Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32342d3234203d3e20323634373534.roa
File: 3136382e3139342e3134322e302f32342d3234203d3e20323634373534.roa (raw, json)
Hash identifier: bKANnLl3wkp+NH6grvl8q77PiAmPo/zIkjcVOzqKZLs=
Subject key identifier: 15:6E:E0:56:48:E5:73:EA:9C:24:FD:FC:A5:D5:E5:AB:6A:52:E3:77
Certificate issuer: /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial: 14C3E2AE38F7F38859200B2DA3D9979FF7C9F394
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32342d3234203d3e20323634373534.roa
Signing time: Tue 04 Feb 2025 18:32:37 +0000
ROA not before: Tue 04 Feb 2025 18:27:37 +0000
ROA not after: Tue 03 Feb 2026 18:32:37 +0000
asID: 264754
IP address blocks: 168.194.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c3:e2:ae:38:f7:f3:88:59:20:0b:2d:a3:d9:97:9f:f7:c9:f3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Validity
Not Before: Feb 4 18:27:37 2025 GMT
Not After : Feb 3 18:32:37 2026 GMT
Subject: CN=156EE05648E573EA9C24FDFCA5D5E5AB6A52E377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:57:bd:87:2d:45:85:48:2e:f0:59:42:2a:
cc:42:f4:77:12:e1:c8:0b:20:3a:ea:6b:83:48:34:
8f:8c:d9:a0:6a:f2:11:e2:58:d4:a1:a8:54:e2:09:
64:c5:4b:57:5e:c6:a5:76:fd:30:38:65:7d:f2:d8:
d5:bd:30:ef:82:42:30:1a:22:0b:20:db:88:be:60:
5b:85:64:8f:78:d9:47:41:e0:3e:21:17:98:a6:0f:
78:84:cf:09:b5:d3:fd:f0:3d:de:07:cd:79:00:f8:
a9:c7:5c:11:39:25:8c:7e:96:fe:d9:fc:8e:0b:2f:
71:7a:99:fd:26:f5:1a:28:07:43:c7:63:40:5d:76:
92:e4:aa:38:5e:c6:90:e5:16:0a:86:64:29:e2:64:
04:1a:31:77:bc:9f:0d:45:4f:90:1f:2f:6e:67:21:
64:d7:5d:04:de:0d:77:11:d0:69:59:07:de:9f:6b:
cc:99:b2:e0:7f:c4:a3:5f:10:cf:bb:57:7c:0b:bc:
8c:7b:0c:e4:16:33:8c:a2:5a:f4:c5:8c:df:47:56:
e3:2e:68:d4:64:08:62:49:86:7d:28:b0:61:d2:cb:
d2:96:ac:14:ed:b2:0d:d1:1f:45:ff:5b:5c:80:cf:
99:32:27:72:6f:6f:e2:f5:b6:d7:40:25:36:10:72:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6E:E0:56:48:E5:73:EA:9C:24:FD:FC:A5:D5:E5:AB:6A:52:E3:77
X509v3 Authority Key Identifier:
keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32342d3234203d3e20323634373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:69:68:9f:db:aa:8a:f0:ed:63:b1:9c:8b:fb:07:e7:5e:a1:
24:f9:42:ce:b6:53:17:10:33:40:b4:54:80:fb:b7:35:ff:a3:
2b:e7:00:a8:c3:f2:2f:e8:06:8e:b2:69:1d:41:6b:78:d7:6f:
a7:08:a2:66:9d:a1:1a:35:da:5c:f6:c2:45:de:23:3b:a9:27:
89:4c:cd:52:e2:d7:32:37:34:7d:59:89:dc:e1:71:a4:1c:84:
7d:8f:63:cf:b1:db:4d:ca:4e:fb:45:f5:34:be:cd:b4:eb:23:
0a:a0:ce:9a:3c:2c:c5:99:a5:ea:fb:ce:4e:27:7c:41:09:8c:
14:df:08:2d:4d:2a:46:86:76:1b:1d:dc:2e:ec:b9:18:8d:46:
bc:54:c4:05:72:66:b1:09:12:c4:76:bd:bd:a2:8d:ce:73:6a:
36:da:91:b0:cc:87:b2:ba:bc:87:4a:02:68:f3:b2:b2:b8:80:
39:36:89:97:af:95:3e:0b:9b:ed:23:58:2d:60:75:47:8c:2e:
7a:d3:70:5e:e1:61:37:f1:95:70:77:df:84:03:50:65:a3:ad:
da:3f:95:4b:34:f5:c5:06:fd:37:e5:d3:da:91:94:30:6a:b7:
c8:21:cc:11:ec:91:ad:e0:6c:77:12:64:0f:43:6a:45:18:64:
de:8d:a4:77
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFMPirjj384hZIAsto9mXn/fJ85QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3QjhCQTNEMDVFMjExQ0Y3Njk3REMzOERCQjc1OTFG
Q0QzMDc1QTAeFw0yNTAyMDQxODI3MzdaFw0yNjAyMDMxODMyMzdaMDMxMTAvBgNV
BAMTKDE1NkVFMDU2NDhFNTczRUE5QzI0RkRGQ0E1RDVFNUFCNkE1MkUzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RVe9hy1FhUgu8FlCKsxC9HcS
4cgLIDrqa4NINI+M2aBq8hHiWNShqFTiCWTFS1dexqV2/TA4ZX3y2NW9MO+CQjAa
Igsg24i+YFuFZI942UdB4D4hF5imD3iEzwm10/3wPd4HzXkA+KnHXBE5JYx+lv7Z
/I4LL3F6mf0m9RooB0PHY0BddpLkqjhexpDlFgqGZCniZAQaMXe8nw1FT5AfL25n
IWTXXQTeDXcR0GlZB96fa8yZsuB/xKNfEM+7V3wLvIx7DOQWM4yiWvTFjN9HVuMu
aNRkCGJJhn0osGHSy9KWrBTtsg3RH0X/W1yAz5kyJ3Jvb+L1ttdAJTYQcs0bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUFW7gVkjlc+qcJP38pdXlq2pS43cwHwYDVR0j
BBgwFoAUrHuLo9BeIRz3aX3Djbt1kfzTB1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMENFOUFBMEJDMjk3NjBBMTNGMUMxRkJBREJDQUE1NjRE
MDk0MzEyRTcwMDI5REZFNkUwRDBBRkRDODg0MDVGLzAvQUM3QjhCQTNEMDVFMjEx
Q0Y3Njk3REMzOERCQjc1OTFGQ0QzMDc1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzdCOEJBM0QwNUUyMTFDRjc2
OTdEQzM4REJCNzU5MUZDRDMwNzVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBDRTlBQTBCQzI5NzYwQTEzRjFDMUZCQURCQ0FBNTY0RDA5NDMxMkU3
MDAyOURGRTZFMEQwQUZEQzg4NDA1Ri8wLzMxMzYzODJlMzEzOTM0MmUzMTM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wo4wDQYJKoZIhvcNAQELBQADggEBALlpaJ/bqorw7WOxnIv7B+deoST5Qs62UxcQ
M0C0VID7tzX/oyvnAKjD8i/oBo6yaR1Ba3jXb6cIomadoRo12lz2wkXeIzupJ4lM
zVLi1zI3NH1ZidzhcaQchH2PY8+x203KTvtF9TS+zbTrIwqgzpo8LMWZper7zk4n
fEEJjBTfCC1NKkaGdhsd3C7suRiNRrxUxAVyZrEJEsR2vb2ijc5zajbakbDMh7K6
vIdKAmjzsrK4gDk2iZevlT4Lm+0jWC1gdUeMLnrTcF7hYTfxlXB334QDUGWjrdo/
lUs09cUG/Tfl09qRlDBqt8ghzBHska3gbHcSZA9DakUYZN6NpHc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 11:08:35 2025 by rpki-client