Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139362e302f32342d3234203d3e203532333031.roa
File: 3230302e32362e3139362e302f32342d3234203d3e203532333031.roa (raw, json)
Hash identifier: C3C0RwUs5VTMepqiSX0azs6G/XQzrwYGXVgC1W/AwVs=
Subject key identifier: C5:1C:B3:87:C6:DE:1F:C5:B5:D9:91:72:F7:A7:78:CD:79:B6:75:28
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 04EC9924528D805FFA3020FF774E1912DB4BD4B5
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139362e302f32342d3234203d3e203532333031.roa
Signing time: Tue 04 Feb 2025 18:50:55 +0000
ROA not before: Tue 04 Feb 2025 18:45:55 +0000
ROA not after: Tue 03 Feb 2026 18:50:55 +0000
asID: 52301
IP address blocks: 200.26.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 11:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ec:99:24:52:8d:80:5f:fa:30:20:ff:77:4e:19:12:db:4b:d4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Feb 4 18:45:55 2025 GMT
Not After : Feb 3 18:50:55 2026 GMT
Subject: CN=C51CB387C6DE1FC5B5D99172F7A778CD79B67528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:ce:8e:7c:2c:a7:2d:50:08:81:1e:03:cf:
c9:39:32:f1:87:d9:db:9a:7f:ce:94:f3:3d:ef:fd:
6b:f1:e8:7f:96:dd:30:50:c7:c5:4d:a8:7e:18:5f:
8a:46:7a:36:0b:29:b4:91:35:d0:21:53:13:39:58:
56:a9:6b:58:6b:c2:07:f7:d3:67:4f:5a:43:0a:74:
42:a8:14:8a:5c:20:18:ce:94:40:4f:41:1d:04:53:
de:6e:fd:ba:d0:b5:cb:e0:b0:1c:16:15:6f:fb:af:
cb:bd:be:e5:34:29:31:30:50:bc:9a:79:03:09:3e:
24:5a:16:be:a8:9f:e8:1d:75:63:70:33:36:a4:3a:
dc:4b:5d:f6:3a:a6:a5:99:34:cd:0e:8f:0d:18:96:
2f:dd:e2:7a:b9:15:5c:d9:da:6a:26:5f:f3:de:79:
94:24:48:9f:47:08:2b:f7:83:b1:a3:ac:2f:88:98:
67:cb:d1:51:26:06:50:28:57:37:ae:08:20:13:1f:
ce:76:b9:3a:01:f4:17:11:ba:a7:00:13:a5:b8:49:
02:b6:f2:a9:f0:ec:1b:46:51:2c:d2:b4:ac:d8:d4:
2c:24:85:07:85:40:6c:15:34:18:61:da:b7:7f:40:
5c:00:a8:ac:92:ce:47:10:82:ec:52:1b:8e:f2:bd:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:B3:87:C6:DE:1F:C5:B5:D9:91:72:F7:A7:78:CD:79:B6:75:28
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139362e302f32342d3234203d3e203532333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.196.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7e:00:d5:45:f2:d2:1d:ed:08:d0:91:92:ce:67:78:c3:e8:
0b:15:0b:0d:36:f5:0d:19:c6:04:0e:83:af:da:41:3d:67:1f:
83:75:08:70:57:75:98:ce:34:ad:74:70:76:ea:be:5e:21:0b:
0f:2e:5f:e9:01:14:98:b0:4d:f8:68:8d:bf:40:48:cd:44:dd:
db:ae:47:be:8e:a4:32:fc:e4:74:4d:86:94:67:9a:56:dc:35:
97:55:22:ef:17:ba:96:d0:51:65:10:5d:2b:75:43:ef:a2:c2:
d8:05:78:78:84:1e:e4:e3:b5:8e:d3:a8:7b:44:71:0f:46:d0:
55:16:e6:19:ca:f8:cb:2b:62:b5:d0:61:45:43:bf:49:80:00:
f4:af:35:e8:b1:75:76:65:8b:3e:63:9b:4c:55:df:aa:48:f9:
51:6e:7c:69:25:1c:37:5e:8f:fb:14:95:4e:9e:c6:68:43:af:
c2:0c:5d:33:ab:d6:41:5b:ff:a7:5d:4c:b0:e5:86:e6:f5:eb:
5d:9b:05:c4:13:c4:e2:15:05:3a:f6:56:f8:d5:08:d6:8c:62:
21:6a:a6:2b:fe:fb:af:72:5d:d3:e6:21:40:5f:e3:fc:bf:39:
aa:91:5a:f7:da:89:f7:20:f3:60:19:23:ee:5f:d9:5f:f2:be:
54:0d:0a:aa
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBOyZJFKNgF/6MCD/d04ZEttL1LUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAyMDQxODQ1NTVaFw0yNjAyMDMxODUwNTVaMDMxMTAvBgNV
BAMTKEM1MUNCMzg3QzZERTFGQzVCNUQ5OTE3MkY3QTc3OENENzlCNjc1MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBs6OfCynLVAIgR4Dz8k5MvGH
2duaf86U8z3v/Wvx6H+W3TBQx8VNqH4YX4pGejYLKbSRNdAhUxM5WFapa1hrwgf3
02dPWkMKdEKoFIpcIBjOlEBPQR0EU95u/brQtcvgsBwWFW/7r8u9vuU0KTEwULya
eQMJPiRaFr6on+gddWNwMzakOtxLXfY6pqWZNM0Ojw0Yli/d4nq5FVzZ2momX/Pe
eZQkSJ9HCCv3g7GjrC+ImGfL0VEmBlAoVzeuCCATH852uToB9BcRuqcAE6W4SQK2
8qnw7BtGUSzStKzY1CwkhQeFQGwVNBhh2rd/QFwAqKySzkcQguxSG47yvV/NAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUxRyzh8beH8W12ZFy96d4zXm2dSgwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMyMzAzMDJlMzIzNjJlMzEzOTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgaxDAN
BgkqhkiG9w0BAQsFAAOCAQEAaH4A1UXy0h3tCNCRks5neMPoCxULDTb1DRnGBA6D
r9pBPWcfg3UIcFd1mM40rXRwduq+XiELDy5f6QEUmLBN+GiNv0BIzUTd265Hvo6k
MvzkdE2GlGeaVtw1l1Ui7xe6ltBRZRBdK3VD76LC2AV4eIQe5OO1jtOoe0RxD0bQ
VRbmGcr4yytitdBhRUO/SYAA9K816LF1dmWLPmObTFXfqkj5UW58aSUcN16P+xSV
Tp7GaEOvwgxdM6vWQVv/p11MsOWG5vXrXZsFxBPE4hUFOvZW+NUI1oxiIWqmK/77
r3Jd0+YhQF/j/L85qpFa99qJ9yDzYBkj7l/ZX/K+VA0Kqg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:09 2025 by rpki-client