Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa
File: 3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa (raw, json)
Hash identifier: gZYjI0Lb2QwbVIO7wmpL3+Epxa5Hebd6KaM30yydD3o=
Subject key identifier: AA:BD:02:EB:4A:79:3F:14:D8:65:EE:3E:80:2D:98:4A:01:A5:0D:4D
Certificate issuer: /CN=B905CE8CB484116258141F2BAF5032F468106BF3
Certificate serial: 626A2DB1577B795BA01AFF33C926715B07ECE229
Authority key identifier: B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa
Signing time: Tue 04 Feb 2025 18:08:45 +0000
ROA not before: Tue 04 Feb 2025 18:03:45 +0000
ROA not after: Tue 03 Feb 2026 18:08:45 +0000
asID: 265811
IP address blocks: 201.182.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl
rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 17:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6a:2d:b1:57:7b:79:5b:a0:1a:ff:33:c9:26:71:5b:07:ec:e2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B905CE8CB484116258141F2BAF5032F468106BF3
Validity
Not Before: Feb 4 18:03:45 2025 GMT
Not After : Feb 3 18:08:45 2026 GMT
Subject: CN=AABD02EB4A793F14D865EE3E802D984A01A50D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:49:82:bf:f8:e4:24:a9:59:0d:92:08:a6:88:
11:cd:3c:6c:2a:2f:0f:f7:61:15:45:f4:7a:6d:d2:
ea:c3:4c:63:c5:ea:76:22:5c:9c:e3:4f:4b:d7:8a:
f1:0b:72:c4:09:de:68:a4:ed:5f:92:ac:d8:d3:78:
82:45:0d:72:b4:80:ac:a2:ff:41:67:9f:c9:26:88:
94:a6:f1:cf:44:94:a5:89:c5:85:4b:78:03:7d:b7:
66:fd:ec:25:26:45:96:2d:85:64:e8:9d:99:81:d3:
ff:d3:79:50:12:37:77:96:e4:e5:75:d6:59:74:f1:
90:30:2c:3a:a1:e8:90:bc:44:c9:93:c0:40:62:06:
cb:f0:06:17:45:6c:0a:11:a7:67:2b:5a:82:18:f7:
c6:ed:40:6d:19:23:3d:6c:8f:0f:4f:26:d9:2b:d4:
58:50:8e:f3:c3:ac:18:d7:c7:ae:5e:9a:87:40:95:
eb:f9:a4:bb:51:2c:9c:04:5e:9b:29:b1:95:23:a4:
40:78:89:2d:71:55:32:52:8a:bc:01:9f:81:27:e5:
bc:00:74:27:07:3e:e9:40:b7:df:cf:09:9f:12:89:
02:6e:98:6a:fd:f3:13:df:66:77:a6:b3:98:3d:61:
fe:f8:a6:ea:d8:fb:c5:a8:fa:c6:4f:32:fe:8a:fb:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:02:EB:4A:79:3F:14:D8:65:EE:3E:80:2D:98:4A:01:A5:0D:4D
X509v3 Authority Key Identifier:
keyid:B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.25.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5f:2a:77:e3:ea:fd:55:74:e5:3b:f2:fe:63:36:04:d1:10:
d1:ab:eb:68:57:64:c9:6a:05:07:aa:66:af:d2:2d:de:20:23:
f5:aa:c9:a7:b2:51:2f:24:49:d5:f7:02:21:9e:eb:35:d4:42:
9c:49:76:ba:fb:9e:96:f6:30:50:a1:c2:ea:6e:35:00:e6:0c:
7e:78:dc:8a:27:15:60:5f:93:d8:75:c4:f5:43:2c:3d:35:b0:
13:bd:c4:06:99:f6:25:1f:df:ec:e6:ac:a1:f6:b5:2d:aa:24:
60:1e:5b:03:18:99:6e:a7:6c:8d:88:0d:08:1e:c2:5f:db:bf:
8b:fa:11:37:f3:dc:5a:e8:fb:68:07:dd:4b:9d:8d:1b:9a:51:
f5:17:9b:07:f2:5e:e6:4c:42:15:51:9c:2f:43:01:9b:51:64:
d5:f6:33:3f:00:b5:91:a8:e1:b5:54:cc:28:3c:0c:cf:58:a2:
c2:8e:8e:18:09:77:74:72:a6:62:ad:f1:82:e8:35:17:41:f7:
97:e9:06:97:ba:11:42:c3:3a:2c:6f:f2:ee:fe:73:49:2c:80:
09:57:45:b5:cf:bd:ca:11:c4:d1:81:71:7c:4e:22:70:d9:15:
00:23:f4:e5:36:8b:88:3e:94:51:68:ce:a8:87:9b:ab:6d:4e:
6a:54:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:44 2025 by rpki-client