Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa
File: 3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier: xtjZuiwik/K8JchGKVhm3e06tKxSN7NGTlDPUPDivXI=
Subject key identifier: 94:62:FF:96:6E:1A:54:AD:0E:00:DB:B3:D3:43:08:26:BF:7F:A9:5F
Certificate issuer: /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial: 539AF21FE0BAA9ED6722728CA2AD08BDBB599A9D
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa
Signing time: Tue 04 Feb 2025 18:41:15 +0000
ROA not before: Tue 04 Feb 2025 18:36:15 +0000
ROA not after: Tue 03 Feb 2026 18:41:15 +0000
asID: 28110
IP address blocks: 190.124.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 01:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:f2:1f:e0:ba:a9:ed:67:22:72:8c:a2:ad:08:bd:bb:59:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
Validity
Not Before: Feb 4 18:36:15 2025 GMT
Not After : Feb 3 18:41:15 2026 GMT
Subject: CN=9462FF966E1A54AD0E00DBB3D3430826BF7FA95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:7e:77:e9:28:51:ff:12:87:a2:5f:05:05:
df:c3:17:74:1b:bc:02:d8:a1:6b:03:6f:32:41:9b:
5a:b7:29:0e:18:c7:f4:95:2f:9e:c6:1d:11:8a:eb:
da:70:a9:96:e5:7d:30:e4:c0:dc:d1:43:59:2b:87:
00:9d:c1:b1:5e:c0:98:aa:3a:c6:d5:e7:28:25:c1:
d6:e1:39:ea:2b:71:a4:dc:ef:81:21:7d:3a:99:9f:
36:13:04:37:7c:88:45:c7:20:7a:91:d4:b3:a7:03:
22:93:4c:f4:70:89:c1:96:9b:8d:35:d3:69:e5:f7:
51:d8:bf:b6:db:38:ed:49:f4:d1:b8:62:ca:5a:20:
74:86:e9:0e:d8:23:07:f4:9c:40:a5:a5:f8:7b:50:
73:27:e4:22:f5:3b:6a:c3:a7:d3:ec:51:78:fc:74:
cb:c2:97:4c:8b:3b:9c:cc:8f:56:e2:30:db:ad:46:
7e:bb:2b:00:85:d1:10:2d:83:b3:e2:5a:34:4d:1f:
de:11:ff:26:6f:55:65:22:16:2a:c3:c2:d9:c2:b9:
08:17:c1:2f:42:c8:02:cd:ad:e3:b2:f9:1d:2d:c3:
8e:83:93:09:6e:93:89:ae:d0:d8:57:ec:1a:05:c2:
13:79:c5:b0:59:34:b5:45:c2:d6:12:e1:fc:4e:14:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:FF:96:6E:1A:54:AD:0E:00:DB:B3:D3:43:08:26:BF:7F:A9:5F
X509v3 Authority Key Identifier:
keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:09:73:fb:d0:09:d0:e3:05:76:9c:de:a9:e6:1c:9c:7c:26:
fe:b4:20:03:87:0b:41:78:4c:80:a3:4d:f4:ba:e8:fc:fc:5a:
a1:bc:7a:3e:97:4b:04:98:17:6d:e1:50:f6:5f:29:57:86:ed:
1f:b9:19:5e:00:30:45:f3:a8:06:10:44:35:95:15:a6:e6:c2:
7a:a9:fa:5f:0e:81:75:0f:90:99:48:5a:64:da:f7:99:bb:3a:
b7:0b:4c:ca:3b:e3:68:ef:2f:53:37:9e:28:5f:68:f7:20:78:
36:3c:3b:17:27:60:9b:98:57:45:c8:4e:fb:77:67:ab:b4:80:
7f:69:86:c3:e0:28:5c:dd:06:27:7d:68:95:d2:26:52:94:f7:
44:58:a7:0c:76:9c:48:7c:7e:04:39:b1:31:38:6f:88:da:a1:
95:30:ea:27:24:72:d9:de:d1:99:b0:b1:ac:10:91:79:b4:1f:
a0:1c:aa:4b:4a:ee:8d:9a:d4:38:0e:30:30:30:e6:1b:f5:8f:
1d:7b:4a:50:ee:21:08:2e:f7:e0:aa:bc:c2:ba:bc:33:be:fc:
a6:f1:06:89:a3:bb:1a:77:39:0a:7d:b6:a4:92:e8:a5:31:f7:
a8:9e:34:90:b9:0f:f7:05:b6:b4:b6:56:e8:8d:50:e3:56:e1:
e7:18:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:05:58 2025 by rpki-client