Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
File: 3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa (raw, json)
Hash identifier: I7KpckX32kqHXWtcM03jESRgDKHz4s4R4GdV/Q7n8q8=
Subject key identifier: 7D:F2:44:F0:4D:55:DF:20:A6:B4:8F:AC:DD:25:AE:2A:A6:9E:4E:89
Certificate issuer: /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial: 3B447BE3E5EFD40CBF515BBFB074DF6A1381EF61
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
Signing time: Tue 04 Feb 2025 18:21:13 +0000
ROA not before: Tue 04 Feb 2025 18:16:13 +0000
ROA not after: Tue 03 Feb 2026 18:21:13 +0000
asID: 265804
IP address blocks: 200.63.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 01:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:44:7b:e3:e5:ef:d4:0c:bf:51:5b:bf:b0:74:df:6a:13:81:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Validity
Not Before: Feb 4 18:16:13 2025 GMT
Not After : Feb 3 18:21:13 2026 GMT
Subject: CN=7DF244F04D55DF20A6B48FACDD25AE2AA69E4E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:24:2e:8d:e9:e2:24:2c:70:11:9b:99:8d:
ec:88:54:ed:e2:7d:d5:97:76:0e:62:00:0b:66:5c:
89:c4:00:a6:f5:01:f8:d7:d0:e7:41:cc:8a:ae:94:
47:d5:24:03:0b:d1:ab:13:3c:1c:ba:a6:66:8e:1a:
83:70:2b:28:82:72:9a:e1:8c:96:fb:f2:9f:89:c2:
91:dd:85:50:48:db:ec:78:70:c1:5e:fe:67:c5:3e:
34:04:33:f0:10:8e:dc:9b:8a:86:20:7b:fe:10:c8:
df:6f:ab:54:bc:f6:ed:bc:95:6d:1f:44:93:32:e5:
48:bb:c5:7f:a8:d9:b6:95:bc:0d:53:a5:45:c1:8a:
90:dc:39:0c:bc:cc:87:b6:5d:f2:2d:3f:45:03:77:
90:46:77:d1:f4:d1:cb:27:4d:8e:6a:e2:bf:c9:cd:
38:bf:e4:21:81:15:de:74:e5:19:0f:78:78:89:bb:
bc:2b:ee:5a:e1:3a:15:05:c8:67:da:f3:c2:5f:33:
42:cb:e7:30:66:84:40:69:92:9e:4e:2e:28:76:0c:
db:c5:13:dc:00:14:a4:4d:5a:9c:f1:bc:fb:b7:df:
1f:5a:77:da:5c:ba:c9:57:b8:6c:19:d7:30:e3:2c:
b8:d7:d4:86:78:b3:21:d8:75:a1:78:9d:84:f1:96:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:44:F0:4D:55:DF:20:A6:B4:8F:AC:DD:25:AE:2A:A6:9E:4E:89
X509v3 Authority Key Identifier:
keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:bf:9f:82:8d:86:4c:a0:3a:28:65:eb:ea:c6:82:90:42:8a:
db:3a:1f:5e:5c:e3:58:08:c5:54:b1:50:9f:fb:86:01:49:d0:
75:a2:45:3e:f9:c8:ed:49:ae:07:26:91:3f:49:4b:15:02:d6:
12:23:44:ac:4a:f3:27:65:e5:b1:18:21:e5:e9:64:0e:d8:79:
05:75:cc:ff:e0:1f:81:69:69:33:14:ec:3a:e7:03:26:60:c1:
a5:92:8b:c2:f4:04:e9:31:31:16:da:59:be:2c:62:c5:48:82:
83:c5:cc:17:22:8d:f6:41:0a:bf:ae:a0:5d:33:0c:12:aa:94:
3b:34:bf:30:b2:cf:c8:55:24:fd:1b:da:08:6a:d7:0a:49:0a:
d4:4f:f2:94:0e:64:47:5d:40:81:db:43:af:e2:bd:7e:ff:8b:
35:54:6a:25:e0:5d:e7:b6:12:28:e7:0d:5d:73:4d:0e:18:ad:
46:a1:8c:f4:31:9d:59:a0:79:9d:64:4c:e3:3a:60:06:19:73:
bd:84:34:b5:ab:b0:41:38:c1:ee:64:8a:d9:d2:fb:f5:14:bd:
84:96:3c:6e:8f:bf:9f:e3:da:2d:4e:f0:1f:94:3a:27:c3:c9:
30:95:1e:50:5c:7e:47:f9:0b:70:e6:ce:08:0f:58:09:ee:15:
b5:bf:93:01
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUO0R74+Xv1Ay/UVu/sHTfahOB72EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdDMkJGQ0QzMTk2MzMzMUM3MUI0OUY0OTA0NzdFODI2
NEJBNTVENzAeFw0yNTAyMDQxODE2MTNaFw0yNjAyMDMxODIxMTNaMDMxMTAvBgNV
BAMTKDdERjI0NEYwNEQ1NURGMjBBNkI0OEZBQ0REMjVBRTJBQTY5RTRFODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIiQujeniJCxwEZuZjeyIVO3i
fdWXdg5iAAtmXInEAKb1AfjX0OdBzIqulEfVJAML0asTPBy6pmaOGoNwKyiCcprh
jJb78p+JwpHdhVBI2+x4cMFe/mfFPjQEM/AQjtybioYge/4QyN9vq1S89u28lW0f
RJMy5Ui7xX+o2baVvA1TpUXBipDcOQy8zIe2XfItP0UDd5BGd9H00csnTY5q4r/J
zTi/5CGBFd505RkPeHiJu7wr7lrhOhUFyGfa88JfM0LL5zBmhEBpkp5OLih2DNvF
E9wAFKRNWpzxvPu33x9ad9pcuslXuGwZ1zDjLLjX1IZ4syHYdaF4nYTxlt+XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUffJE8E1V3yCmtI+s3SWuKqaeTokwHwYDVR0j
BBgwFoAUx8K/zTGWMzHHG0n0kEd+gmS6VdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzRCNzMwREM0MEJCQkE1Rjg5MDc4Q0RBMEYyQ0EwN0Yx
Q0NGNTVEQzgyMzVFRTBBMTE4RTdCQTU3M0E1QTI0LzAvQzdDMkJGQ0QzMTk2MzMz
MUM3MUI0OUY0OTA0NzdFODI2NEJBNTVENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DN0MyQkZDRDMxOTYzMzMxQzcx
QjQ5RjQ5MDQ3N0U4MjY0QkE1NUQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM0QjczMERDNDBCQkJBNUY4OTA3OENEQTBGMkNBMDdGMUNDRjU1REM4
MjM1RUUwQTExOEU3QkE1NzNBNUEyNC8wLzMyMzAzMDJlMzYzMzJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyD9s
MA0GCSqGSIb3DQEBCwUAA4IBAQCrv5+CjYZMoDooZevqxoKQQorbOh9eXONYCMVU
sVCf+4YBSdB1okU++cjtSa4HJpE/SUsVAtYSI0SsSvMnZeWxGCHl6WQO2HkFdcz/
4B+BaWkzFOw65wMmYMGlkovC9ATpMTEW2lm+LGLFSIKDxcwXIo32QQq/rqBdMwwS
qpQ7NL8wss/IVST9G9oIatcKSQrUT/KUDmRHXUCB20Ov4r1+/4s1VGol4F3nthIo
5w1dc00OGK1GoYz0MZ1ZoHmdZEzjOmAGGXO9hDS1q7BBOMHuZIrZ0vv1FL2Eljxu
j7+f49otTvAflDonw8kwlR5QXH5H+Qtw5s4ID1gJ7hW1v5MB
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:18:23 2025 by rpki-client