Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a3a2f33362d3336203d3e20323639383030.roa
File: 323830333a373336303a3a2f33362d3336203d3e20323639383030.roa (raw, json)
Hash identifier: bcnv6G/1x/JrqoVGgX3eHiJkOHupTfQIRdGEoTNNYto=
Subject key identifier: 63:33:54:39:A3:14:AA:70:BD:73:86:34:D2:EC:ED:26:81:43:AE:7D
Certificate issuer: /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Certificate serial: 07467EF60DBB2E923B2167939B3C59579286D1C8
Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a3a2f33362d3336203d3e20323639383030.roa
Signing time: Tue 04 Feb 2025 18:09:29 +0000
ROA not before: Tue 04 Feb 2025 18:04:29 +0000
ROA not after: Tue 03 Feb 2026 18:09:29 +0000
asID: 269800
IP address blocks: 2803:7360::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl
rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:7e:f6:0d:bb:2e:92:3b:21:67:93:9b:3c:59:57:92:86:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Validity
Not Before: Feb 4 18:04:29 2025 GMT
Not After : Feb 3 18:09:29 2026 GMT
Subject: CN=63335439A314AA70BD738634D2ECED268143AE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:d5:cf:09:a5:81:c9:f7:f3:95:2c:b1:ee:
ac:a6:3b:be:ed:dc:82:77:20:6d:4b:f8:36:a9:16:
1f:4f:ec:b0:6a:bc:15:87:65:3f:43:3e:b8:5f:e4:
6c:d6:54:f1:08:53:d0:02:6b:70:d6:3c:ac:9e:78:
c7:44:65:6e:04:58:2b:40:a2:21:84:1c:f5:bf:d0:
7f:34:9f:ff:77:cf:35:1b:2b:b0:d9:50:69:8e:86:
06:25:17:05:ee:46:34:18:d9:6e:c4:19:6c:74:41:
d4:c3:37:a6:04:c5:40:2f:91:c2:49:1b:72:a6:2c:
1d:bb:cb:2e:f4:e5:1a:72:c5:9d:89:2d:4a:bf:f8:
c4:ad:3d:a4:16:b5:cf:44:3e:3c:84:5e:a8:47:0c:
3a:4d:3b:d8:a1:e0:36:5f:36:d2:79:09:3b:34:6c:
dd:3f:2d:dc:bf:b7:33:af:b0:b9:d2:2c:7c:4f:e3:
11:d0:e4:ba:75:f3:40:cc:93:93:18:67:e6:2f:09:
bd:00:07:cb:00:a0:67:6d:24:21:9a:5f:13:2e:dc:
cd:78:dc:ef:ef:bd:c7:6c:24:19:b5:20:27:b1:1d:
c5:55:9a:7e:6a:d3:d3:64:d9:36:4e:fa:e2:a8:43:
93:6d:a5:17:0f:a9:c3:14:ad:f4:ed:5e:f0:ce:da:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:33:54:39:A3:14:AA:70:BD:73:86:34:D2:EC:ED:26:81:43:AE:7D
X509v3 Authority Key Identifier:
keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a3a2f33362d3336203d3e20323639383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7360::/36
Signature Algorithm: sha256WithRSAEncryption
16:62:cd:9d:06:cf:48:87:44:17:ba:8e:27:88:39:70:44:82:
ad:86:9a:79:a9:64:fc:21:81:c6:8f:75:99:05:74:0b:e2:da:
f9:d8:17:84:c4:e5:64:72:e4:b1:96:db:6d:c5:46:99:27:84:
74:1d:2d:5c:a3:e7:22:f1:de:a0:e9:6d:8f:8f:fe:f2:d4:95:
6a:7d:b5:ad:d6:8d:fb:e3:3f:51:c6:62:c8:40:d3:17:0d:76:
78:21:b9:f1:7f:eb:5e:f1:9d:7c:7d:f1:ef:0b:a6:e4:5b:66:
a8:cd:b5:76:ae:9a:14:c1:88:4b:b0:3e:f9:67:e7:a7:ad:92:
81:c3:ae:e9:ee:28:bf:f3:6a:3a:c1:9d:7f:ac:55:67:f5:34:
3a:7e:6b:23:72:ed:ee:3d:be:18:29:e2:1d:a5:61:93:d7:c4:
ef:4c:0d:69:f1:a9:db:64:76:83:2a:f9:6b:80:a4:e0:d0:65:
b2:bd:3b:35:cf:4f:da:44:b1:ef:4f:c3:22:8e:67:5b:16:66:
22:e9:b2:50:dc:19:5a:ae:2b:b4:ad:3b:db:67:a6:ae:5d:ee:
a4:45:8f:a4:45:ae:7b:e3:06:2b:3a:db:c4:30:c3:09:67:1c:
7a:e9:eb:fa:e3:f6:10:33:33:d2:fe:3b:bf:0d:06:39:c8:84:
a5:79:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:14 2025 by rpki-client