Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/34352e3137332e35322e302f32332d3234203d3e20323637383235.roa
File: 34352e3137332e35322e302f32332d3234203d3e20323637383235.roa (raw, json)
Hash identifier: qmczXx+TyClMZhHSrBmCkJtjyu3pPsdSsmPe1JePILQ=
Subject key identifier: F6:D5:14:DF:58:DE:D6:E0:78:D6:EC:4E:AF:C8:83:CC:9B:3C:24:17
Certificate issuer: /CN=883603453C53D19DB8B0F2A85DC397504758D2C4
Certificate serial: 64D6B936075D2D9D57CC97D2E102A1CBA311A2E9
Authority key identifier: 88:36:03:45:3C:53:D1:9D:B8:B0:F2:A8:5D:C3:97:50:47:58:D2:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/34352e3137332e35322e302f32332d3234203d3e20323637383235.roa
Signing time: Tue 04 Feb 2025 20:08:25 +0000
ROA not before: Tue 04 Feb 2025 20:03:25 +0000
ROA not after: Tue 03 Feb 2026 20:08:25 +0000
asID: 267825
IP address blocks: 45.173.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.crl
rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 04:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d6:b9:36:07:5d:2d:9d:57:cc:97:d2:e1:02:a1:cb:a3:11:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883603453C53D19DB8B0F2A85DC397504758D2C4
Validity
Not Before: Feb 4 20:03:25 2025 GMT
Not After : Feb 3 20:08:25 2026 GMT
Subject: CN=F6D514DF58DED6E078D6EC4EAFC883CC9B3C2417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:1b:f3:19:d8:c0:9c:44:13:e6:5b:77:8c:
39:6a:82:0e:5b:d6:71:9a:91:57:4d:44:e8:e5:a6:
6a:d4:bf:8c:31:cc:f5:01:bb:aa:e5:b0:a3:62:55:
c3:32:4e:4e:db:6f:42:ef:93:07:11:79:ea:81:34:
75:fe:7a:8b:64:96:20:a5:c2:5c:31:4d:99:43:d8:
41:9e:c7:3c:b1:15:ae:35:75:cc:a1:62:95:d6:92:
33:8e:4b:c8:1f:75:16:e1:d9:f1:60:af:32:91:52:
92:59:44:c0:9c:5c:83:30:ab:9d:e9:a0:01:fa:d4:
58:fa:a7:e2:7e:69:f0:93:11:21:8c:4f:84:6a:78:
51:21:ec:77:9e:9e:5d:db:7c:06:df:a7:6e:86:3a:
e5:54:6f:9f:32:1b:37:70:3a:01:30:ed:1c:a2:da:
b1:fd:90:ae:50:0c:e7:96:ba:24:39:e3:02:bd:78:
b6:e0:8b:d5:c8:9c:67:c7:7b:87:5c:d6:7a:7c:37:
be:be:59:e4:0c:21:03:6a:fd:f0:55:c3:9e:06:95:
72:a8:46:08:d5:2f:8a:0b:4b:34:a5:9c:3a:32:2f:
67:de:59:dd:2a:3e:3e:c7:19:93:1f:1f:4d:91:c9:
89:12:98:8a:e4:10:1a:fd:89:b1:79:f1:8d:61:09:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:14:DF:58:DE:D6:E0:78:D6:EC:4E:AF:C8:83:CC:9B:3C:24:17
X509v3 Authority Key Identifier:
keyid:88:36:03:45:3C:53:D1:9D:B8:B0:F2:A8:5D:C3:97:50:47:58:D2:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/34352e3137332e35322e302f32332d3234203d3e20323637383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.52.0/23
Signature Algorithm: sha256WithRSAEncryption
51:77:ad:dc:64:f2:dd:b7:e0:2d:58:8c:f5:d6:8e:ec:cb:14:
79:3a:b7:11:66:57:08:f0:26:13:f9:ab:bf:36:ea:d7:19:45:
ab:2f:d8:7d:26:60:95:06:64:6b:01:fe:fa:e9:4a:52:99:13:
d2:cd:08:a8:92:d1:75:1d:4e:33:7b:c5:27:f5:63:6a:93:02:
91:cf:e9:57:43:a7:f6:73:ef:fd:a6:10:d3:da:ff:d8:02:ff:
82:76:9f:7b:c5:81:d7:65:c0:9d:2f:5f:84:dd:ba:33:86:71:
2a:7d:4c:3d:73:b7:5b:77:f8:30:03:61:ba:89:b0:47:95:7a:
41:cd:0d:a6:e3:b9:f0:d5:a9:74:2e:21:77:22:14:ab:98:a9:
21:14:22:d4:c4:f7:93:82:e5:4b:78:98:ca:16:8e:33:86:5f:
71:16:06:5d:77:05:81:42:9d:e1:e1:b7:e8:45:b1:fe:fb:f0:
be:c6:fb:f2:dc:3f:88:63:4e:9c:c8:cc:57:86:c1:7f:ca:2b:
d0:08:02:13:8e:91:df:70:67:9a:a2:d7:18:bf:e0:b4:65:7d:
da:23:a3:e2:fd:87:18:71:2f:43:1e:46:76:34:a6:8a:5c:0e:
69:34:7d:37:03:cf:e4:ef:ea:30:70:f8:96:42:60:05:1b:f8:
d0:f2:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:14:13 2025 by rpki-client