f2:9b:64:6d:57:58:7e:0f:ae:c4:f2:
f4:c3:23:39:d3:aa:0b:a0:45:e5:df:a5:de:fa:b7:
4b:7d:1c:3a:10:a8:35:11:b1:46:e8:79:66:2d:5e:
a2:72:d2:47:60:77:ff:85:31:e7:6b:64:b2:17:71:
65:c0:6d:80:1b:0f:a6:12:2b:ab:40:04:34:34:cd:
26:9b:95:e7:ca:9c:4a:fc:3d:c0:3e:ef:8a:a5:ce:
a9:4c:93:94:e0:ea:71:a3:e7:8d:f2:ad:72:0c:ed:
61:39:ff:66:d9:79:55:62:10:06:23:0f:8b:e1:e5:
eb:64:ed:f3:f2:b2:5a:6c:f3:73:ce:74:c5:f8:b9:
36:5f:32:44:14:97:67:61:c2:6a:d3:65:98:95:62:
6d:14:7b:22:a7:3f:31:a8:e3:57:82:b2:00:04:86:
6d:cc:4b:29:09:f5:ed:be:3c:83:9f:d3:48:2a:26:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:F9:B0:06:A5:05:4F:EE:05:CE:D5:90:0C:3E:21:E3:3A:9D:E5
X509v3 Authority Key Identifier:
keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c7:92:25:fe:9a:30:95:b1:37:ce:38:16:aa:c9:88:be:77:
49:4d:6c:a0:9c:69:b0:98:74:d2:f8:2a:c8:a6:35:6d:a4:d4:
2f:77:4f:93:34:4e:97:e7:da:2b:b8:39:99:4f:1b:50:71:cb:
dd:6e:ed:52:73:06:13:41:89:ce:33:66:3e:b7:04:a0:fc:48:
af:a0:99:59:bc:68:e0:b9:ef:d2:96:df:32:87:cd:ee:e6:a6:
4e:f8:86:dd:e7:6e:51:e4:8f:19:0e:0f:44:2c:d5:4c:9a:6b:
db:3f:3f:86:70:59:7c:d4:09:80:0c:a0:87:b3:3b:2b:c5:89:
63:a6:91:58:a1:31:d5:c2:7a:42:7e:cc:3b:68:09:e3:ae:3e:
f5:3e:f2:52:4c:44:65:ec:80:ee:bd:62:ac:8e:84:f9:46:49:
00:72:46:e5:7b:34:28:19:4d:c0:57:0d:d9:5e:0b:5a:a1:66:
32:a3:c8:22:9d:5c:8b:fa:c2:c8:fa:f7:3c:d8:e5:fe:7d:53:
96:39:fa:c0:8a:10:e4:16:ab:a9:a8:5d:1d:8a:5e:29:0f:c5:
c1:1d:85:97:1d:95:01:b6:36:14:d8:12:1d:cc:8f:5e:4b:08:
dd:1d:74:be:81:57:96:25:a5:bf:94:75:64:c1:ab:0e:de:0b:
c3:6e:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:45 2025 by rpki-client