Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e203532343638.roa
File: 3138362e332e362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier: JOXKyG2rMqZvbGxqvAR0qrkmQTLuhm563D5HZBNqkbw=
Subject key identifier: 06:83:3C:53:22:0A:42:85:D8:C6:0C:A9:F3:38:C9:F8:2F:7E:21:ED
Certificate issuer: /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial: 58A1CC599AA70060740555F1C7E53970400F5C4E
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:11:11 +0000
ROA not before: Tue 04 Feb 2025 18:06:11 +0000
ROA not after: Tue 03 Feb 2026 18:11:11 +0000
asID: 52468
IP address blocks: 186.3.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 18:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a1:cc:59:9a:a7:00:60:74:05:55:f1:c7:e5:39:70:40:0f:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Validity
Not Before: Feb 4 18:06:11 2025 GMT
Not After : Feb 3 18:11:11 2026 GMT
Subject: CN=06833C53220A4285D8C60CA9F338C9F82F7E21ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:22:c4:02:18:77:00:99:c4:e7:e2:78:69:
ac:46:69:8a:84:02:06:2e:ba:66:1a:33:d7:92:0c:
c8:70:f7:85:d7:b2:b5:eb:6f:a7:da:cb:3f:2b:a1:
44:d3:32:77:d5:f0:1a:12:ad:42:7a:a1:fe:07:ee:
1e:a4:77:c8:92:51:68:0c:0f:1f:22:cf:fa:a2:b9:
fe:22:8e:b9:e4:80:e1:bf:b5:dc:3b:41:8c:c5:a0:
8e:db:fc:03:11:b9:7e:84:6b:63:bf:d0:46:e3:fc:
39:b3:38:f2:fe:a0:f2:df:49:14:38:fb:bd:da:19:
2c:e7:2c:93:5d:aa:4b:af:7b:96:76:1f:ee:1c:44:
99:c7:8b:0e:d8:1d:59:5f:09:c4:0d:bb:c5:22:48:
6c:b6:c3:92:9e:d8:81:2c:54:84:19:66:cb:0b:b4:
0b:69:62:ae:9e:02:0d:e3:f8:3f:27:3f:25:4f:b9:
4c:7a:b6:73:10:3f:52:68:ff:55:a9:4e:3a:9d:21:
a3:2c:23:c8:2d:81:86:68:20:1b:96:b9:9f:84:3d:
1c:40:34:79:fb:23:6f:b9:ae:54:1e:5e:27:d9:8b:
b8:97:42:a4:d7:69:15:05:de:bc:a5:91:ce:e8:12:
32:ba:45:08:b4:96:21:99:3a:25:d7:6b:7c:90:40:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:3C:53:22:0A:42:85:D8:C6:0C:A9:F3:38:C9:F8:2F:7E:21:ED
X509v3 Authority Key Identifier:
keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.3.6.0/24
Signature Algorithm: sha256WithRSAEncryption
14:aa:6e:fa:2e:98:81:89:62:0b:c9:bd:7d:b5:80:2c:ce:aa:
ed:f2:f7:fe:89:03:c7:a4:07:56:4c:04:b0:77:2f:93:2b:02:
61:a3:d4:e6:b5:23:86:51:dd:1d:5b:26:32:e1:6d:a5:1e:b8:
03:ad:7c:78:9d:96:b1:94:46:fb:2c:b0:50:38:38:8f:0b:97:
06:0f:ab:d0:2b:2f:89:d1:b3:5f:7d:6b:4c:ea:46:da:4a:79:
ea:25:94:2f:d1:39:8e:cf:d5:2d:c4:9c:8b:84:e8:5c:59:42:
a6:c1:9e:b2:6f:2f:16:19:7e:42:5a:64:85:30:77:a2:30:9f:
0e:82:24:d5:d7:33:6b:b9:08:4c:49:22:bd:83:21:12:ea:c0:
8f:b1:e2:89:d9:de:af:39:4a:55:c4:b5:33:5d:d5:64:95:1f:
1f:52:47:9b:f5:c3:51:2b:5e:fd:d7:8f:de:2d:00:b5:a0:f0:
d0:29:7c:31:97:5a:28:30:6d:84:99:40:e6:bc:a3:2b:64:07:
09:ce:1b:f9:3d:86:21:90:7e:ee:86:69:8e:61:f3:8f:81:30:
a7:32:5e:92:7c:a0:05:4f:95:db:bf:59:db:8f:33:01:90:dc:
e8:f3:aa:16:a9:8f:3b:2f:54:44:b5:f9:79:7b:9d:08:26:41:
10:2e:2b:d4
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUWKHMWZqnAGB0BVXxx+U5cEAPXE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MTFaFw0yNjAyMDMxODExMTFaMDMxMTAvBgNV
BAMTKDA2ODMzQzUzMjIwQTQyODVEOEM2MENBOUYzMzhDOUY4MkY3RTIxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnyLEAhh3AJnE5+J4aaxGaYqE
AgYuumYaM9eSDMhw94XXsrXrb6fayz8roUTTMnfV8BoSrUJ6of4H7h6kd8iSUWgM
Dx8iz/qiuf4ijrnkgOG/tdw7QYzFoI7b/AMRuX6Ea2O/0Ebj/DmzOPL+oPLfSRQ4
+73aGSznLJNdqkuve5Z2H+4cRJnHiw7YHVlfCcQNu8UiSGy2w5Ke2IEsVIQZZssL
tAtpYq6eAg3j+D8nPyVPuUx6tnMQP1Jo/1WpTjqdIaMsI8gtgYZoIBuWuZ+EPRxA
NHn7I2+5rlQeXifZi7iXQqTXaRUF3rylkc7oEjK6RQi0liGZOiXXa3yQQFxRAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUBoM8UyIKQoXYxgyp8zjJ+C9+Ie0wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzMyZTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoDBjANBgkqhkiG
9w0BAQsFAAOCAQEAFKpu+i6YgYliC8m9fbWALM6q7fL3/okDx6QHVkwEsHcvkysC
YaPU5rUjhlHdHVsmMuFtpR64A618eJ2WsZRG+yywUDg4jwuXBg+r0CsvidGzX31r
TOpG2kp56iWUL9E5js/VLcSci4ToXFlCpsGesm8vFhl+QlpkhTB3ojCfDoIk1dcz
a7kITEkivYMhEurAj7HiidnerzlKVcS1M13VZJUfH1JHm/XDUSte/deP3i0AtaDw
0Cl8MZdaKDBthJlA5ryjK2QHCc4b+T2GIZB+7oZpjmHzj4EwpzJeknygBU+V279Z
248zAZDc6POqFqmPOy9URLX5eXudCCZBEC4r1A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 07:13:51 2025 by rpki-client