Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/34352e3232382e3138382e302f32322d3234203d3e20323636363638.roa
File: 34352e3232382e3138382e302f32322d3234203d3e20323636363638.roa (raw, json)
Hash identifier: J/0sR8N5oVglNYraIQZUYeTmWsa8TQgjiTM+lFH2gXo=
Subject key identifier: A0:D6:47:5E:2A:55:B0:BF:D2:3F:94:BC:3B:64:95:1B:A6:30:13:2E
Certificate issuer: /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial: 375C80747EF3690AFD0AC9D4554BFB8926A259BD
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/34352e3232382e3138382e302f32322d3234203d3e20323636363638.roa
Signing time: Tue 04 Feb 2025 18:53:12 +0000
ROA not before: Tue 04 Feb 2025 18:48:12 +0000
ROA not after: Tue 03 Feb 2026 18:53:12 +0000
asID: 266668
IP address blocks: 45.228.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 14:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5c:80:74:7e:f3:69:0a:fd:0a:c9:d4:55:4b:fb:89:26:a2:59:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
Validity
Not Before: Feb 4 18:48:12 2025 GMT
Not After : Feb 3 18:53:12 2026 GMT
Subject: CN=A0D6475E2A55B0BFD23F94BC3B64951BA630132E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:fb:e9:ae:19:ec:81:8d:5f:8f:49:c6:ea:
73:ce:37:67:58:4c:68:f7:6f:11:64:ae:26:41:2f:
b8:69:52:cd:03:5d:d7:93:f0:8f:bf:eb:90:83:64:
be:56:59:77:db:d4:50:7d:de:5c:c4:12:dd:b0:97:
12:ff:be:02:66:95:69:f2:24:c8:f7:ee:10:cd:79:
28:2c:e1:02:0e:da:e7:de:2c:2b:bd:a4:0a:69:a7:
f8:29:88:4d:02:d3:ec:a3:f9:5b:fc:aa:9c:e4:d3:
43:55:e3:0b:4c:79:74:1d:6b:f3:53:9d:37:ca:f5:
6b:ab:70:54:ae:f9:de:32:a4:37:2a:84:94:3a:92:
59:7f:cb:f2:68:82:4f:04:fc:d4:5c:8c:de:50:ad:
ce:42:07:d6:43:8f:f6:af:e3:5e:47:c9:9c:df:ca:
f2:98:ba:7c:ac:13:5b:87:c5:e6:ef:78:67:21:0b:
48:3a:2d:07:02:ee:48:04:ed:3f:ac:09:d0:8d:d9:
37:d1:e2:2e:6f:68:d1:31:6a:59:c7:8e:cf:f1:e7:
b6:e6:6b:a6:7c:4a:44:4a:9b:4a:92:db:f5:43:a7:
40:36:ff:42:30:25:53:72:5f:3d:65:65:d5:b8:6d:
9f:71:8f:85:6f:0d:62:c2:34:99:63:de:bb:b7:22:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:47:5E:2A:55:B0:BF:D2:3F:94:BC:3B:64:95:1B:A6:30:13:2E
X509v3 Authority Key Identifier:
keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/34352e3232382e3138382e302f32322d3234203d3e20323636363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:3b:fe:80:15:c1:b5:3d:1b:34:9b:96:91:cc:73:ae:1c:53:
55:a9:3a:ba:ff:0a:7f:22:e9:58:2b:12:19:6a:a5:5a:03:82:
07:11:f7:53:e4:e2:a6:72:41:dd:23:a7:5f:32:31:29:da:c0:
3b:f9:66:a6:80:3d:5c:53:eb:63:0e:59:fb:c1:13:3e:ba:84:
20:e3:1a:fa:03:3c:ba:95:32:21:a1:39:92:9a:57:3c:f5:d2:
8a:9a:13:08:f7:81:91:07:e3:3c:01:06:44:1e:ee:5c:e3:94:
61:63:c4:1d:75:d7:b3:9a:f5:8a:c3:fe:19:20:1f:9e:40:3a:
1e:c0:27:ce:61:65:29:5b:39:53:1b:80:dc:23:8d:70:c0:7c:
f7:c5:92:cf:48:ee:63:cc:48:bf:84:55:8a:3a:3f:96:df:21:
dc:7c:be:6f:68:20:f9:d1:0c:b8:e7:00:de:08:de:65:c1:e6:
14:3d:31:ba:4b:a0:90:b4:37:8d:21:54:25:b5:bc:51:b2:cb:
ee:94:a2:05:21:6e:33:22:e0:62:da:7c:b3:78:92:22:9f:a2:
0d:c3:e6:55:40:ef:66:4e:7e:3f:14:c0:45:fa:1b:ba:a3:b7:
21:9f:00:f9:39:23:5c:6f:33:c9:12:35:d6:5f:37:93:42:89:
9d:a6:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:16:55 2025 by rpki-client