Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa
File: 34352e3138382e3138382e302f32322d3234203d3e203532343936.roa (raw, json)
Hash identifier: 8bTbcqvbyjeKb/C9NT09HPpsHu/cMQRJMt9/z4m8JSk=
Subject key identifier: 88:E7:E7:4B:9E:3F:7A:CA:86:03:29:F1:81:F0:D1:22:DF:52:5C:42
Certificate issuer: /CN=52644702D94F3D876A774ED4C8509A38B1587D80
Certificate serial: 7CC71FD574CEAE49D27A8BCCBD4D6BD5B8029B16
Authority key identifier: 52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa
Signing time: Tue 04 Feb 2025 18:34:20 +0000
ROA not before: Tue 04 Feb 2025 18:29:20 +0000
ROA not after: Tue 03 Feb 2026 18:34:20 +0000
asID: 52496
IP address blocks: 45.188.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c7:1f:d5:74:ce:ae:49:d2:7a:8b:cc:bd:4d:6b:d5:b8:02:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52644702D94F3D876A774ED4C8509A38B1587D80
Validity
Not Before: Feb 4 18:29:20 2025 GMT
Not After : Feb 3 18:34:20 2026 GMT
Subject: CN=88E7E74B9E3F7ACA860329F181F0D122DF525C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:c7:69:00:29:3b:09:2a:6e:9c:0e:34:e4:
21:26:61:be:52:74:78:80:2a:86:72:ca:c1:c9:18:
5e:11:fa:5e:cc:a4:78:b1:c7:c5:fa:83:bc:06:9b:
a8:df:61:06:33:e0:ed:e7:fb:51:01:02:1c:4a:44:
8e:80:1b:c7:a2:d2:4e:15:64:23:b1:bc:59:58:31:
20:ed:0d:74:72:ed:a3:9d:81:1a:44:74:ce:c1:23:
e3:9c:02:01:1e:87:5d:32:90:97:de:38:03:9f:9d:
f9:c7:c9:08:f0:13:10:be:21:65:dd:23:15:8b:e7:
40:29:92:96:05:9c:25:f3:47:91:0a:18:08:1c:f6:
6d:d6:69:5b:19:c6:58:b1:4c:11:e4:c6:2f:a6:10:
98:ca:4b:b7:3f:59:b3:46:d6:97:6b:23:9b:2f:78:
1e:e9:c1:6c:95:d9:10:7a:bc:ab:97:10:d3:4a:31:
bc:d9:e9:89:69:87:70:98:a9:79:17:ce:37:c6:d4:
0c:99:e6:4a:07:b1:a3:fe:69:5a:fd:be:c0:72:75:
d1:74:89:19:9f:d5:39:39:20:7d:d9:0a:67:e9:3b:
40:59:4f:d8:87:10:73:64:d9:3d:72:7b:bc:bb:5a:
70:df:19:b4:e6:90:8d:25:b3:29:13:2f:3e:19:07:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:E7:4B:9E:3F:7A:CA:86:03:29:F1:81:F0:D1:22:DF:52:5C:42
X509v3 Authority Key Identifier:
keyid:52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:73:74:c9:0f:8e:32:9d:36:85:03:54:93:f4:e9:b8:74:03:
63:de:b5:13:0c:3b:74:73:e2:53:4e:aa:49:66:69:7b:8b:95:
28:ac:80:2f:22:d4:c4:75:cf:b1:b1:1d:3b:30:8c:eb:bc:9c:
87:b7:fc:17:e6:5d:18:ca:a3:1f:f3:d1:b3:08:21:31:ec:d4:
f5:db:33:dd:58:e8:bf:ad:fc:d9:9a:c6:ea:84:81:1a:6f:68:
f5:e3:0a:b2:a1:02:f8:c5:c1:d9:26:3b:16:ee:3d:0a:6a:4b:
27:a5:e0:91:e1:f9:e7:2f:7c:71:66:f6:47:3e:ed:3d:55:cc:
e6:65:ac:57:0b:74:4c:9a:7f:bf:11:99:bd:f5:7c:24:71:87:
0b:fc:ae:d6:32:b3:e7:41:b3:b3:50:eb:69:c2:dd:cf:8b:04:
e4:a9:b1:0d:8b:57:cc:1d:b7:67:02:05:67:fc:11:34:43:ff:
07:f7:21:9b:fe:2e:84:b6:dd:b0:45:0d:c3:4e:db:a0:a0:6f:
74:11:36:67:e0:8d:fd:11:15:5e:b5:40:1f:54:3e:bd:db:96:
b6:d4:96:6f:0c:97:9d:cb:fe:d5:36:80:11:f5:5c:b8:6a:1c:
b5:f9:4e:24:b9:b9:0b:21:5a:fe:c9:0f:42:42:c5:f9:45:7a:
08:b6:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:13:12 2025 by rpki-client