Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32342d3234203d3e20323637383438.roa
File: 3139302e39372e3136382e302f32342d3234203d3e20323637383438.roa (raw, json)
Hash identifier: 0knj+s95SXjkRckSSU9J58G9kFJGSfwJlNu2v64/iRU=
Subject key identifier: 52:34:EC:61:19:87:78:29:B8:F0:CD:9E:BD:11:C1:C8:FF:0D:C9:CB
Certificate issuer: /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial: 01C022B789C43279D388C876DCDACF0D71BC3D33
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32342d3234203d3e20323637383438.roa
Signing time: Tue 04 Feb 2025 20:01:47 +0000
ROA not before: Tue 04 Feb 2025 19:56:47 +0000
ROA not after: Tue 03 Feb 2026 20:01:47 +0000
asID: 267848
IP address blocks: 190.97.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 21:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c0:22:b7:89:c4:32:79:d3:88:c8:76:dc:da:cf:0d:71:bc:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Validity
Not Before: Feb 4 19:56:47 2025 GMT
Not After : Feb 3 20:01:47 2026 GMT
Subject: CN=5234EC6119877829B8F0CD9EBD11C1C8FF0DC9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:7b:a9:14:08:1d:65:6d:72:2e:ea:d8:4d:
61:94:a0:c6:bd:53:7c:c2:56:e5:b9:06:d0:20:1e:
49:92:a7:ac:7f:eb:a2:68:07:10:9d:f1:23:05:44:
55:8a:ad:78:a2:77:f8:b5:32:ff:47:da:92:ec:ee:
3d:58:fd:68:72:5e:99:84:45:a8:32:07:f0:e0:52:
65:50:07:9e:cf:f8:b5:7b:cb:63:b4:8b:a4:ac:62:
68:30:23:2e:3a:a0:14:85:da:5e:1b:66:3b:f8:85:
04:06:4b:83:b8:e7:9d:3d:6d:5a:a2:2f:b2:82:f0:
8a:64:e3:37:55:d8:1a:50:96:3e:76:db:ec:36:e0:
3d:51:11:03:84:92:12:49:98:e7:32:9d:d2:16:62:
b2:7d:13:a1:1a:cd:22:95:30:2a:fd:20:a0:e9:7a:
44:74:3c:05:ad:a0:9b:09:86:4d:b8:40:e6:28:f8:
86:15:31:f3:07:e0:c1:e3:f9:95:11:bc:de:2f:3b:
18:2b:4f:e2:1f:05:6a:c2:1a:0b:49:ea:50:67:5b:
fa:11:bc:4e:27:c2:40:eb:fe:dc:89:b9:2f:b7:3d:
62:b6:64:3c:c3:52:c4:ee:7a:9d:8b:c2:c0:bb:b9:
58:64:d9:bc:7e:81:16:c7:b2:30:49:0c:45:f0:69:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:EC:61:19:87:78:29:B8:F0:CD:9E:BD:11:C1:C8:FF:0D:C9:CB
X509v3 Authority Key Identifier:
keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32342d3234203d3e20323637383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c9:a7:12:55:fc:9d:12:05:90:46:23:68:9b:35:9c:72:ea:
b7:7a:03:b4:bc:5a:84:77:12:17:cc:76:98:9e:49:06:9e:47:
21:70:23:9c:3b:40:15:5e:6c:3d:98:ce:74:e0:5d:a0:b9:e2:
6c:ac:ed:64:f1:ac:15:4f:25:fb:a2:2b:ae:e6:7f:cd:b5:55:
cb:45:4f:d0:fa:bf:d1:fe:e2:71:af:16:4c:5a:d8:be:1d:7d:
5d:72:00:8e:16:b9:18:96:1a:28:ca:d8:8a:1c:c9:5a:fb:eb:
9f:7f:29:c8:5e:96:fa:74:85:49:d9:7a:51:f3:f1:9e:ee:9b:
af:63:1e:03:40:23:16:d3:10:a3:bb:24:37:58:0c:b6:11:97:
9d:95:86:30:0e:94:f7:f5:44:75:f4:fc:b2:4f:cd:5f:b5:d7:
fa:0c:e7:52:c9:3d:f3:15:78:51:f7:24:96:3a:0c:63:a0:bd:
cc:07:60:72:74:c5:e3:74:d3:9f:2d:f7:88:f7:43:1d:66:d9:
76:02:14:de:97:85:9e:3f:a5:cb:2b:54:db:6d:59:fa:0a:d2:
09:10:16:7f:e1:5e:ac:6e:e8:59:b6:f4:1a:f9:a4:7a:1f:1b:
8f:7e:d2:2e:1b:48:63:6a:3b:f0:51:71:c2:1f:90:8e:11:80:
a2:a6:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:16:13 2025 by rpki-client