Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa
File: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (raw, json)
Hash identifier: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=
Subject key identifier: 35:88:71:A1:3C:70:53:8F:EF:22:40:0F:1F:DB:1B:FF:92:99:C7:51
Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial: 6AE8E9EACACDFE6A24551C589D9C73BD3BD8827B
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa
Signing time: Tue 04 Feb 2025 18:23:24 +0000
ROA not before: Tue 04 Feb 2025 18:18:24 +0000
ROA not after: Tue 03 Feb 2026 18:23:24 +0000
asID: 265794
IP address blocks: 192.141.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e8:e9:ea:ca:cd:fe:6a:24:55:1c:58:9d:9c:73:bd:3b:d8:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Validity
Not Before: Feb 4 18:18:24 2025 GMT
Not After : Feb 3 18:23:24 2026 GMT
Subject: CN=358871A13C70538FEF22400F1FDB1BFF9299C751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:69:55:b9:56:43:5f:5d:14:80:20:46:49:
11:15:d7:04:4f:be:90:35:40:44:38:a3:13:92:95:
30:0e:71:2a:7e:39:ff:7a:e3:d7:37:2c:a5:66:dd:
06:10:c7:68:e6:64:f5:d3:5f:d4:4a:3f:09:07:e7:
5c:f6:8d:8d:ee:c8:68:91:b6:6e:7c:38:e9:4a:ee:
f8:bb:7e:f0:ba:18:67:87:87:0d:d0:3e:6d:4c:0f:
8f:ed:67:cd:3a:95:a1:83:8b:26:18:22:48:22:88:
d8:7c:7d:5b:9c:86:99:b6:da:12:ac:22:19:33:41:
12:41:73:d9:a6:1c:d1:12:24:e8:60:a1:87:36:82:
28:ce:3a:79:db:e4:5b:bc:d8:72:2e:ed:d9:ee:17:
41:b9:0f:d7:a5:7a:c0:ba:f6:bc:96:bf:eb:dd:71:
85:91:5b:ee:df:ea:76:a6:1e:86:fe:bb:5c:6d:e7:
cb:d9:1f:44:f6:2e:40:97:d7:86:eb:dd:67:5e:d2:
25:47:4c:f5:87:56:bf:34:64:82:d7:51:91:ed:b0:
85:6f:1e:53:83:e9:1b:b7:c4:85:3d:f8:e7:8d:8b:
71:d3:91:6e:41:a7:b0:02:1b:e7:c1:6d:d4:a7:3b:
d4:88:04:32:12:a7:5b:51:a3:de:ed:3f:06:1b:92:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:71:A1:3C:70:53:8F:EF:22:40:0F:1F:DB:1B:FF:92:99:C7:51
X509v3 Authority Key Identifier:
keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:64:ac:44:8f:12:55:dc:1b:ee:da:be:02:32:e1:bf:95:10:
60:af:a7:0f:68:a0:92:b6:4a:7e:c4:63:14:86:7a:77:fc:48:
26:94:30:85:c5:00:2c:2e:91:0d:27:c3:cf:e5:c0:c6:60:aa:
47:9c:c0:4e:b6:67:13:a4:23:24:9a:ec:b7:76:6d:b6:d7:12:
eb:7b:02:a5:de:1a:56:ff:dd:17:df:9e:48:6f:2c:66:81:0a:
d9:1a:5b:d0:e4:65:46:51:a3:b3:1f:6c:d0:c1:33:7c:88:68:
e2:1b:d2:53:c4:1c:e0:ed:04:b2:df:e0:0f:62:7d:53:de:6a:
b4:c0:7c:b5:a7:85:b3:b1:a2:05:79:e6:d3:56:03:48:ab:16:
cb:fb:ad:b2:4d:b9:52:f9:25:ce:53:61:86:bd:67:7d:29:2c:
c0:a7:61:e4:05:05:89:7f:9d:f2:8b:c1:28:23:68:80:7f:7c:
6f:8b:c5:08:f1:91:ba:dc:ae:09:ee:3a:d1:4f:f3:34:e5:8d:
01:72:37:a5:74:52:ee:f5:27:fd:eb:9f:72:21:10:28:a3:be:
70:41:ae:bb:97:ed:11:42:61:93:05:70:96:1d:e6:ab:e6:42:
d5:57:71:57:29:3d:1d:c5:39:1b:28:f8:a4:5f:98:e1:6c:d0:
30:06:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:11:18 2025 by rpki-client