
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32322d3234203d3e203634313030.roa
File: 3137302e38342e3233322e302f32322d3234203d3e203634313030.roa (raw, json)
Hash identifier: 8616LCUlLpSCU/FHkGg6mNE4uqtlKqB9JxBLiJmBxtA=
Subject key identifier: 93:15:25:67:F7:7A:3A:D3:BB:62:84:74:8C:F5:39:A6:48:9E:CC:63
Certificate issuer: /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial: 3DFF74AD4F18607F376D26339A67986D5B4B5F27
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32322d3234203d3e203634313030.roa
Signing time: Tue 04 Feb 2025 18:11:42 +0000
ROA not before: Tue 04 Feb 2025 18:06:42 +0000
ROA not after: Tue 03 Feb 2026 18:11:42 +0000
asID: 64100
IP address blocks: 170.84.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 04:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ff:74:ad:4f:18:60:7f:37:6d:26:33:9a:67:98:6d:5b:4b:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Validity
Not Before: Feb 4 18:06:42 2025 GMT
Not After : Feb 3 18:11:42 2026 GMT
Subject: CN=93152567F77A3AD3BB6284748CF539A6489ECC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:3f:9c:00:17:ba:b8:04:70:87:f2:92:68:
c4:0c:a3:e3:f3:cd:cf:67:17:fa:a4:7f:68:c3:a9:
22:ef:ab:1a:ed:66:c6:36:79:38:4d:62:7b:2c:b3:
c9:f9:81:20:63:ca:07:0c:97:ac:3c:1a:bd:aa:91:
c5:dd:39:d9:e8:d1:76:02:d1:84:ec:f8:ad:61:c2:
5a:16:32:cf:cb:7e:f4:18:a8:24:41:b6:ad:4a:8f:
2c:78:d1:f3:05:a9:18:2e:d3:2a:5b:81:45:be:62:
e6:f9:61:5b:4c:37:7e:66:ac:45:1a:cf:76:10:80:
db:2f:28:fb:b4:0a:1e:6c:ca:d9:2d:12:43:72:b7:
2f:2e:9b:d8:0b:a8:e8:0f:44:1b:ba:03:90:c0:5d:
79:d8:99:26:fa:a8:e3:79:73:1b:f4:4a:32:54:1e:
1d:5d:ca:c1:e0:92:c2:d1:fd:3b:08:c1:fd:4c:ab:
89:28:2c:46:52:e6:63:db:2c:bd:b9:f0:6d:cc:b5:
4b:1e:df:4b:4f:06:d8:8e:28:ab:45:6c:ca:55:6f:
7e:53:3e:1a:b4:a5:2c:e4:67:e1:26:4c:00:c0:89:
4a:23:ef:1a:c2:42:c5:bd:76:ba:e3:f2:88:71:6e:
c1:a0:9e:50:4c:94:47:1e:26:b1:ee:85:ff:a2:3b:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:25:67:F7:7A:3A:D3:BB:62:84:74:8C:F5:39:A6:48:9E:CC:63
X509v3 Authority Key Identifier:
keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32322d3234203d3e203634313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:70:c4:73:c1:f3:7a:7e:3c:dd:f2:3d:6e:e6:b1:4c:e0:b7:
a1:19:c9:4f:6c:b4:70:35:1e:dc:57:8b:d1:bf:ea:75:db:94:
96:77:c1:88:35:7b:dd:76:23:05:8e:1e:4f:93:c1:34:91:68:
52:ed:9d:da:23:d0:84:f4:cc:43:48:9e:b4:63:12:7f:03:18:
84:73:7a:57:22:87:18:ec:d3:2e:bb:a4:63:39:cd:27:5f:d8:
f2:ca:8e:c2:7d:df:d7:87:64:1f:0f:81:1a:e9:22:1d:32:36:
75:87:b0:86:c2:d1:2b:a1:c5:a3:a8:d1:69:ce:5d:ea:ba:cd:
ec:34:d8:b3:05:bb:3f:fb:ae:de:4e:54:bb:cb:45:c8:02:b0:
d2:42:00:e6:b1:64:f5:09:9e:d7:e5:ad:e4:a0:e0:d5:78:d7:
7f:bd:e9:6d:d8:69:f1:a0:fc:0e:0e:97:31:85:f5:be:0b:f9:
eb:b5:73:66:6e:ac:35:41:aa:76:95:15:5c:72:48:5c:67:60:
c3:14:74:41:3d:7d:6f:16:bc:50:e9:e8:99:95:31:2d:2f:0e:
cc:4a:3a:18:dd:01:40:46:68:01:73:65:7d:ad:52:13:ea:4b:
a8:57:1d:9c:3c:8a:79:33:a2:86:6b:dd:41:e5:75:7d:dc:59:
65:d3:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:41 2025 by rpki-client