Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139302e302f32342d3234203d3e20323733383738.roa
File: 3137392e36332e3139302e302f32342d3234203d3e20323733383738.roa (raw, json)
Hash identifier: heXtEheSyeyH5VaOSG85NHPIkpuectYya0zHeLy5ka4=
Subject key identifier: D9:D5:86:3C:3E:FD:2C:05:9B:EA:5F:6C:2A:FB:18:15:AA:5F:BE:4B
Certificate issuer: /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial: 759ACBC7959185313509E39422D9B7329D29971D
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139302e302f32342d3234203d3e20323733383738.roa
Signing time: Fri 28 Mar 2025 14:30:00 +0000
ROA not before: Fri 28 Mar 2025 14:25:00 +0000
ROA not after: Fri 27 Mar 2026 14:30:00 +0000
asID: 273878
IP address blocks: 179.63.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9a:cb:c7:95:91:85:31:35:09:e3:94:22:d9:b7:32:9d:29:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Validity
Not Before: Mar 28 14:25:00 2025 GMT
Not After : Mar 27 14:30:00 2026 GMT
Subject: CN=D9D5863C3EFD2C059BEA5F6C2AFB1815AA5FBE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:a5:88:04:32:78:8b:b3:b6:93:55:f6:92:
fa:bd:9b:1e:a4:43:5d:f7:ca:a1:29:25:37:7e:4d:
e2:14:04:59:34:80:c6:2a:22:b1:2a:db:09:a2:d9:
06:6c:b3:3c:5e:0d:8d:ac:72:18:58:6b:6a:4f:85:
14:5a:34:5e:27:77:a2:a5:cd:8d:23:67:7c:a1:b5:
4e:10:93:ac:9c:7a:8d:1d:ed:44:12:4e:1e:41:c8:
ad:9c:cf:f3:fd:ff:a2:39:ad:81:dc:1c:2e:f8:c1:
87:3b:f2:4e:45:9d:e3:f6:df:fe:df:e1:0a:3c:cb:
b1:80:8b:68:61:4f:a7:9d:78:67:b5:5a:f5:aa:b3:
63:26:ab:77:46:2e:84:19:a7:d6:ee:6a:bf:fa:2d:
f8:11:e7:ec:e6:cc:b2:b0:0d:96:5b:87:d3:7b:7f:
cd:7e:07:33:ca:f2:19:92:88:b4:5a:fe:e7:30:5e:
b0:f3:ee:7e:75:40:93:a0:90:4f:e0:fc:a3:ab:33:
e0:36:2c:1e:d9:a9:dd:39:b7:ee:47:59:41:b0:76:
35:2c:ac:e5:06:0d:b8:f3:e1:4a:1a:03:fe:4d:22:
45:c7:fc:b0:37:f9:f2:d3:80:c2:9d:26:87:7e:ee:
b4:61:20:2d:26:00:01:2b:88:56:94:32:d1:28:8c:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:86:3C:3E:FD:2C:05:9B:EA:5F:6C:2A:FB:18:15:AA:5F:BE:4B
X509v3 Authority Key Identifier:
keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139302e302f32342d3234203d3e20323733383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:47:0f:19:bd:76:b2:86:a0:9e:db:7b:6e:50:dd:f3:ff:81:
ed:fb:54:49:b8:a1:6b:ff:3b:84:77:90:1c:b5:e0:ab:f5:8c:
ad:a0:7c:79:da:fb:c8:d9:b2:7b:6e:fa:25:0f:47:35:a3:21:
12:e6:3d:61:67:d4:72:51:c8:be:64:45:47:3b:2f:3e:30:c6:
62:1a:94:e3:56:b0:53:f9:61:24:7e:54:68:cd:37:2e:c5:1a:
04:dd:db:7f:49:e2:89:2c:d9:12:87:5a:46:df:1c:da:32:64:
af:6a:92:6e:2f:bc:7f:35:56:5c:ad:ac:c2:2c:6f:51:23:28:
86:3b:b5:46:de:3c:60:e1:32:df:bd:72:f2:cb:5f:2a:2f:d0:
26:46:4c:11:c9:e9:f2:75:09:f6:27:42:e3:6e:30:bf:94:17:
cb:fd:dd:c7:67:e5:80:99:d9:4b:c8:a8:f0:d4:05:2b:55:86:
9e:cc:e8:a9:24:f4:b9:8b:1a:0b:23:e3:06:9b:44:44:1c:8f:
59:f4:59:2e:20:cc:68:7a:84:9e:93:e5:80:52:39:b8:30:a5:
aa:e9:a0:ba:2f:23:3c:7b:95:8d:c9:29:c4:67:ff:f4:6d:79:
65:d7:79:3f:8f:dc:ce:b3:93:1c:03:c0:e4:ca:0f:ce:08:d2:
d2:6a:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:16:56 2025 by rpki-client