Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3438203d3e203337373037.roa
File: 323830333a343836303a3a2f33322d3438203d3e203337373037.roa (raw, json)
Hash identifier: IwJ0kU9qn6nG9KJ4yiaDyp6pIrCAvfeVJ5JKkFF/JaY=
Subject key identifier: 33:BA:2C:E5:BA:50:64:8A:1A:90:D3:BF:68:EC:A7:E8:18:74:1C:78
Certificate issuer: /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial: 235D11DD92BC877A740D4829BDD48459E0352EEE
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3438203d3e203337373037.roa
Signing time: Tue 25 Feb 2025 19:35:00 +0000
ROA not before: Tue 25 Feb 2025 19:30:00 +0000
ROA not after: Tue 24 Feb 2026 19:35:00 +0000
asID: 37707
IP address blocks: 2803:4860::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5d:11:dd:92:bc:87:7a:74:0d:48:29:bd:d4:84:59:e0:35:2e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Validity
Not Before: Feb 25 19:30:00 2025 GMT
Not After : Feb 24 19:35:00 2026 GMT
Subject: CN=33BA2CE5BA50648A1A90D3BF68ECA7E818741C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:75:72:2b:09:23:b8:93:40:45:30:8d:79:
e1:50:82:a4:3f:0c:7a:11:2f:76:8b:3b:fd:b3:3d:
50:24:fd:76:16:19:58:45:03:19:1b:24:31:18:14:
3a:92:dd:c2:2f:e8:23:9b:63:f1:10:b1:89:6a:22:
23:31:e6:7c:79:02:5f:12:5b:08:89:26:66:24:29:
90:24:aa:58:2a:53:14:ce:fe:c3:1a:7f:0a:5a:85:
b2:45:ff:8f:ff:60:de:24:81:75:66:4e:72:fc:41:
31:60:88:f1:6c:e9:a0:c8:41:b2:40:9d:8b:69:c6:
e0:c5:86:6c:79:a8:d7:b8:28:4d:bb:1b:84:f2:71:
ee:ae:e6:95:50:f9:61:1f:ff:f6:26:ea:2e:6b:28:
b6:6d:7a:18:29:b8:28:e3:37:14:5b:89:8c:b6:94:
26:69:62:50:b7:75:44:9a:d4:26:52:bd:59:27:27:
5c:1e:c1:9f:f0:c9:3d:9a:33:c5:6d:78:6c:3a:06:
cd:c7:a9:b6:9b:bc:80:d1:90:b6:d4:50:bc:d8:7d:
c3:c8:e1:e7:73:41:4a:5f:a3:34:be:56:9e:47:d7:
ea:0b:f8:ca:08:06:27:71:cd:f5:12:05:aa:80:4f:
a9:5b:58:6a:1e:7d:d3:91:66:50:b8:b5:aa:eb:65:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:2C:E5:BA:50:64:8A:1A:90:D3:BF:68:EC:A7:E8:18:74:1C:78
X509v3 Authority Key Identifier:
keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3438203d3e203337373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4860::/32
Signature Algorithm: sha256WithRSAEncryption
32:cf:76:d8:88:f8:de:82:9d:0d:0f:60:82:9d:e0:59:cd:f2:
e8:cb:96:60:a9:dc:b6:d3:fa:b1:eb:5c:6a:3d:14:87:d8:65:
b1:c1:f2:ca:11:89:e8:47:cf:ba:aa:51:36:0c:10:af:a7:29:
2d:3f:f9:6a:0f:63:d5:6b:b9:e3:e6:a3:a7:e6:73:52:f0:af:
2f:3a:69:79:9c:5e:f8:52:26:af:e2:61:1c:d9:6d:c3:b8:3f:
36:ba:90:22:44:97:ff:e2:07:44:c6:e9:dd:4c:e2:af:33:1c:
d0:7a:a8:a1:84:dc:c7:50:20:25:54:f8:01:e2:b4:15:8d:27:
92:75:2e:44:b0:73:aa:4d:6f:2b:22:ab:bc:77:c8:bb:90:fb:
d8:d7:f7:d3:65:d6:be:fc:a5:4d:28:cb:4d:5c:72:ab:7c:14:
ed:be:9b:5c:c8:29:3a:67:4b:99:93:79:d9:76:38:03:13:95:
b5:6d:2f:29:62:08:cb:42:96:72:de:d4:db:93:07:92:ba:16:
dc:d3:02:19:10:fb:79:65:23:ff:48:f1:21:97:99:64:fa:34:
e4:bd:b1:83:13:0e:29:d0:ce:bd:21:5f:4f:43:eb:fb:26:02:
0c:9f:eb:5b:9a:85:4d:23:06:35:3b:98:12:1d:c6:06:cd:10:
e7:24:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:44:54 2025 by rpki-client