Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3137392e36302e3138382e302f32322d3234203d3e20323633323338.roa
File: 3137392e36302e3138382e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier: dlYbca+82U/jtrVPfJ4eS6rTi1fcEfY19Lua4m8BPzg=
Subject key identifier: B2:2A:1C:32:82:F6:7B:27:A1:0C:B2:B8:BA:B9:7C:A4:13:34:E9:40
Certificate issuer: /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial: 68877DA8156EC47BB4BA4E11EA1E080AE0D340E8
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3137392e36302e3138382e302f32322d3234203d3e20323633323338.roa
Signing time: Tue 24 Dec 2024 02:45:00 +0000
ROA not before: Tue 24 Dec 2024 02:40:00 +0000
ROA not after: Tue 23 Dec 2025 02:45:00 +0000
asID: 263238
IP address blocks: 179.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:87:7d:a8:15:6e:c4:7b:b4:ba:4e:11:ea:1e:08:0a:e0:d3:40:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
Validity
Not Before: Dec 24 02:40:00 2024 GMT
Not After : Dec 23 02:45:00 2025 GMT
Subject: CN=B22A1C3282F67B27A10CB2B8BAB97CA41334E940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:36:d1:2a:09:cf:f4:61:90:7e:0c:d1:fb:
48:0b:92:2b:77:53:b4:0e:bd:39:d5:19:98:b2:e0:
f1:78:7e:b6:0c:cc:b3:20:c8:9a:9a:7b:c2:8b:a6:
f1:c9:07:96:ae:ab:12:c7:c8:8e:0d:82:1d:68:56:
dd:f5:bb:de:0c:7c:cd:45:8c:13:27:a1:56:93:b2:
b6:05:8d:5f:44:80:97:42:6f:55:3f:56:e4:95:6e:
32:b4:d4:31:a2:67:2c:43:ba:c1:bb:cd:b4:4e:79:
aa:39:9b:18:2c:dc:e2:82:23:23:d3:1b:9a:20:3f:
e6:a5:4a:2a:e9:ed:1c:20:4a:b3:88:2b:50:bc:e7:
e1:6f:b1:89:73:fc:ad:16:33:ba:10:bc:b0:d4:65:
4d:52:e0:83:15:65:1d:09:d9:77:de:a4:8c:5a:22:
26:af:d2:0d:2b:1c:fc:dc:7c:96:5c:77:e9:f3:4d:
b0:65:40:38:8a:5a:c9:bc:ed:e6:f9:e2:02:7d:a7:
96:a4:e8:00:51:1f:b7:24:8c:b9:02:cc:04:30:e1:
bd:fb:27:13:14:b5:71:62:30:31:ef:25:69:26:7f:
e8:1c:bc:25:7e:8c:59:f3:2d:ee:64:54:96:0d:c3:
5e:dd:8d:fb:ae:4c:45:42:7d:09:6d:0a:de:1c:6a:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:1C:32:82:F6:7B:27:A1:0C:B2:B8:BA:B9:7C:A4:13:34:E9:40
X509v3 Authority Key Identifier:
keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3137392e36302e3138382e302f32322d3234203d3e20323633323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:65:d5:b5:f0:5e:34:de:cf:90:2e:48:e9:d7:c9:2e:a8:c7:
16:d7:2a:68:53:1d:8c:f7:c8:0c:99:54:f1:7f:d4:9c:21:83:
fd:57:31:69:39:e1:23:bd:e6:91:bd:1c:75:67:9b:7d:e4:a1:
91:80:c0:ab:36:a1:f6:10:ae:54:1a:f7:b7:21:08:93:64:d3:
8f:12:c9:18:6d:83:7d:4f:d7:b3:28:42:08:c2:61:e6:02:fb:
d3:89:3f:c4:d9:e1:d8:27:0e:3e:d5:47:d4:b7:7a:2c:f1:dd:
cd:4a:ea:4e:77:b0:a9:3e:16:ff:6a:8a:b9:b9:65:3d:81:75:
24:6b:66:79:ec:54:af:4c:fa:03:83:7a:5f:e2:bd:68:99:6e:
a1:2d:3f:f5:58:9a:18:08:bf:5b:97:c7:74:2c:90:63:b6:e0:
16:90:3f:27:44:e9:7c:5d:a3:02:3f:76:c9:97:3e:0b:a9:ab:
fc:75:c3:fd:2f:f5:df:18:dd:79:1f:a5:3f:93:b0:41:88:ab:
e4:b5:f4:0a:b1:05:a3:56:71:80:e0:e6:ee:16:88:8a:26:05:
57:33:d9:d0:0a:de:1c:02:3b:1e:e0:6e:51:d6:df:52:58:d3:
9a:d1:74:d4:f1:c1:0f:c9:f7:59:d9:d4:a4:37:8f:2d:83:94:
d0:77:fe:93
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaId9qBVuxHu0uk4R6h4ICuDTQOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRDQjA4RDZFMDY4OEY4RTQ5OUREOTExOTBFNDkwMDBD
QzgzNzc1OTAeFw0yNDEyMjQwMjQwMDBaFw0yNTEyMjMwMjQ1MDBaMDMxMTAvBgNV
BAMTKEIyMkExQzMyODJGNjdCMjdBMTBDQjJCOEJBQjk3Q0E0MTMzNEU5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKTbRKgnP9GGQfgzR+0gLkit3
U7QOvTnVGZiy4PF4frYMzLMgyJqae8KLpvHJB5auqxLHyI4Ngh1oVt31u94MfM1F
jBMnoVaTsrYFjV9EgJdCb1U/VuSVbjK01DGiZyxDusG7zbROeao5mxgs3OKCIyPT
G5ogP+alSirp7RwgSrOIK1C85+FvsYlz/K0WM7oQvLDUZU1S4IMVZR0J2XfepIxa
Iiav0g0rHPzcfJZcd+nzTbBlQDiKWsm87eb54gJ9p5ak6ABRH7ckjLkCzAQw4b37
JxMUtXFiMDHvJWkmf+gcvCV+jFnzLe5kVJYNw17djfuuTEVCfQltCt4cag3hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsiocMoL2eyehDLK4url8pBM06UAwHwYDVR0j
BBgwFoAUdMsI1uBoj45JndkRkOSQAMyDd1kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0ZBRjY1OEM4QzMyQ0UyNjNERDU0QzkwMEY1RDA2MjY0
QzQzODQ2NENGOTI2MzJEQ0VEQkJBMjkxMjI5QzFGLzAvNzRDQjA4RDZFMDY4OEY4
RTQ5OUREOTExOTBFNDkwMDBDQzgzNzc1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NENCMDhENkUwNjg4RjhFNDk5
REQ5MTE5MEU0OTAwMENDODM3NzU5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNGQUY2NThDOEMzMkNFMjYzREQ1NEM5MDBGNUQwNjI2NEM0Mzg0NjRD
RjkyNjMyRENFREJCQTI5MTIyOUMxRi8wLzMxMzczOTJlMzYzMDJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCszy8
MA0GCSqGSIb3DQEBCwUAA4IBAQANZdW18F403s+QLkjp18kuqMcW1ypoUx2M98gM
mVTxf9ScIYP9VzFpOeEjveaRvRx1Z5t95KGRgMCrNqH2EK5UGve3IQiTZNOPEskY
bYN9T9ezKEIIwmHmAvvTiT/E2eHYJw4+1UfUt3os8d3NSupOd7CpPhb/aoq5uWU9
gXUka2Z57FSvTPoDg3pf4r1omW6hLT/1WJoYCL9bl8d0LJBjtuAWkD8nROl8XaMC
P3bJlz4Lqav8dcP9L/XfGN15H6U/k7BBiKvktfQKsQWjVnGA4ObuFoiKJgVXM9nQ
Ct4cAjse4G5R1t9SWNOa0XTU8cEPyfdZ2dSkN48tg5TQd/6T
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:13 2025 by rpki-client