Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e352e302f32342d3234203d3e203532333936.roa
File: 3136362e37352e352e302f32342d3234203d3e203532333936.roa (raw, json)
Hash identifier: /HJpo8fhGLiczdW0hIyPCI+8CejGuyEt1elbN6lOC0E=
Subject key identifier: B7:88:85:0B:6E:1A:C6:E4:2D:FB:DA:36:4A:FC:C7:14:D2:9A:D6:BC
Certificate issuer: /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial: 646D527433CCC6E5A9AA3A6F9E9F9A31387E5DB1
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e352e302f32342d3234203d3e203532333936.roa
Signing time: Tue 04 Feb 2025 18:28:23 +0000
ROA not before: Tue 04 Feb 2025 18:23:23 +0000
ROA not after: Tue 03 Feb 2026 18:28:23 +0000
asID: 52396
IP address blocks: 166.75.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 19:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6d:52:74:33:cc:c6:e5:a9:aa:3a:6f:9e:9f:9a:31:38:7e:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Validity
Not Before: Feb 4 18:23:23 2025 GMT
Not After : Feb 3 18:28:23 2026 GMT
Subject: CN=B788850B6E1AC6E42DFBDA364AFCC714D29AD6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:f8:01:3e:96:d7:8c:68:e9:05:af:aa:3b:
8d:8d:47:09:69:72:f0:dd:54:b3:a7:42:1d:5d:37:
c6:2b:25:3e:f6:a9:ed:00:b3:15:4a:ba:11:74:fe:
4a:9a:bd:64:ab:7c:6a:ac:be:e8:2b:3c:77:41:9c:
99:28:0e:76:6a:fa:3a:99:71:e8:28:da:80:c4:5d:
ce:5e:97:f1:31:75:88:4d:c4:fe:92:0d:f9:4a:5d:
c8:db:2e:7c:8b:2d:27:e7:9d:6a:92:dc:0f:f2:c5:
2e:4c:90:d7:cf:22:0f:dd:31:66:85:c0:8b:85:c8:
e1:f0:5c:d3:7f:85:ff:eb:83:94:7a:db:41:bf:8f:
28:a8:14:a5:f6:55:c4:98:83:b8:c9:cd:72:aa:1b:
18:b1:15:ea:91:f8:b5:7d:29:f3:aa:ec:e2:ac:bd:
4c:21:c8:a6:81:96:30:e3:84:d2:13:47:01:ee:89:
01:53:31:1b:67:90:09:da:23:ab:64:14:3c:5e:c8:
95:2d:a9:48:b7:3b:ec:2b:73:a8:43:2e:40:8d:2b:
dd:9b:d4:ef:fa:89:99:15:d7:3f:a2:63:79:fe:f1:
6f:1b:2d:c9:41:90:22:b6:3b:e0:29:a2:35:ab:bc:
0c:3b:a6:28:6e:51:a6:1a:b7:be:8a:dc:f5:a0:d2:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:85:0B:6E:1A:C6:E4:2D:FB:DA:36:4A:FC:C7:14:D2:9A:D6:BC
X509v3 Authority Key Identifier:
keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e352e302f32342d3234203d3e203532333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.75.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ba:c2:8a:28:05:27:b0:f4:f9:17:20:3e:82:42:c1:02:bf:
9e:7d:c2:a7:e9:60:4a:29:d5:c6:77:bc:b8:34:7a:0b:b0:cb:
a7:3d:87:ac:28:c0:dd:61:46:94:36:e0:12:af:3a:c9:77:0f:
0e:c5:45:96:c9:00:a1:9a:07:21:a9:9d:d3:1f:84:87:79:85:
2e:4c:98:01:84:e3:ea:23:b1:70:38:62:10:b5:cf:17:57:75:
1d:60:03:0c:1b:96:f9:15:c8:74:69:6d:99:fe:98:76:7d:12:
3e:f5:79:74:a2:bb:21:c0:30:5f:b0:7e:3c:d8:5c:01:a8:ac:
f7:ef:c7:f4:10:9f:15:ed:2b:23:14:06:68:a6:4a:9f:d7:13:
3c:4e:89:82:09:0e:a0:49:fe:1c:41:b2:8a:31:a1:e3:1e:ea:
8e:6b:4d:5f:ee:f6:8a:4f:98:5a:ab:b4:ae:55:12:5f:6a:42:
5d:4b:db:1e:04:ec:db:b4:39:24:c3:87:22:dd:a7:8c:0e:45:
48:35:29:59:4b:62:29:77:80:8b:77:4a:54:75:2d:bd:45:7d:
5a:96:14:84:f3:c1:85:29:49:db:53:44:80:c9:71:3a:3f:de:
38:3f:d2:ef:2e:be:20:30:db:21:ea:16:9e:e3:f1:de:ae:7c:
bc:f0:16:67
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUZG1SdDPMxuWpqjpvnp+aMTh+XbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyMUU4NTM4RjUwRDRDRjM0NjZGMzgwRDY0RkZBNzc3
OUVFMjBENjAeFw0yNTAyMDQxODIzMjNaFw0yNjAyMDMxODI4MjNaMDMxMTAvBgNV
BAMTKEI3ODg4NTBCNkUxQUM2RTQyREZCREEzNjRBRkNDNzE0RDI5QUQ2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPivgBPpbXjGjpBa+qO42NRwlp
cvDdVLOnQh1dN8YrJT72qe0AsxVKuhF0/kqavWSrfGqsvugrPHdBnJkoDnZq+jqZ
cego2oDEXc5el/ExdYhNxP6SDflKXcjbLnyLLSfnnWqS3A/yxS5MkNfPIg/dMWaF
wIuFyOHwXNN/hf/rg5R620G/jyioFKX2VcSYg7jJzXKqGxixFeqR+LV9KfOq7OKs
vUwhyKaBljDjhNITRwHuiQFTMRtnkAnaI6tkFDxeyJUtqUi3O+wrc6hDLkCNK92b
1O/6iZkV1z+iY3n+8W8bLclBkCK2O+ApojWrvAw7pihuUaYat76K3PWg0nQXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUt4iFC24axuQt+9o2SvzHFNKa1rwwHwYDVR0j
BBgwFoAU3SHoU49Q1M80ZvOA1k/6d3nuINYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEI2RDA1NEM2NkM5Mjk2ODQyNzkxMTNCQTkwNDIxOTRD
Mzk2NTgyQTExQzEyMDQzMjU5QTEzOUI5RjMyNkI2LzAvREQyMUU4NTM4RjUwRDRD
RjM0NjZGMzgwRDY0RkZBNzc3OUVFMjBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDIxRTg1MzhGNTBENENGMzQ2
NkYzODBENjRGRkE3Nzc5RUUyMEQ2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRCNkQwNTRDNjZDOTI5Njg0Mjc5MTEzQkE5MDQyMTk0QzM5NjU4MkEx
MUMxMjA0MzI1OUExMzlCOUYzMjZCNi8wLzMxMzYzNjJlMzczNTJlMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApksFMA0GCSqG
SIb3DQEBCwUAA4IBAQBHusKKKAUnsPT5FyA+gkLBAr+efcKn6WBKKdXGd7y4NHoL
sMunPYesKMDdYUaUNuASrzrJdw8OxUWWyQChmgchqZ3TH4SHeYUuTJgBhOPqI7Fw
OGIQtc8XV3UdYAMMG5b5Fch0aW2Z/ph2fRI+9Xl0orshwDBfsH482FwBqKz378f0
EJ8V7SsjFAZopkqf1xM8TomCCQ6gSf4cQbKKMaHjHuqOa01f7vaKT5haq7SuVRJf
akJdS9seBOzbtDkkw4ci3aeMDkVINSlZS2Ipd4CLd0pUdS29RX1alhSE88GFKUnb
U0SAyXE6P944P9LvLr4gMNsh6hae4/Herny88BZn
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:08 2025 by rpki-client