Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
File: 34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa (raw, json)
Hash identifier: JLYjMOMbj4DvNgVXoqvbr8BLVai+S772meumcduRv+o=
Subject key identifier: D4:21:55:CC:4B:05:4D:CD:09:91:F3:75:10:81:C4:A3:6D:3B:5A:76
Certificate issuer: /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial: 0DD8A6677EF8687CDBB02A2BE49BF18A7F66B0C0
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
Signing time: Tue 04 Feb 2025 18:04:11 +0000
ROA not before: Tue 04 Feb 2025 17:59:11 +0000
ROA not after: Tue 03 Feb 2026 18:04:11 +0000
asID: 269946
IP address blocks: 45.189.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d8:a6:67:7e:f8:68:7c:db:b0:2a:2b:e4:9b:f1:8a:7f:66:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Validity
Not Before: Feb 4 17:59:11 2025 GMT
Not After : Feb 3 18:04:11 2026 GMT
Subject: CN=D42155CC4B054DCD0991F3751081C4A36D3B5A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:02:50:80:c5:ba:4a:93:c8:cd:05:06:ae:
06:28:89:da:4d:f7:41:0d:10:8f:a2:95:97:92:19:
59:c9:f1:fc:7f:b6:4c:f5:6e:26:55:9c:80:ce:88:
e6:ba:7a:44:f7:35:33:e6:aa:ef:26:40:f0:07:d6:
c0:96:b3:ee:5a:69:9b:dc:56:b3:0b:c7:37:9c:c3:
6a:f1:9b:13:f2:6e:96:d6:2e:c3:05:04:be:15:e1:
c7:46:ac:82:04:d7:fc:c7:8c:8b:af:92:96:45:ce:
cd:22:30:37:e8:7a:b0:8e:32:f4:c2:46:2f:b2:7d:
45:b0:6a:4b:a8:8f:86:bf:9b:39:b8:42:69:39:34:
ec:68:87:77:24:ad:4d:03:62:c5:a0:e4:c4:e5:7d:
64:3d:49:06:4c:01:fb:aa:1a:0b:a2:e8:5c:e2:c7:
4b:2e:39:64:db:5c:56:4d:40:e5:88:34:82:b2:98:
11:03:a6:b0:cd:0a:e4:70:be:02:3a:c7:dc:f8:a8:
c4:57:47:82:ab:ab:5d:2b:33:c8:a8:b5:db:67:4a:
fe:2a:9f:60:ef:25:bf:04:58:53:88:cb:a1:d9:a7:
f9:43:ef:a8:2c:5e:62:ad:c1:fc:39:8b:13:01:8d:
19:77:7c:d0:88:dc:3c:25:b4:d1:f6:df:4e:24:74:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:55:CC:4B:05:4D:CD:09:91:F3:75:10:81:C4:A3:6D:3B:5A:76
X509v3 Authority Key Identifier:
keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bc:d9:cb:ed:79:9a:31:87:4c:6f:c4:72:09:8a:6e:d1:91:
43:a4:e7:b5:d6:e4:d3:52:bd:b7:4a:bb:1e:69:ac:aa:be:11:
af:a2:1a:d6:4d:15:85:43:75:e8:40:a6:5d:2f:79:d9:c2:35:
58:06:e1:a8:1c:d5:94:05:8d:44:ee:45:70:a6:bd:88:45:01:
8d:df:21:fd:02:70:df:87:d1:64:0c:48:71:d9:38:ac:df:7e:
4b:21:19:eb:3d:38:c7:8d:24:cd:57:0c:ae:85:af:51:c2:ef:
dc:d6:c9:11:cd:14:73:9e:74:48:0f:63:05:99:ba:aa:b0:fd:
d6:1f:d6:21:5f:39:ee:d2:a3:16:67:dd:20:d5:a1:d9:78:53:
13:6a:e8:f1:16:76:b9:a6:a2:41:b1:e9:df:e1:f2:9f:c0:72:
e6:9f:86:dd:42:f0:8e:be:5f:1a:98:7b:1a:a4:50:eb:a0:6e:
7b:03:31:bf:bb:23:5d:89:c4:00:89:ac:04:33:d3:54:9a:52:
04:8d:84:06:24:73:4c:92:f3:34:e1:30:33:99:b3:3f:96:12:
e1:4a:8b:75:e8:3a:6d:59:dd:bd:9d:da:46:ca:bb:cd:78:b5:
5b:e8:d3:94:ae:f1:e3:f7:39:c7:96:b6:d9:99:48:50:8c:4c:
a3:02:1f:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDdimZ374aHzbsCor5Jvxin9msMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyN0EwOUVBOTlBREU1OEMwQ0NEODRGMThDNDk5QzQ1
RUMxMjE4NTAeFw0yNTAyMDQxNzU5MTFaFw0yNjAyMDMxODA0MTFaMDMxMTAvBgNV
BAMTKEQ0MjE1NUNDNEIwNTREQ0QwOTkxRjM3NTEwODFDNEEzNkQzQjVBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iwJQgMW6SpPIzQUGrgYoidpN
90ENEI+ilZeSGVnJ8fx/tkz1biZVnIDOiOa6ekT3NTPmqu8mQPAH1sCWs+5aaZvc
VrMLxzecw2rxmxPybpbWLsMFBL4V4cdGrIIE1/zHjIuvkpZFzs0iMDfoerCOMvTC
Ri+yfUWwakuoj4a/mzm4Qmk5NOxoh3ckrU0DYsWg5MTlfWQ9SQZMAfuqGgui6Fzi
x0suOWTbXFZNQOWINIKymBEDprDNCuRwvgI6x9z4qMRXR4Krq10rM8iotdtnSv4q
n2DvJb8EWFOIy6HZp/lD76gsXmKtwfw5ixMBjRl3fNCI3DwltNH2304kdLVXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1CFVzEsFTc0JkfN1EIHEo207WnYwHwYDVR0j
BBgwFoAUASegnqma3ljAzNhPGMSZxF7BIYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTU2OUEyQzBCQTZDNzhCNjQ3RUY0ODlDQjVFOUU0QkIx
MjFDM0FCOTdFMTA5NkQwNzVDMDgyQTVDQUJDQUMwLzAvMDEyN0EwOUVBOTlBREU1
OEMwQ0NEODRGMThDNDk5QzQ1RUMxMjE4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTI3QTA5RUE5OUFERTU4QzBD
Q0Q4NEYxOEM0OTlDNDVFQzEyMTg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUE1NjlBMkMwQkE2Qzc4QjY0N0VGNDg5Q0I1RTlFNEJCMTIxQzNBQjk3
RTEwOTZEMDc1QzA4MkE1Q0FCQ0FDMC8wLzM0MzUyZTMxMzgzOTJlMzIzMzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3q
MA0GCSqGSIb3DQEBCwUAA4IBAQCnvNnL7XmaMYdMb8RyCYpu0ZFDpOe11uTTUr23
SrseaayqvhGvohrWTRWFQ3XoQKZdL3nZwjVYBuGoHNWUBY1E7kVwpr2IRQGN3yH9
AnDfh9FkDEhx2Tis335LIRnrPTjHjSTNVwyuha9Rwu/c1skRzRRznnRID2MFmbqq
sP3WH9YhXznu0qMWZ90g1aHZeFMTaujxFna5pqJBsenf4fKfwHLmn4bdQvCOvl8a
mHsapFDroG57AzG/uyNdicQAiawEM9NUmlIEjYQGJHNMkvM04TAzmbM/lhLhSot1
6DptWd29ndpGyrvNeLVb6NOUrvHj9znHlrbZmUhQjEyjAh8t
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:14 2025 by rpki-client