Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237383137.roa
File: 323830313a3162633a3a2f34342d3434203d3e203237383137.roa (raw, json)
Hash identifier: 97G5yZudOJbVZxDvsZqLT2QLEGFQ2wwW1KMFXuS6xZA=
Subject key identifier: 2E:78:DC:7F:18:94:F0:CF:20:BC:04:6F:52:41:BD:49:F4:7C:8D:DE
Certificate issuer: /CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
Certificate serial: 21AD06B72A14DEB2E9268E5601220A96294FB842
Authority key identifier: 3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237383137.roa
Signing time: Tue 04 Feb 2025 20:02:55 +0000
ROA not before: Tue 04 Feb 2025 19:57:55 +0000
ROA not after: Tue 03 Feb 2026 20:02:55 +0000
asID: 27817
IP address blocks: 2801:1bc::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.crl
rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ad:06:b7:2a:14:de:b2:e9:26:8e:56:01:22:0a:96:29:4f:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
Validity
Not Before: Feb 4 19:57:55 2025 GMT
Not After : Feb 3 20:02:55 2026 GMT
Subject: CN=2E78DC7F1894F0CF20BC046F5241BD49F47C8DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:20:90:75:1c:93:64:f1:9c:3a:39:b7:98:
7d:c9:71:fc:21:d9:f9:1d:7f:31:ab:8c:89:89:15:
57:e6:8c:51:79:69:07:f4:f7:3d:56:c9:78:5d:9e:
59:b7:00:e9:02:b3:cd:f6:78:12:14:26:17:b8:98:
f8:90:71:28:b8:96:e9:6d:93:a1:31:9c:6b:c2:d2:
7e:4f:aa:eb:f0:3a:08:98:76:7e:72:0f:7d:d3:2c:
4c:0b:6f:05:38:e8:ae:e5:02:8c:29:22:2a:8f:31:
67:31:93:4d:53:b9:f8:61:d4:d7:cf:f9:0d:38:20:
3d:d4:0a:e2:21:79:44:4b:1b:e4:7a:83:e3:fb:2e:
f2:84:76:27:7f:a0:a0:30:0a:25:d4:5b:f9:62:e2:
8e:e0:ef:31:9d:47:86:74:c0:ee:60:d0:ac:68:bc:
77:8b:f5:03:cf:0b:fa:04:75:20:04:f5:38:3b:17:
8b:83:d0:7d:86:67:b0:51:a8:11:57:d8:d0:fb:cf:
4a:40:e7:fa:7d:a0:cf:6c:63:70:b2:e7:87:bd:c8:
10:8c:6c:89:c3:a5:a3:63:8a:fa:bc:e4:6d:da:ba:
3c:85:85:45:f0:dc:b4:f2:2b:87:64:ef:3a:10:da:
04:0f:f5:4a:67:d4:d4:24:25:95:72:39:3e:4a:be:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:DC:7F:18:94:F0:CF:20:BC:04:6F:52:41:BD:49:F4:7C:8D:DE
X509v3 Authority Key Identifier:
keyid:3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1bc::/44
Signature Algorithm: sha256WithRSAEncryption
5b:d1:1d:46:1d:01:1c:95:65:7e:7a:dc:16:f6:4d:e2:5d:94:
05:1f:06:c9:ef:93:5f:fe:0a:ef:b9:74:35:0f:56:dc:19:19:
7d:1e:83:cb:7d:f5:82:11:72:4c:79:41:10:a9:b5:49:b5:10:
fe:f5:c4:fa:16:44:91:7b:ab:9d:b5:86:01:27:7e:bf:2b:34:
b5:2b:23:c2:67:ef:af:90:0e:a6:7f:e4:66:da:b5:ea:40:93:
d8:9c:e3:02:1e:e9:c5:30:12:6c:48:69:de:88:6b:26:6a:12:
e1:02:a0:6b:70:3f:7f:4b:ae:e1:50:60:df:e4:a7:d8:19:8d:
2f:63:69:60:dd:1b:be:23:b4:fb:52:10:ef:9e:99:8f:d7:76:
40:af:80:c9:b7:e6:1e:be:8a:ec:cc:03:15:9e:e3:73:eb:73:
2e:28:f2:04:de:6a:52:00:c5:ee:2c:eb:ab:f4:38:e7:54:df:
a3:f9:f2:d5:66:f7:df:f8:12:7c:e4:38:30:e6:e5:1a:58:61:
b2:5d:2f:a2:eb:d9:8b:5c:ad:5b:ae:b7:ff:28:3d:d6:c2:35:
21:b7:17:a3:92:61:a1:1b:93:e6:4f:87:74:d0:5a:9f:2f:f6:
7b:eb:12:a4:1f:fe:29:96:5f:46:5e:61:42:fe:d4:73:41:ae:
66:64:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:14 2025 by rpki-client