Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e203133343839.roa
File: 323830313a3164363a3a2f34302d3430203d3e203133343839.roa (raw, json)
Hash identifier: TJBFUdB1lFXVFDYLcW+ePT5TbYPgzI2WsGXmHl+notM=
Subject key identifier: CB:0A:FA:90:8B:D8:91:78:EB:9A:EA:17:95:D6:11:84:23:47:E1:31
Certificate issuer: /CN=4A648B9AA824EEB55A850CA3644D1FABA947AC35
Certificate serial: 57485A230423E817D85FE708EDB0EA2259544364
Authority key identifier: 4A:64:8B:9A:A8:24:EE:B5:5A:85:0C:A3:64:4D:1F:AB:A9:47:AC:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e203133343839.roa
Signing time: Tue 04 Feb 2025 18:50:12 +0000
ROA not before: Tue 04 Feb 2025 18:45:12 +0000
ROA not after: Tue 03 Feb 2026 18:50:12 +0000
asID: 13489
IP address blocks: 2801:1d6::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.crl
rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 03:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:48:5a:23:04:23:e8:17:d8:5f:e7:08:ed:b0:ea:22:59:54:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A648B9AA824EEB55A850CA3644D1FABA947AC35
Validity
Not Before: Feb 4 18:45:12 2025 GMT
Not After : Feb 3 18:50:12 2026 GMT
Subject: CN=CB0AFA908BD89178EB9AEA1795D611842347E131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:b1:a0:24:a9:c6:67:d7:81:7f:88:f2:46:
7b:89:3b:7a:13:d9:a6:e7:a9:6f:76:43:1b:a9:0a:
5d:50:ab:51:fd:f9:45:b7:f1:1e:31:27:89:ee:9a:
f0:9b:f8:7e:6b:d2:45:7c:00:2f:23:27:a4:df:e0:
af:d7:bc:4a:5b:06:fe:6a:15:8f:ac:e7:3f:a8:09:
13:13:09:ae:5a:16:30:7e:43:94:89:49:82:48:f3:
52:7b:bf:ba:89:19:f1:96:b8:81:eb:13:cc:58:a8:
ba:73:a5:0e:40:f9:7d:39:11:78:63:0a:84:61:cd:
a2:6b:ba:07:73:5d:9c:b5:93:4a:28:67:b2:83:71:
77:f3:7b:8b:8c:0d:cc:14:65:c7:8c:ad:ed:54:f0:
f0:30:96:47:b4:e7:c8:29:1b:7e:80:ed:8a:57:c6:
0d:aa:2f:b4:1d:68:de:33:12:91:1d:e7:26:78:a9:
84:a9:bb:de:5f:b1:45:87:82:62:18:3d:2c:21:94:
1e:4c:34:39:43:10:33:7f:6f:b0:90:96:d9:3c:c8:
d3:06:87:65:12:6d:2c:14:2a:e4:46:3f:fb:a5:8a:
59:a4:35:7a:32:48:99:54:a8:d6:2d:6b:f0:1c:09:
fe:38:29:8d:1d:98:f9:96:51:a1:a5:ae:4a:d7:96:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:FA:90:8B:D8:91:78:EB:9A:EA:17:95:D6:11:84:23:47:E1:31
X509v3 Authority Key Identifier:
keyid:4A:64:8B:9A:A8:24:EE:B5:5A:85:0C:A3:64:4D:1F:AB:A9:47:AC:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d6::/40
Signature Algorithm: sha256WithRSAEncryption
74:3c:7b:f9:1f:83:e7:1b:dd:0f:77:4f:48:ba:b0:2d:60:f2:
a8:ee:66:b9:3f:8e:52:7e:d6:69:7d:e5:79:92:d5:3b:99:87:
8c:4e:1b:61:7e:d8:2f:d6:91:b8:7e:ec:d4:f2:b9:e8:03:d1:
5c:c8:1b:ad:a1:44:0a:2c:23:c4:00:4e:f2:62:fa:52:9d:2f:
28:64:09:30:ea:24:ce:99:ca:3b:b2:a6:84:0e:01:86:9c:32:
ce:6c:3f:23:f0:7f:e9:45:37:7a:09:ea:3f:07:22:b1:ce:14:
7b:7a:7f:93:fc:b5:e6:fe:65:f0:f3:53:ad:a7:09:2c:d8:cf:
9e:af:95:bb:b3:15:96:2b:b3:aa:10:de:95:b4:a8:6e:69:0e:
c5:21:88:4a:c3:9c:01:16:8d:9b:fc:a6:ab:6b:7e:74:ab:7d:
59:d7:06:34:da:23:9b:96:01:c2:23:a4:2f:ee:30:db:0b:68:
df:e9:8f:e5:5f:3d:db:f0:48:72:07:fc:a7:66:28:d4:3a:98:
42:09:0c:ed:e6:b6:14:30:d7:31:66:98:80:31:c0:31:32:50:
42:a7:b1:5e:40:cc:44:71:a5:27:7e:f3:4b:f8:84:78:ee:b5:
8d:4c:ea:9d:46:d6:99:bc:74:18:58:65:cb:be:2d:91:6f:90:
b0:2e:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:39 2025 by rpki-client