Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
File: 323830303a3835303a3a2f33322d3438203d3e203237393833.roa (raw, json)
Hash identifier: 4oQvklDomz683uauizvlhuNdVRfUUP9Sg9lcJNaaNY0=
Subject key identifier: CF:45:6C:F2:85:D0:AF:4C:5A:16:33:AF:E4:32:93:AC:35:2D:21:E0
Certificate issuer: /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial: 5FC106C9376822364ACD0440F4B01E25F5D74B61
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
Signing time: Tue 04 Feb 2025 18:30:36 +0000
ROA not before: Tue 04 Feb 2025 18:25:36 +0000
ROA not after: Tue 03 Feb 2026 18:30:36 +0000
asID: 27983
IP address blocks: 2800:850::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c1:06:c9:37:68:22:36:4a:cd:04:40:f4:b0:1e:25:f5:d7:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Validity
Not Before: Feb 4 18:25:36 2025 GMT
Not After : Feb 3 18:30:36 2026 GMT
Subject: CN=CF456CF285D0AF4C5A1633AFE43293AC352D21E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:38:dd:73:b5:d8:26:9d:b0:ee:ab:f5:53:
b0:59:b6:6a:a2:f3:bd:fd:6f:9f:9f:70:46:d4:e7:
7d:43:fa:ef:e6:5a:ca:90:f3:40:13:55:4d:85:d3:
4e:76:90:9c:47:a9:b3:10:2c:63:a5:c5:fe:b2:98:
be:b9:29:d0:59:42:36:07:aa:36:d2:12:54:ca:01:
c7:a9:a9:23:0b:1f:21:02:fc:8c:a7:f8:2c:2e:41:
99:c6:ec:7a:75:e7:70:59:35:b4:1d:c9:6d:97:bb:
94:bc:ac:bf:80:f8:a4:e9:59:00:02:b3:e8:94:db:
e1:04:47:43:73:87:1c:92:f4:b1:71:62:57:43:e4:
f8:ae:7e:f7:31:15:d1:6d:35:aa:fe:13:62:c9:0f:
11:49:d3:2d:f3:40:01:ac:27:de:84:cb:d2:5a:11:
bb:30:a5:eb:3b:88:16:a8:51:10:ff:c4:68:25:13:
f3:72:05:63:d6:55:ca:91:2b:e5:50:03:60:98:05:
99:e4:11:cc:56:27:db:d7:9c:38:ad:d6:16:c2:44:
cd:a2:b2:76:99:58:cc:ef:b1:30:fb:47:a5:b4:18:
a2:89:12:ce:64:e0:ce:a1:eb:6e:45:f5:64:04:ed:
87:21:09:da:f9:6c:f8:e6:7a:6d:e4:a4:ac:ea:0f:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:6C:F2:85:D0:AF:4C:5A:16:33:AF:E4:32:93:AC:35:2D:21:E0
X509v3 Authority Key Identifier:
keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:850::/32
Signature Algorithm: sha256WithRSAEncryption
18:52:5c:29:fc:91:62:40:b9:f6:84:ac:67:05:60:b9:82:f0:
b4:86:ac:4f:f2:85:40:6f:0e:1d:85:1e:db:97:a9:88:b5:b2:
ac:10:52:ae:7a:8d:fe:7b:05:69:e8:c2:82:11:95:8c:b0:09:
af:61:7d:bb:07:79:03:61:97:24:56:fb:b8:d8:bf:1d:ed:7a:
b2:f7:0c:d5:e8:42:0f:69:86:fb:1a:2e:44:1f:ac:a5:32:32:
d1:fe:31:8f:59:1f:7b:99:94:1b:6d:a5:96:60:ff:f2:d1:6c:
7d:88:92:22:05:a6:9f:31:b6:fd:8f:03:d9:f0:77:e0:fb:c2:
cc:55:5f:d1:88:4d:0d:d8:7e:0d:23:af:ec:f7:a6:95:64:34:
e0:6d:fa:61:20:ec:ee:a4:33:3b:10:48:ff:12:7e:c4:f8:04:
7f:f3:29:40:ce:54:ee:53:b5:09:c5:9c:9a:51:ef:83:6c:c2:
be:c9:1c:8a:51:d6:63:56:fe:55:74:f0:4d:6d:38:d6:d4:0f:
16:e5:f2:65:35:ee:b1:3c:a6:b2:e8:d5:9d:bb:64:ac:2c:fe:
0a:60:a7:dc:1c:e3:96:ae:2f:03:5e:d1:c0:b2:92:bd:90:91:
69:88:f9:d0:99:4b:ef:cd:3c:46:20:4d:78:db:30:18:4d:e8:
c9:51:4a:c1
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUX8EGyTdoIjZKzQRA9LAeJfXXS2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1MzZaFw0yNjAyMDMxODMwMzZaMDMxMTAvBgNV
BAMTKENGNDU2Q0YyODVEMEFGNEM1QTE2MzNBRkU0MzI5M0FDMzUyRDIxRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfjjdc7XYJp2w7qv1U7BZtmqi
8739b5+fcEbU531D+u/mWsqQ80ATVU2F0052kJxHqbMQLGOlxf6ymL65KdBZQjYH
qjbSElTKAcepqSMLHyEC/Iyn+CwuQZnG7Hp153BZNbQdyW2Xu5S8rL+A+KTpWQAC
s+iU2+EER0NzhxyS9LFxYldD5PiufvcxFdFtNar+E2LJDxFJ0y3zQAGsJ96Ey9Ja
Ebswpes7iBaoURD/xGglE/NyBWPWVcqRK+VQA2CYBZnkEcxWJ9vXnDit1hbCRM2i
snaZWMzvsTD7R6W0GKKJEs5k4M6h625F9WQE7YchCdr5bPjmem3kpKzqDxF7AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUz0Vs8oXQr0xaFjOv5DKTrDUtIeAwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMyMzgzMDMwM2EzODM1MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzkzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAIUDANBgkq
hkiG9w0BAQsFAAOCAQEAGFJcKfyRYkC59oSsZwVguYLwtIasT/KFQG8OHYUe25ep
iLWyrBBSrnqN/nsFaejCghGVjLAJr2F9uwd5A2GXJFb7uNi/He16svcM1ehCD2mG
+xouRB+spTIy0f4xj1kfe5mUG22llmD/8tFsfYiSIgWmnzG2/Y8D2fB34PvCzFVf
0YhNDdh+DSOv7PemlWQ04G36YSDs7qQzOxBI/xJ+xPgEf/MpQM5U7lO1CcWcmlHv
g2zCvskcilHWY1b+VXTwTW041tQPFuXyZTXusTymsujVnbtkrCz+CmCn3Bzjlq4v
A17RwLKSvZCRaYj50JlL7808RiBNeNswGE3oyVFKwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:45 2025 by rpki-client