Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e342e302f32342d3234203d3e2037343138.roa
File: 3230302e32382e342e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier: JvsfVZbBtmobybmAburPi9Ef5bVQefJPY0ZxTq7Rcbo=
Subject key identifier: 48:B5:97:D6:C0:66:FD:DD:20:C9:75:E1:F9:22:05:21:27:87:2B:B6
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 24D98CA7C9DB93F1F54895F0924935215BA44177
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e342e302f32342d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:29:58 +0000
ROA not before: Tue 04 Feb 2025 18:24:58 +0000
ROA not after: Tue 03 Feb 2026 18:29:58 +0000
asID: 7418
IP address blocks: 200.28.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 12:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d9:8c:a7:c9:db:93:f1:f5:48:95:f0:92:49:35:21:5b:a4:41:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:58 2025 GMT
Not After : Feb 3 18:29:58 2026 GMT
Subject: CN=48B597D6C066FDDD20C975E1F922052127872BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:07:5a:e0:82:e2:85:6e:48:29:6c:f5:33:
ca:77:fe:93:4b:61:bc:22:ae:ba:18:9c:b0:41:bf:
a9:a5:64:8f:f0:34:05:4a:f4:70:b0:f6:55:d6:66:
66:45:49:08:ce:ec:18:41:e7:d7:70:75:85:43:6d:
98:34:80:21:fd:3b:74:44:ff:18:02:3d:e8:9d:db:
1a:1c:be:9a:9f:fe:f7:2a:42:d9:1f:6e:24:13:f5:
70:a0:89:f3:51:4c:c1:68:37:1e:55:f9:d5:8f:68:
5b:68:fa:b6:eb:20:83:65:9c:d9:3b:aa:94:76:38:
78:ca:8a:0e:f3:8b:57:4a:d5:3b:25:02:d2:95:1c:
92:82:01:35:32:5f:25:61:86:e7:cf:45:ee:3b:4e:
ad:b5:fb:8d:d2:9c:34:24:4e:73:d7:f7:99:ab:cb:
db:60:c2:81:84:b6:f5:81:9d:18:b4:c8:db:3f:e1:
88:54:f6:a8:0a:83:d3:70:bd:e5:92:d5:58:66:59:
4e:52:e4:4a:9c:4e:40:c3:17:d6:73:86:eb:17:c8:
d0:26:98:19:80:68:cb:e5:0f:1e:1a:aa:80:9d:79:
b0:36:34:8c:5e:ba:cf:6d:52:d0:3a:2b:23:2c:f6:
6f:ba:36:7e:1f:a1:84:90:0b:40:35:dd:c0:33:fd:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:97:D6:C0:66:FD:DD:20:C9:75:E1:F9:22:05:21:27:87:2B:B6
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e342e302f32342d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.28.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:27:a3:55:10:60:d1:9e:f7:32:7a:e1:da:ba:06:6d:58:24:
65:27:15:ca:6b:93:84:7a:40:fb:01:dd:36:f9:a5:56:5e:b5:
ac:65:37:5e:f5:08:c4:8f:12:60:68:20:4e:96:45:d8:83:1e:
64:68:03:2e:75:a5:98:92:ab:97:17:e9:fa:ff:7b:db:14:c5:
1c:35:93:b6:3c:de:49:96:1a:c5:4d:80:db:be:7a:66:d5:5e:
dc:4e:a3:3b:04:f1:c5:88:3f:62:5d:2a:b4:59:2b:42:ed:87:
02:c0:e6:9d:6c:46:cf:39:a1:7e:7f:f9:0e:c9:80:7e:8e:d8:
50:f7:bb:b4:c5:93:cc:30:c4:b5:0c:2c:e6:05:c1:7e:ec:7f:
c2:16:77:5e:d9:60:84:1a:39:50:a2:60:40:0d:3b:19:65:38:
d2:4e:3d:6e:b8:c9:d3:41:3f:f6:d4:15:d1:65:0a:04:b8:98:
51:7c:9d:b4:84:ac:21:1f:77:b8:03:d5:33:cf:b0:7c:60:9e:
43:53:60:88:90:dd:61:e2:3b:ad:40:99:3a:bd:d2:0f:23:59:
cd:b2:e3:3e:b2:5a:54:14:8f:e1:b3:bc:51:c2:9e:63:e5:3c:
b0:fc:e1:2f:85:13:b7:7a:97:c3:f4:63:a7:f0:16:d6:cc:a6:
ed:0e:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:26:42 2025 by rpki-client