Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
File: AS3816.roa (raw, json)
Hash identifier: TkIsbOV+0Ahi5RV7VnONXwDbSGTgg1HAfPnCm9aBDeE=
Subject key identifier: CB:05:72:BF:71:7B:C6:0F:0D:02:FE:7C:AF:0D:5E:46:84:9A:4E:6A
Certificate issuer: /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial: 60B5E953D4F1EFBC9EC6D98D5659E7673709A7BD
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
Signing time: Tue 10 Jun 2025 23:00:00 +0000
ROA not before: Tue 10 Jun 2025 22:55:00 +0000
ROA not after: Tue 09 Jun 2026 23:00:00 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 22
152.200.32.0/19 maxlen: 24
152.200.128.0/18 maxlen: 22
152.200.192.0/20 maxlen: 22
152.200.208.0/20 maxlen: 24
152.200.224.0/21 maxlen: 21
152.200.232.0/24 maxlen: 24
152.200.233.0/24 maxlen: 24
152.200.234.0/24 maxlen: 24
152.200.235.0/24 maxlen: 24
152.200.236.0/24 maxlen: 24
152.200.241.0/24 maxlen: 24
152.200.242.0/24 maxlen: 24
152.201.32.0/19 maxlen: 24
152.201.64.0/18 maxlen: 24
152.201.128.0/17 maxlen: 24
152.202.0.0/15 maxlen: 24
152.204.0.0/17 maxlen: 24
152.204.128.0/22 maxlen: 24
152.204.132.0/24 maxlen: 24
152.204.134.0/24 maxlen: 24
152.204.136.0/21 maxlen: 21
152.204.144.0/20 maxlen: 21
152.204.160.0/19 maxlen: 21
152.204.192.0/18 maxlen: 21
152.205.0.0/18 maxlen: 21
152.205.192.0/18 maxlen: 18
161.10.0.0/18 maxlen: 22
161.10.64.0/20 maxlen: 20
161.10.64.0/22 maxlen: 22
161.10.80.0/20 maxlen: 22
161.10.96.0/19 maxlen: 22
161.10.128.0/17 maxlen: 22
161.18.0.0/20 maxlen: 20
161.18.32.0/19 maxlen: 22
161.18.64.0/19 maxlen: 22
161.18.104.0/21 maxlen: 22
161.18.112.0/20 maxlen: 22
161.18.128.0/17 maxlen: 22
167.0.0.0/16 maxlen: 20
179.32.0.0/16 maxlen: 24
179.33.0.0/18 maxlen: 24
179.33.64.0/19 maxlen: 24
179.33.96.0/21 maxlen: 24
179.33.104.0/22 maxlen: 24
179.33.110.0/23 maxlen: 24
179.33.112.0/20 maxlen: 24
179.33.128.0/17 maxlen: 24
181.32.0.0/15 maxlen: 20
181.234.0.0/15 maxlen: 20
181.236.0.0/19 maxlen: 19
181.236.32.0/19 maxlen: 19
181.236.64.0/19 maxlen: 19
181.236.96.0/19 maxlen: 19
181.236.128.0/19 maxlen: 20
181.236.160.0/20 maxlen: 20
181.236.176.0/20 maxlen: 24
181.236.200.0/21 maxlen: 21
181.236.208.0/22 maxlen: 22
181.236.214.0/23 maxlen: 23
181.236.217.0/24 maxlen: 24
181.236.218.0/24 maxlen: 24
181.236.221.0/24 maxlen: 24
181.236.222.0/24 maxlen: 24
181.236.223.0/24 maxlen: 24
181.236.226.0/24 maxlen: 24
181.236.228.0/22 maxlen: 24
181.236.232.0/21 maxlen: 24
181.236.240.0/22 maxlen: 24
181.237.0.0/16 maxlen: 20
186.98.0.0/16 maxlen: 22
186.99.0.0/17 maxlen: 22
186.99.128.0/18 maxlen: 22
186.99.192.0/19 maxlen: 22
186.99.224.0/20 maxlen: 22
186.99.240.0/21 maxlen: 22
186.99.252.0/23 maxlen: 24
186.99.254.0/24 maxlen: 24
186.102.0.0/17 maxlen: 24
186.102.160.0/19 maxlen: 24
186.102.192.0/24 maxlen: 24
186.103.0.0/18 maxlen: 18
186.103.64.0/18 maxlen: 24
186.112.0.0/16 maxlen: 24
186.113.0.0/21 maxlen: 24
186.113.8.0/24 maxlen: 24
186.113.10.0/23 maxlen: 24
186.113.14.0/24 maxlen: 24
186.113.16.0/21 maxlen: 24
186.113.24.0/22 maxlen: 24
186.113.28.0/23 maxlen: 24
186.113.30.0/24 maxlen: 24
186.113.32.0/19 maxlen: 23
186.113.64.0/18 maxlen: 23
186.113.128.0/19 maxlen: 23
186.113.160.0/21 maxlen: 23
186.113.168.0/23 maxlen: 23
186.113.172.0/22 maxlen: 24
186.113.176.0/20 maxlen: 24
186.113.192.0/18 maxlen: 24
186.114.0.0/15 maxlen: 24
186.116.0.0/14 maxlen: 24
186.168.0.0/17 maxlen: 24
186.168.128.0/18 maxlen: 24
186.168.192.0/20 maxlen: 24
186.168.208.0/21 maxlen: 24
186.168.216.0/22 maxlen: 24
186.168.224.0/19 maxlen: 24
186.169.3.0/24 maxlen: 24
186.169.4.0/22 maxlen: 24
186.169.8.0/21 maxlen: 24
186.169.16.0/20 maxlen: 24
186.169.32.0/19 maxlen: 24
186.169.64.0/18 maxlen: 24
186.169.128.0/17 maxlen: 24
186.170.0.0/18 maxlen: 24
186.170.64.0/20 maxlen: 24
186.170.80.0/21 maxlen: 24
186.170.88.0/22 maxlen: 24
186.170.92.0/23 maxlen: 24
186.170.94.0/24 maxlen: 24
186.170.96.0/19 maxlen: 20
186.170.128.0/17 maxlen: 20
186.171.0.0/17 maxlen: 20
186.171.128.0/17 maxlen: 24
190.13.96.0/20 maxlen: 24
190.52.0.0/19 maxlen: 24
190.65.0.0/16 maxlen: 24
190.66.0.0/22 maxlen: 24
190.66.5.0/24 maxlen: 24
190.66.6.0/23 maxlen: 24
190.66.8.0/21 maxlen: 24
190.66.16.0/20 maxlen: 24
190.66.32.0/19 maxlen: 24
190.66.64.0/20 maxlen: 24
190.66.80.0/21 maxlen: 24
190.66.88.0/21 maxlen: 21
190.66.88.0/22 maxlen: 24
190.66.96.0/19 maxlen: 22
190.66.128.0/19 maxlen: 22
190.66.160.0/20 maxlen: 22
190.66.176.0/22 maxlen: 22
190.66.184.0/21 maxlen: 24
190.66.192.0/18 maxlen: 24
190.67.0.0/16 maxlen: 24
190.68.0.0/15 maxlen: 24
190.252.0.0/14 maxlen: 24
191.104.0.0/16 maxlen: 19
191.105.0.0/16 maxlen: 24
191.106.0.0/17 maxlen: 24
191.106.128.0/17 maxlen: 20
191.107.0.0/16 maxlen: 20
191.108.0.0/14 maxlen: 20
200.21.0.0/16 maxlen: 24
200.30.96.0/19 maxlen: 24
200.89.192.0/19 maxlen: 24
201.228.0.0/17 maxlen: 24
201.228.128.0/18 maxlen: 24
201.228.208.0/20 maxlen: 22
201.228.224.0/19 maxlen: 22
2800:680::/32 maxlen: 32
2800:8b0::/38 maxlen: 38
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Jun 2025 21:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b5:e9:53:d4:f1:ef:bc:9e:c6:d9:8d:56:59:e7:67:37:09:a7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Validity
Not Before: Jun 10 22:55:00 2025 GMT
Not After : Jun 9 23:00:00 2026 GMT
Subject: CN=CB0572BF717BC60F0D02FE7CAF0D5E46849A4E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:01:ba:19:17:ff:a6:f8:1a:ed:3f:fd:78:
f6:95:53:ef:41:9a:36:ba:c0:b2:f1:49:2a:e3:33:
7d:1d:fc:21:55:13:d0:62:12:2b:6a:a6:0c:61:ff:
0f:14:24:53:17:c9:6a:3d:c2:5b:f5:27:0f:af:12:
ba:e1:59:6c:ed:16:f7:5a:2a:b5:60:08:35:6f:03:
2c:b9:0a:2a:d9:b6:17:c9:ff:9d:d5:65:40:31:96:
27:06:59:65:14:73:48:0d:e4:0e:95:00:a6:e5:95:
aa:43:e7:d2:44:66:1b:a1:60:19:83:e1:6d:b1:18:
9b:71:c5:a8:68:a5:e0:43:48:ca:c4:ea:09:9d:79:
96:11:f0:10:b8:29:ab:9b:24:67:26:62:38:34:11:
bc:88:b4:4b:cb:d0:56:36:c6:a9:ce:7b:58:38:6d:
1f:2d:f5:38:a6:47:fb:db:a2:54:01:79:b1:7e:97:
5d:e4:6b:5c:a7:ea:96:37:01:7a:0b:61:ef:9c:3c:
db:19:92:53:59:26:84:84:e7:af:21:a0:95:51:58:
55:d3:24:15:4d:c2:df:e3:b1:64:1f:1f:a6:d0:12:
f9:61:ab:0c:49:48:dc:9c:60:e7:71:f6:d4:23:31:
bc:22:1e:35:e6:8b:89:52:bf:76:d1:8c:bf:17:6a:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:72:BF:71:7B:C6:0F:0D:02:FE:7C:AF:0D:5E:46:84:9A:4E:6A
X509v3 Authority Key Identifier:
keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS3816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.236.255
152.200.241.0-152.200.242.255
152.201.32.0-152.204.132.255
152.204.134.0/24
152.204.136.0-152.205.63.255
152.205.192.0/18
161.10.0.0/16
161.18.0.0/20
161.18.32.0-161.18.95.255
161.18.104.0-161.18.255.255
167.0.0.0/16
179.32.0.0-179.33.107.255
179.33.110.0-179.33.255.255
181.32.0.0/15
181.234.0.0-181.236.191.255
181.236.200.0-181.236.211.255
181.236.214.0/23
181.236.217.0-181.236.218.255
181.236.221.0-181.236.223.255
181.236.226.0/24
181.236.228.0-181.236.243.255
181.237.0.0/16
186.98.0.0-186.99.247.255
186.99.252.0-186.99.254.255
186.102.0.0/17
186.102.160.0-186.102.192.255
186.103.0.0/17
186.112.0.0-186.113.8.255
186.113.10.0/23
186.113.14.0/24
186.113.16.0-186.113.30.255
186.113.32.0-186.113.169.255
186.113.172.0-186.119.255.255
186.168.0.0-186.168.219.255
186.168.224.0/19
186.169.3.0-186.170.94.255
186.170.96.0-186.171.255.255
190.13.96.0/20
190.52.0.0/19
190.65.0.0-190.66.3.255
190.66.5.0-190.66.179.255
190.66.184.0-190.69.255.255
190.252.0.0/14
191.104.0.0/13
200.21.0.0/16
200.30.96.0/19
200.89.192.0/19
201.228.0.0-201.228.191.255
201.228.208.0-201.228.255.255
IPv6:
2800:680::/32
2800:8b0::/38
Signature Algorithm: sha256WithRSAEncryption
28:54:61:a7:0c:6e:45:c2:15:47:ef:51:7e:27:7d:2b:25:93:
47:93:a1:a9:2a:27:d4:f7:14:e6:81:fc:ea:c3:b7:7e:e6:79:
ea:04:10:e4:76:80:08:7a:a2:26:b7:a2:5f:28:95:75:ee:44:
83:a6:3e:44:cf:05:9b:f1:9d:3f:0b:2b:99:69:cd:14:25:72:
0a:8d:21:69:b1:fc:2e:39:3b:6e:f5:2c:6d:9b:ee:2a:7b:c4:
2b:3c:cb:fd:e3:3d:c0:e0:34:f8:33:44:7d:cd:d4:a6:30:24:
01:55:fc:aa:db:a0:8a:19:ea:f7:e8:50:35:c7:5b:24:ee:ae:
04:67:7d:14:e1:dc:7f:a2:57:80:eb:c9:69:e5:a8:46:ef:e5:
e1:4c:8a:55:46:4f:a8:c5:f9:88:f5:53:98:a7:03:06:fb:35:
98:7c:93:d0:92:10:fa:74:26:d6:e9:20:c5:88:80:fe:d2:00:
f8:20:bb:51:4d:c1:8c:4c:56:55:93:46:87:0b:09:0a:a0:49:
3a:78:bc:e5:c3:06:43:ad:5b:73:c2:70:aa:24:3a:1c:60:68:
8c:f7:ee:8f:9f:85:de:85:40:a2:1b:d0:88:16:79:65:8f:db:
86:f2:82:08:44:79:0b:cc:e4:c0:71:fa:e5:18:5c:c6:a0:b4:
b4:27:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 24 02:15:12 2025 by rpki-client