Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa
File: 3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa (raw, json)
Hash identifier: WIkQdJFh3NJNtUy/zysFb/l/x7iKsQfIC1G7xj7B8ZA=
Subject key identifier: 98:4F:06:56:DE:44:4F:88:BB:12:0F:A9:F9:CD:C2:DF:A1:71:A6:3F
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 3FE56932C9CD0A98917E91255EEDA60745DCBB3D
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:06 +0000
ROA not before: Tue 04 Feb 2025 18:01:06 +0000
ROA not after: Tue 03 Feb 2026 18:06:06 +0000
asID: 27843
IP address blocks: 190.102.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 23:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e5:69:32:c9:cd:0a:98:91:7e:91:25:5e:ed:a6:07:45:dc:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:06 2025 GMT
Not After : Feb 3 18:06:06 2026 GMT
Subject: CN=984F0656DE444F88BB120FA9F9CDC2DFA171A63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:64:0c:f7:e2:eb:89:b4:f8:a2:90:5c:62:
b8:f9:c9:6b:97:35:04:f7:53:0e:ff:67:f3:2b:8c:
5a:a1:9c:8e:7a:69:ae:98:eb:a1:37:5e:5c:c3:78:
58:a0:7d:19:4b:16:76:e3:85:14:a0:48:1a:3c:8d:
4a:32:03:df:a0:a7:1d:ed:cb:bc:9b:8a:4e:9e:bf:
bd:76:1d:55:46:1b:89:f4:f5:58:4f:a2:f7:bd:76:
13:c5:16:a0:a5:30:56:f8:6c:69:e9:90:8e:0a:7a:
e9:56:65:04:9c:48:e6:04:6c:a5:73:4c:6f:49:1d:
41:f5:0b:39:20:bc:33:c6:ea:31:24:9d:6d:a6:81:
fa:d5:50:2a:5a:75:08:8d:e5:f7:bc:a3:9c:82:8f:
99:a0:82:33:ab:fa:9b:1f:80:c8:2b:ac:85:48:46:
25:f0:7e:6f:a2:99:6a:82:eb:0f:dd:8f:12:bc:44:
09:4a:b8:42:99:fa:e2:07:92:90:86:89:3e:87:7e:
10:d1:c1:7f:df:9b:69:39:1c:70:2d:44:11:60:e8:
ab:ce:8a:9e:13:dc:3c:09:56:81:5a:a5:8a:4e:89:
a3:ea:a6:9c:a3:94:9d:9b:2c:b0:b4:1d:f8:31:45:
a9:16:f0:9b:dd:43:3a:4e:5a:46:52:18:e7:df:b8:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:06:56:DE:44:4F:88:BB:12:0F:A9:F9:CD:C2:DF:A1:71:A6:3F
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.102.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:81:81:da:d2:ff:15:c7:b0:13:ac:85:e1:32:fa:54:2b:21:
01:5f:bd:ce:41:f2:43:d4:81:6a:6e:ca:55:74:19:38:0e:53:
26:dc:4b:6e:7b:ab:df:89:bf:c0:db:bf:e5:91:a9:59:74:21:
fc:00:fc:e7:c7:43:41:cc:59:d0:b9:9d:1d:d1:99:60:e1:af:
6d:d3:70:35:ce:83:3b:be:0d:f6:26:01:5f:b5:8b:28:3f:aa:
5a:43:7b:80:05:5f:bf:7c:d2:fd:ec:48:69:87:46:00:bf:fc:
02:42:62:55:ea:e4:6e:a1:ea:39:84:c4:9a:72:72:42:24:f9:
e2:25:66:00:ed:f8:65:d0:8d:fb:4c:93:84:c9:9d:f1:6a:ca:
2f:11:a9:f8:f3:6f:32:08:1b:dc:a6:44:9a:a9:86:66:e0:19:
2a:38:43:c5:fc:39:46:f5:2e:d3:7d:11:e5:3c:ce:3a:26:c2:
58:71:48:da:df:0c:52:da:e7:52:e8:eb:a8:63:78:2b:9e:72:
68:2b:64:dc:f5:19:0c:c1:ec:cc:72:f3:9d:c3:e7:0a:14:65:
27:6b:f2:4d:d4:44:d8:b1:f9:97:f8:ce:67:eb:ad:c8:3a:ee:
40:6a:4e:27:67:8f:ca:d7:06:de:9c:34:3b:32:99:5f:5b:1f:
7a:24:1a:97
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUP+VpMsnNCpiRfpElXu2mB0Xcuz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNTAyMDQxODAxMDZaFw0yNjAyMDMxODA2MDZaMDMxMTAvBgNV
BAMTKDk4NEYwNjU2REU0NDRGODhCQjEyMEZBOUY5Q0RDMkRGQTE3MUE2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49WQM9+LribT4opBcYrj5yWuX
NQT3Uw7/Z/MrjFqhnI56aa6Y66E3XlzDeFigfRlLFnbjhRSgSBo8jUoyA9+gpx3t
y7ybik6ev712HVVGG4n09VhPove9dhPFFqClMFb4bGnpkI4KeulWZQScSOYEbKVz
TG9JHUH1CzkgvDPG6jEknW2mgfrVUCpadQiN5fe8o5yCj5mggjOr+psfgMgrrIVI
RiXwfm+imWqC6w/djxK8RAlKuEKZ+uIHkpCGiT6HfhDRwX/fm2k5HHAtRBFg6KvO
ip4T3DwJVoFapYpOiaPqppyjlJ2bLLC0HfgxRakW8JvdQzpOWkZSGOffuFzlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmE8GVt5ET4i7Eg+p+c3C36Fxpj8wHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzkzMDJlMzEzMDMyMmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzgzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvmaA
MA0GCSqGSIb3DQEBCwUAA4IBAQBNgYHa0v8Vx7ATrIXhMvpUKyEBX73OQfJD1IFq
bspVdBk4DlMm3Etue6vfib/A27/lkalZdCH8APznx0NBzFnQuZ0d0Zlg4a9t03A1
zoM7vg32JgFftYsoP6paQ3uABV+/fNL97Ehph0YAv/wCQmJV6uRuoeo5hMSacnJC
JPniJWYA7fhl0I37TJOEyZ3xasovEan4828yCBvcpkSaqYZm4BkqOEPF/DlG9S7T
fRHlPM46JsJYcUja3wxS2udS6OuoY3grnnJoK2Tc9RkMwezMcvOdw+cKFGUna/JN
1ETYsfmX+M5n663IOu5Aak4nZ4/K1wbenDQ7MplfWx96JBqX
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:45 2025 by rpki-client