Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa
File: 323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa (raw, json)
Hash identifier: vz29HZXSnhGXB4jcgjq6M5wxxZl9dHu3+FggQoHspFM=
Subject key identifier: 97:53:3F:31:D2:62:19:6A:A1:5E:65:3A:E8:72:BF:52:43:F4:85:28
Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial: 739939C7DA200A992D17AAC2415A89E37C35303E
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa
Signing time: Tue 04 Feb 2025 18:51:58 +0000
ROA not before: Tue 04 Feb 2025 18:46:58 +0000
ROA not after: Tue 03 Feb 2026 18:51:58 +0000
asID: 265554
IP address blocks: 2803:aba0:2300::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:99:39:c7:da:20:0a:99:2d:17:aa:c2:41:5a:89:e3:7c:35:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Validity
Not Before: Feb 4 18:46:58 2025 GMT
Not After : Feb 3 18:51:58 2026 GMT
Subject: CN=97533F31D262196AA15E653AE872BF5243F48528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:a6:96:da:27:ed:2a:60:57:f0:2d:d8:7f:
c3:eb:e4:e7:a1:03:74:0c:7a:0d:2e:ce:83:28:37:
35:2d:90:20:c6:7d:9b:31:8d:11:d8:42:9c:e2:77:
ff:2b:6e:15:c4:eb:c2:9f:d7:9e:a3:0a:c4:38:33:
47:38:b4:40:54:e7:e7:f8:9f:9b:41:9e:ef:24:2d:
f4:42:80:ff:71:fc:e0:aa:b7:61:4d:4d:59:b6:ec:
7e:c3:c4:99:db:aa:70:9d:e1:19:cc:32:3c:7c:2c:
10:67:c3:22:a3:f3:92:6a:fb:13:24:17:23:f8:3f:
6a:6a:de:d2:26:2b:a6:8c:68:66:fd:93:69:9b:97:
6e:f4:4e:28:84:30:4f:d8:8b:42:42:39:16:9a:46:
57:59:62:b3:1f:20:9b:a3:b9:f9:d8:b1:ff:08:c7:
be:5e:60:ea:fe:2b:04:5b:05:c1:bc:ca:2f:c0:d7:
04:00:53:8a:2e:b1:8d:d4:77:d4:83:ac:39:54:46:
b0:f4:8e:5e:b9:54:58:bf:4c:d7:96:4d:60:16:1a:
4c:b7:f2:c1:9b:c4:68:7c:2a:d5:f5:64:0f:44:f5:
93:d5:03:9e:2d:95:67:78:a2:e2:62:ef:e2:af:f0:
08:20:bd:9d:97:01:9a:4a:5d:5e:97:1d:77:df:76:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:53:3F:31:D2:62:19:6A:A1:5E:65:3A:E8:72:BF:52:43:F4:85:28
X509v3 Authority Key Identifier:
keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:aba0:2300::/48
Signature Algorithm: sha256WithRSAEncryption
8b:1b:9a:72:54:3c:0d:a1:2a:d6:f1:26:76:95:e8:48:c6:54:
d2:36:51:bc:72:7a:e0:df:29:31:10:0f:00:48:4c:f4:05:59:
59:f3:7a:15:c9:2e:4e:3e:62:43:88:6b:34:ab:ed:56:63:44:
dd:6b:af:5e:39:33:f5:a9:77:ff:2f:3a:7b:b0:37:87:db:7e:
f3:82:db:38:54:99:ba:97:56:3f:e5:94:9d:ee:12:68:e2:7d:
10:fd:0a:6e:6f:33:0c:5a:20:7d:7b:d4:33:e4:f2:f7:d1:40:
a3:72:1a:1e:fe:c7:77:ed:6d:1c:b9:cc:41:8f:4d:40:53:d1:
ea:da:f5:60:43:26:9d:8d:ac:67:5e:0d:d1:29:8b:64:78:b8:
57:5a:34:90:08:90:9b:33:02:d9:96:2a:50:bf:04:18:9f:df:
db:2f:7f:d1:62:4f:1c:34:59:5b:d9:e6:80:ae:2f:d8:b0:76:
30:51:e2:9b:cb:f3:b5:88:ea:21:53:22:8f:ca:24:29:d4:4a:
4a:b4:a3:e0:09:95:a1:0e:05:19:55:75:33:3f:c7:09:89:b3:
1e:04:8e:37:09:36:d2:b7:d3:33:0f:ce:15:a2:2c:48:82:b1:
a5:82:97:20:42:37:cd:00:b7:20:2d:5a:9f:10:2e:ca:a9:98:
ae:b1:d6:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:04:51 2025 by rpki-client