Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3134332e302e3130342e302f32322d3234203d3e203137303739.roa
File: 3134332e302e3130342e302f32322d3234203d3e203137303739.roa (raw, json)
Hash identifier: uTJJ9wYqfKqq8t/k6mAa1POW/2G1jDUFr6aLtBZCoEk=
Subject key identifier: 27:86:E1:D9:83:E5:26:F8:E9:D7:5F:E9:EF:92:AC:0D:24:05:68:6D
Certificate issuer: /CN=7E430D26B905E716C96769CDDDB35113F08000A7
Certificate serial: 331F5A985435C5DDFE643889A19F3223FBF890B4
Authority key identifier: 7E:43:0D:26:B9:05:E7:16:C9:67:69:CD:DD:B3:51:13:F0:80:00:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3134332e302e3130342e302f32322d3234203d3e203137303739.roa
Signing time: Tue 04 Feb 2025 18:54:20 +0000
ROA not before: Tue 04 Feb 2025 18:49:20 +0000
ROA not after: Tue 03 Feb 2026 18:54:20 +0000
asID: 17079
IP address blocks: 143.0.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.crl
rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1f:5a:98:54:35:c5:dd:fe:64:38:89:a1:9f:32:23:fb:f8:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E430D26B905E716C96769CDDDB35113F08000A7
Validity
Not Before: Feb 4 18:49:20 2025 GMT
Not After : Feb 3 18:54:20 2026 GMT
Subject: CN=2786E1D983E526F8E9D75FE9EF92AC0D2405686D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:43:d9:bf:47:6d:4b:6c:cc:6d:13:4a:c5:
9a:b9:bd:43:90:7e:63:a8:62:96:ee:7f:26:2f:9f:
e0:0e:75:3b:33:1b:bd:b0:4d:96:86:b1:6d:e5:e6:
eb:fd:12:f8:30:b3:d3:9e:3a:c0:90:c8:72:70:90:
7c:31:99:df:10:1b:8c:32:39:c8:70:b0:43:ac:c5:
f7:3a:29:de:2c:57:72:75:d7:24:3a:d1:6f:06:08:
f5:65:26:dc:a5:6e:e1:62:67:3a:38:f3:c5:71:8b:
17:a2:87:8e:1d:f9:fc:9a:10:a2:b4:c7:2e:d3:4f:
a4:a8:21:0b:aa:c1:24:77:47:89:66:e9:e7:51:b5:
d1:5b:b6:35:64:e1:b6:ef:84:44:07:c3:b7:c3:5f:
4f:70:e3:3d:66:61:17:3f:d2:fb:36:5a:b3:73:f1:
a5:a8:df:a0:0b:17:5b:4b:a9:7a:53:3c:7e:b1:68:
4b:c1:b7:15:06:ee:53:42:3d:4b:20:4c:e2:e0:70:
b5:98:f7:09:42:97:18:2b:2c:b9:e9:f7:52:da:b0:
5f:1c:53:f1:28:d4:21:fc:3f:4f:50:d8:2c:b1:30:
27:9d:e5:4c:0c:74:1b:2f:a1:1a:1a:51:40:5c:f6:
e4:0a:4f:9c:31:a6:b0:b8:f6:05:92:a0:0c:3c:9d:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:E1:D9:83:E5:26:F8:E9:D7:5F:E9:EF:92:AC:0D:24:05:68:6D
X509v3 Authority Key Identifier:
keyid:7E:43:0D:26:B9:05:E7:16:C9:67:69:CD:DD:B3:51:13:F0:80:00:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3134332e302e3130342e302f32322d3234203d3e203137303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.104.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ac:ac:aa:de:d9:dd:5b:12:a4:e8:74:a6:4f:bd:97:c4:61:
88:df:40:0f:eb:e2:65:ff:b4:31:56:fb:c7:75:f6:76:d0:66:
ac:00:3e:b0:74:33:28:b9:d3:92:51:7e:74:c8:2f:a4:57:43:
04:7a:1a:36:f9:a0:ee:49:21:a8:36:94:ea:19:41:08:cf:16:
28:11:4a:01:62:a6:57:cc:06:5f:64:e8:07:af:22:dc:c3:51:
68:3e:ba:07:7f:3f:76:57:83:c6:79:78:34:ad:bf:2c:56:69:
53:d1:52:3f:fa:de:fc:b2:88:9a:9c:48:63:1a:49:3a:73:e8:
f5:ea:3d:2f:7c:6f:13:11:ba:74:7d:5c:39:91:2a:86:ed:ce:
0f:dc:c0:a8:5a:99:04:ad:31:58:ee:45:2a:d3:9c:c6:1c:3e:
79:20:07:d8:af:f1:06:1c:41:51:4e:33:ee:67:63:6c:21:18:
a5:d8:c3:29:4f:4d:0f:1c:e0:00:e2:94:b0:54:10:88:63:ff:
66:10:8b:0f:6a:c6:96:22:04:c7:da:9d:16:2a:b1:be:87:47:
4f:7e:1a:4f:a8:85:f7:c6:6d:11:31:60:08:ab:3a:a9:70:2c:
04:fb:d4:69:73:1c:7d:54:ca:55:bc:98:b2:fb:0e:52:74:8d:
66:5d:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:15 2025 by rpki-client