Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa
File: 34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa (raw, json)
Hash identifier: hvoUJ2qB4Z6+zojrhkFIyb/DQRWDzEXArK9a6cBuLbg=
Subject key identifier: 4B:A9:CD:F8:78:9C:9E:82:22:E8:28:77:0F:EE:76:43:F5:F5:DF:43
Certificate issuer: /CN=FA0EDE0E62D2295B14FD550FD9C190A6967BA96C
Certificate serial: 32458F8A6A4045D66A2953FB55452DAC0F78A957
Authority key identifier: FA:0E:DE:0E:62:D2:29:5B:14:FD:55:0F:D9:C1:90:A6:96:7B:A9:6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa
Signing time: Tue 04 Feb 2025 19:58:45 +0000
ROA not before: Tue 04 Feb 2025 19:53:45 +0000
ROA not after: Tue 03 Feb 2026 19:58:45 +0000
asID: 265611
IP address blocks: 45.189.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.crl
rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 18:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:45:8f:8a:6a:40:45:d6:6a:29:53:fb:55:45:2d:ac:0f:78:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA0EDE0E62D2295B14FD550FD9C190A6967BA96C
Validity
Not Before: Feb 4 19:53:45 2025 GMT
Not After : Feb 3 19:58:45 2026 GMT
Subject: CN=4BA9CDF8789C9E8222E828770FEE7643F5F5DF43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:76:ac:4d:49:7c:f3:91:3c:3d:44:da:a8:
63:f6:6d:e5:89:bf:6e:2c:82:2d:bb:b7:5d:eb:ca:
73:d9:78:0f:7b:e1:0a:87:c8:15:70:5f:1a:df:a7:
76:18:fa:00:ce:f8:ab:12:36:41:dd:c9:52:47:85:
fc:60:1b:d3:8c:ae:c2:55:c0:45:b2:42:84:50:0f:
96:7d:96:76:aa:0b:a2:44:3f:f6:ca:73:e8:66:39:
f6:ff:46:5f:da:40:8b:17:5d:95:59:43:b8:ed:1d:
35:96:c1:57:58:fa:50:8c:77:cc:8d:2a:fb:dc:c1:
11:ad:a2:b6:39:7c:c7:9a:bb:79:a4:8f:fb:07:3d:
a7:60:31:1b:23:f1:fb:84:14:d1:8d:3c:1d:a4:84:
1f:15:53:99:b3:51:69:94:fe:f3:63:3e:14:fd:6d:
7f:ca:05:8c:d5:9b:f8:56:a2:42:fa:3f:e0:22:62:
8e:08:dc:e1:44:10:aa:c4:2a:c3:d2:d1:ba:c0:85:
4f:31:92:b7:86:0c:c9:b7:86:59:0e:d3:67:7f:db:
df:54:3a:60:1c:28:3f:5a:21:e6:54:80:78:82:5e:
20:71:ff:78:66:1a:4a:26:ea:09:cf:bf:ee:ac:78:
a5:9c:bc:3d:f1:7d:17:39:40:11:6f:c4:56:05:3a:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:CD:F8:78:9C:9E:82:22:E8:28:77:0F:EE:76:43:F5:F5:DF:43
X509v3 Authority Key Identifier:
keyid:FA:0E:DE:0E:62:D2:29:5B:14:FD:55:0F:D9:C1:90:A6:96:7B:A9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:e6:f1:39:92:3a:2f:20:77:82:97:32:0e:06:e2:82:dd:df:
dc:3c:bb:3c:a3:61:03:f8:94:58:b8:01:0e:24:4f:59:e6:ec:
28:f0:5e:60:6c:3f:09:ea:4e:9b:b9:05:76:e3:56:13:f4:c9:
3b:b5:8e:47:14:6b:f2:6d:96:1f:5b:35:48:26:ca:5c:1c:41:
15:d7:38:a1:d5:a2:08:22:19:4b:37:62:06:5d:1d:06:c6:7b:
16:90:3f:f2:d3:62:38:c8:5e:81:64:c0:a8:7c:d6:3b:3b:0c:
dd:aa:db:44:3b:7c:e7:29:7e:35:21:9b:26:9f:86:16:af:6a:
31:53:c5:fe:63:f4:e7:fe:80:7e:69:2e:de:e3:65:d8:c7:25:
e3:f0:f7:db:ce:c0:a5:1b:2d:16:79:25:ad:de:43:e5:f2:a9:
c2:8b:25:e2:71:2e:55:89:e5:99:a8:d5:4e:16:fd:53:f7:f5:
f3:7e:34:0a:c6:61:08:68:73:aa:ae:4d:ac:bf:4c:c5:53:21:
77:fc:04:4c:33:48:e0:ef:50:32:2f:f5:c4:2a:a3:da:22:cc:
27:98:5b:1d:f4:36:ac:68:7a:19:36:d9:dc:12:46:69:3a:83:
7f:32:9a:1d:5f:c6:9b:07:21:e6:d1:ec:b0:1c:74:60:c1:5c:
4c:2f:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:44:55 2025 by rpki-client