Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa
File: 323830333a6338303a3a2f33322d3438203d3e20323633373137.roa (raw, json)
Hash identifier: 81pNJgTtLuqw55P5H5CVxaNxGSYAqh/ZynwXrl+HXno=
Subject key identifier: 01:B2:7E:F3:20:E3:FD:B9:C8:F5:46:2F:E7:FA:FA:A9:EA:27:93:89
Certificate issuer: /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial: 51ADC48D0910A26B006C0D5EF6142C493D05E108
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa
Signing time: Tue 04 Feb 2025 18:29:02 +0000
ROA not before: Tue 04 Feb 2025 18:24:02 +0000
ROA not after: Tue 03 Feb 2026 18:29:02 +0000
asID: 263717
IP address blocks: 2803:c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 13:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ad:c4:8d:09:10:a2:6b:00:6c:0d:5e:f6:14:2c:49:3d:05:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Validity
Not Before: Feb 4 18:24:02 2025 GMT
Not After : Feb 3 18:29:02 2026 GMT
Subject: CN=01B27EF320E3FDB9C8F5462FE7FAFAA9EA279389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:f2:de:78:16:a7:29:f2:89:44:9c:39:f2:
7d:02:09:64:0d:82:d2:e2:09:44:4a:75:b1:f3:ac:
32:e9:dc:16:90:be:91:50:e9:64:1c:6e:6a:14:2c:
c2:f8:cc:24:6d:5f:ec:48:9b:f7:d7:00:7e:5e:73:
5d:43:36:68:f7:e0:a0:65:2d:19:3f:96:3a:e7:9e:
19:0d:b2:48:ac:5a:e4:a6:12:36:7f:8f:c6:22:99:
d0:38:bf:33:b6:3b:0b:2e:c0:3a:0e:10:77:f8:d5:
aa:a6:b1:a5:20:2a:f3:ab:9e:25:4c:f0:eb:a8:f8:
29:ec:0e:19:49:05:21:01:84:97:30:f7:2b:16:a6:
66:90:3d:80:54:2e:03:b5:3b:d5:57:bf:94:2f:8c:
cb:4c:bd:ca:7c:6f:11:08:1b:f1:16:fd:86:50:63:
ad:37:be:f7:c1:67:01:d3:43:6e:6c:98:aa:0f:08:
6b:21:bd:9e:38:79:31:00:72:ba:0c:98:f4:30:03:
2a:5a:e5:68:90:6d:bd:15:e8:21:5a:e3:f5:e0:d0:
09:6c:47:ea:7a:7c:79:01:a6:a8:83:56:08:90:7e:
d7:0a:7d:94:d6:fc:7c:f1:4e:fa:12:4d:fd:a2:37:
8b:b0:8d:56:f9:dd:08:93:84:3c:68:37:35:94:50:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:7E:F3:20:E3:FD:B9:C8:F5:46:2F:E7:FA:FA:A9:EA:27:93:89
X509v3 Authority Key Identifier:
keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c80::/32
Signature Algorithm: sha256WithRSAEncryption
94:3d:46:73:49:30:67:b2:3e:c4:80:79:8e:0d:dc:84:fb:83:
7d:ff:49:a1:eb:72:94:0c:13:41:4d:f2:23:63:f9:03:55:36:
b1:ad:48:26:ad:96:1f:d7:f9:66:92:89:b8:78:b5:86:9c:b3:
3c:9c:32:61:8f:ae:a7:f0:3b:ce:3c:09:71:77:d8:47:cd:1c:
d9:d7:97:d4:a3:d9:cf:c5:f3:11:fe:72:a7:ef:a7:b0:62:43:
48:42:96:41:d4:ae:02:ea:cd:3d:ee:0d:28:bb:f1:4e:b4:57:
d2:d2:81:62:52:8c:98:d0:8a:3f:37:70:2e:84:6c:b4:bc:11:
22:31:59:34:48:59:ab:fc:75:45:c1:f3:50:50:1a:9b:9c:55:
d7:ec:e9:d0:1f:20:18:51:ce:fc:c0:63:77:77:f1:01:37:8c:
2d:ec:61:6d:3e:35:5a:75:44:3b:e5:46:89:79:18:7a:49:9d:
fb:69:a9:e1:73:88:cf:31:86:d2:97:8a:bf:61:4e:2d:4d:12:
88:ae:f3:3e:ee:60:59:5d:b2:4d:ee:e4:95:d6:ca:ad:68:d6:
d5:ae:f2:af:59:29:0a:19:c9:71:22:b6:82:cf:f1:ba:69:7c:
0b:a7:e5:88:19:37:d9:ec:da:3e:66:6b:80:f8:1d:93:b9:61:
a4:cb:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:28 2025 by rpki-client