Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa
File: 323830333a313436303a3a2f33322d3332203d3e20323637383337.roa (raw, json)
Hash identifier: FRO0qaSyAPm6a3JRxHr8MzIOlGgPfJEIhjoOh8B9HTs=
Subject key identifier: 48:20:38:3E:12:37:AE:A2:95:74:B6:50:3E:AF:77:CE:6F:7F:79:0E
Certificate issuer: /CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
Certificate serial: 4367D7282034A894080E7B1316E3487352822139
Authority key identifier: 7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa
Signing time: Tue 04 Feb 2025 18:01:44 +0000
ROA not before: Tue 04 Feb 2025 17:56:44 +0000
ROA not after: Tue 03 Feb 2026 18:01:44 +0000
asID: 267837
IP address blocks: 2803:1460::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl
rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 01:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:67:d7:28:20:34:a8:94:08:0e:7b:13:16:e3:48:73:52:82:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
Validity
Not Before: Feb 4 17:56:44 2025 GMT
Not After : Feb 3 18:01:44 2026 GMT
Subject: CN=4820383E1237AEA29574B6503EAF77CE6F7F790E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:ec:17:af:4c:f5:ad:e8:57:50:2b:db:79:
ba:ec:a7:66:17:dd:13:e7:93:e8:e8:59:cb:e7:e4:
a0:62:97:2d:e0:87:5c:f6:4c:74:7b:08:3e:9e:49:
00:46:35:9b:3f:45:54:47:0b:1e:15:14:fa:35:c4:
16:0a:24:46:2d:96:87:04:dc:13:4e:3a:78:93:e1:
31:8e:36:5a:c8:37:47:e1:62:d2:12:7d:1c:30:f4:
16:e8:89:bf:16:20:8f:5b:8f:fa:6b:1a:ff:80:24:
ab:b0:ea:63:9b:6a:ae:a8:09:e1:4f:74:95:4d:c4:
00:d2:74:0c:41:62:85:22:f6:38:69:f6:8f:3f:5a:
d0:8a:ce:ec:5b:ec:68:3d:92:35:fb:8f:c8:09:c2:
22:ad:59:a2:d3:77:fb:27:a7:ce:07:cc:6e:8b:99:
d6:3a:8f:b7:ac:24:de:b9:58:ce:fd:fb:e9:27:3f:
d7:0f:44:ba:bf:2d:6d:c7:ce:10:fb:9f:04:24:cc:
e3:5d:80:0a:9c:7b:ec:33:fa:de:56:84:42:08:2b:
54:31:b0:6c:f9:1c:61:51:f4:03:dd:52:ad:a7:89:
d5:40:f7:a8:f0:e4:81:c6:23:aa:1e:89:8e:eb:ec:
06:84:c3:3f:30:5d:ab:a6:22:e5:97:82:49:09:93:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:38:3E:12:37:AE:A2:95:74:B6:50:3E:AF:77:CE:6F:7F:79:0E
X509v3 Authority Key Identifier:
keyid:7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1460::/32
Signature Algorithm: sha256WithRSAEncryption
1b:39:7a:79:7e:ab:a0:ec:bd:ef:d2:28:3b:25:5b:0a:d0:90:
69:08:f0:6b:79:85:ff:e7:e8:cc:89:41:63:79:0c:8d:45:39:
05:1b:d0:86:a3:c7:65:e5:d3:2d:f7:fe:da:f1:ef:d3:32:ad:
4d:99:59:fe:bf:03:ab:3e:c7:c6:88:ac:43:53:d2:f5:b4:41:
b9:1a:0d:9e:c7:28:7e:a7:a4:22:63:9f:09:dd:3e:09:b4:0b:
d1:91:12:25:f8:95:55:ba:02:69:0a:49:56:29:90:78:f8:53:
c6:53:f7:a0:cb:32:c7:6b:11:66:df:8b:c6:c0:4a:7b:58:77:
b8:b0:53:a0:df:6e:f7:70:ec:1f:4a:90:f5:de:92:8b:e4:87:
4c:a3:48:73:27:de:5d:1d:0b:1b:b6:f9:5b:5c:25:ae:0f:48:
a7:c2:63:43:7f:e2:3d:a8:da:ea:3a:92:ca:4d:0f:ce:31:12:
14:2b:53:e3:58:cd:50:05:49:5e:f2:e3:90:15:e8:0e:9b:f8:
3e:9a:87:a4:89:14:a3:40:e0:25:fb:1c:a5:29:ef:93:ad:e5:
73:c9:c7:ca:35:ed:eb:1e:c2:82:a6:d5:25:6b:45:e3:4d:97:
45:b4:42:67:cf:17:fb:32:77:8e:dc:50:ea:2b:59:95:03:9d:
c6:d9:7c:19
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQ2fXKCA0qJQIDnsTFuNIc1KCITkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U4M0IxMTJCMDYwOUYxOTM2RDU0OTBBRkE2RTVBN0JD
RjEyNjg1NjAeFw0yNTAyMDQxNzU2NDRaFw0yNjAyMDMxODAxNDRaMDMxMTAvBgNV
BAMTKDQ4MjAzODNFMTIzN0FFQTI5NTc0QjY1MDNFQUY3N0NFNkY3Rjc5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tuwXr0z1rehXUCvbebrsp2YX
3RPnk+joWcvn5KBily3gh1z2THR7CD6eSQBGNZs/RVRHCx4VFPo1xBYKJEYtlocE
3BNOOniT4TGONlrIN0fhYtISfRww9Bboib8WII9bj/prGv+AJKuw6mObaq6oCeFP
dJVNxADSdAxBYoUi9jhp9o8/WtCKzuxb7Gg9kjX7j8gJwiKtWaLTd/snp84HzG6L
mdY6j7esJN65WM79++knP9cPRLq/LW3HzhD7nwQkzONdgAqce+wz+t5WhEIIK1Qx
sGz5HGFR9APdUq2nidVA96jw5IHGI6oeiY7r7AaEwz8wXaumIuWXgkkJk0IJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUSCA4PhI3rqKVdLZQPq93zm9/eQ4wHwYDVR0j
BBgwFoAUfoOxErBgnxk21UkK+m5ae88SaFYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMTY0NERBNzlFNUU5MjQzMkMxMjdFNTA2MDQyMDdCNjY3
NkMwODk5RjlCQTQyQ0U2MDMzNDEyODAzRjU2Q0NCLzAvN0U4M0IxMTJCMDYwOUYx
OTM2RDU0OTBBRkE2RTVBN0JDRjEyNjg1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTgzQjExMkIwNjA5RjE5MzZE
NTQ5MEFGQTZFNUE3QkNGMTI2ODU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDE2NDREQTc5RTVFOTI0MzJDMTI3RTUwNjA0MjA3QjY2NzZDMDg5OUY5
QkE0MkNFNjAzMzQxMjgwM0Y1NkNDQi8wLzMyMzgzMDMzM2EzMTM0MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFGAw
DQYJKoZIhvcNAQELBQADggEBABs5enl+q6Dsve/SKDslWwrQkGkI8Gt5hf/n6MyJ
QWN5DI1FOQUb0Iajx2Xl0y33/trx79MyrU2ZWf6/A6s+x8aIrENT0vW0QbkaDZ7H
KH6npCJjnwndPgm0C9GREiX4lVW6AmkKSVYpkHj4U8ZT96DLMsdrEWbfi8bASntY
d7iwU6Dfbvdw7B9KkPXekovkh0yjSHMn3l0dCxu2+VtcJa4PSKfCY0N/4j2o2uo6
kspND84xEhQrU+NYzVAFSV7y45AV6A6b+D6ah6SJFKNA4CX7HKUp75Ot5XPJx8o1
7esewoKm1SVrReNNl0W0QmfPF/syd47cUOorWZUDncbZfBk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:07:22 2025 by rpki-client