Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137312e302f32342d3234203d3e20323733383834.roa
File: 3139302e39382e3137312e302f32342d3234203d3e20323733383834.roa (raw, json)
Hash identifier: sM7ZWCy0EA/rTe8UJ+oIeTstmpM6du5fKIcuXhjSZ28=
Subject key identifier: EC:86:6B:52:F6:20:6A:4D:C6:82:5C:AA:45:1C:60:88:05:9F:6C:B8
Certificate issuer: /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial: 3FA9AB7D996C169B4DD6B4792FE8D77C3CA333C9
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137312e302f32342d3234203d3e20323733383834.roa
Signing time: Tue 26 Nov 2024 08:00:00 +0000
ROA not before: Tue 26 Nov 2024 07:55:00 +0000
ROA not after: Tue 25 Nov 2025 08:00:00 +0000
asID: 273884
IP address blocks: 190.98.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a9:ab:7d:99:6c:16:9b:4d:d6:b4:79:2f:e8:d7:7c:3c:a3:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Validity
Not Before: Nov 26 07:55:00 2024 GMT
Not After : Nov 25 08:00:00 2025 GMT
Subject: CN=EC866B52F6206A4DC6825CAA451C6088059F6CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:15:ea:4d:85:00:df:87:00:c2:09:22:b6:
a6:b9:93:7c:3d:33:c5:aa:b8:fe:c7:ea:36:cb:27:
8b:03:fe:53:cf:2d:df:07:70:3a:a2:d1:7d:0d:93:
f7:f1:f2:ab:51:3e:1f:71:9d:8f:65:b1:0c:18:be:
e2:22:40:ca:9e:73:5e:28:5b:5c:9b:3e:12:9d:cd:
f2:ba:8d:a1:cf:a9:73:d8:50:ee:26:d1:66:0d:3c:
08:93:3e:1d:82:9a:7b:75:a8:11:08:d4:49:d2:64:
db:d5:b4:e9:09:4c:8b:fb:28:a2:e3:be:77:60:6e:
6c:69:4b:d6:c2:21:6e:79:59:77:42:ed:c5:0a:14:
7d:57:b5:10:a7:71:cc:bd:d7:eb:d6:0e:4a:e3:3a:
e7:70:9b:ec:bf:eb:b3:24:28:1b:34:67:0e:c6:c2:
f2:f5:a3:3e:92:20:a4:be:cb:b4:db:9e:8d:10:d0:
28:f5:c4:35:58:14:c3:1f:80:db:2a:0f:9b:4e:e0:
52:28:f0:dd:e2:ce:e1:54:93:5b:dd:78:84:e5:58:
2c:37:68:bd:97:59:f5:71:c6:47:71:75:34:75:5f:
b9:30:2e:ad:5e:b8:2f:d2:a0:11:22:a3:37:bf:17:
59:29:ec:a5:83:e2:9c:dc:aa:79:3c:ce:c9:ca:ae:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:6B:52:F6:20:6A:4D:C6:82:5C:AA:45:1C:60:88:05:9F:6C:B8
X509v3 Authority Key Identifier:
keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137312e302f32342d3234203d3e20323733383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9c:ed:63:74:74:4b:94:85:5f:8a:74:89:5f:9a:4d:7e:a2:
78:9a:65:5f:60:c9:03:fd:29:98:9c:bf:65:fc:c8:b6:bf:af:
65:97:d8:31:d5:6a:36:b2:5f:23:6a:73:c8:c8:2b:6b:45:7f:
f5:20:f5:b8:f3:99:11:d4:8a:7b:8d:35:34:dc:55:16:70:03:
4e:81:87:35:e3:9a:91:94:1f:d7:a3:43:4d:6d:dc:51:57:16:
27:69:16:10:1e:05:42:0b:60:9c:9e:d8:4d:08:fd:8d:cd:8a:
f3:e3:b1:e3:72:39:9a:d4:7f:b1:05:83:08:89:f0:43:09:b7:
32:53:f0:71:45:5f:56:26:b6:ed:64:63:1f:f7:89:15:09:f7:
f7:3e:63:69:18:82:06:2f:e1:23:2c:de:0d:50:19:64:a0:1e:
17:32:cf:5a:8a:2c:40:a3:39:9a:80:00:cf:6a:a2:82:17:b5:
78:39:59:c8:eb:1d:1b:06:f7:d1:73:1c:e7:d8:de:9c:49:54:
37:f6:20:cd:6b:79:07:ea:df:2f:a0:6b:2e:0d:88:e3:0a:97:
7d:95:76:75:2f:94:e2:91:75:86:b4:24:90:25:0e:89:05:09:
7c:86:6e:c0:74:a1:cb:06:6e:0b:d4:cc:f5:c2:65:77:b2:ea:
10:db:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:36 2025 by rpki-client