Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa
File: 323830333a666565303a3a2f33322d3438203d3e20323730303131.roa (raw, json)
Hash identifier: +2zoPEJqd6S4iVbrieRxE222YcS7+yb7MFYQGEDmHrM=
Subject key identifier: 8A:72:65:C5:B2:06:1A:6A:9B:AE:0A:1C:89:4F:F7:D6:FF:2F:36:DE
Certificate issuer: /CN=72E864A0AEE3572DAA878F32665466996976A41E
Certificate serial: 47C9EAC865290678C4D6DA47F18BF5719B9FCCE7
Authority key identifier: 72:E8:64:A0:AE:E3:57:2D:AA:87:8F:32:66:54:66:99:69:76:A4:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa
Signing time: Tue 04 Feb 2025 18:53:13 +0000
ROA not before: Tue 04 Feb 2025 18:48:13 +0000
ROA not after: Tue 03 Feb 2026 18:53:13 +0000
asID: 270011
IP address blocks: 2803:fee0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.crl
rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 15:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c9:ea:c8:65:29:06:78:c4:d6:da:47:f1:8b:f5:71:9b:9f:cc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72E864A0AEE3572DAA878F32665466996976A41E
Validity
Not Before: Feb 4 18:48:13 2025 GMT
Not After : Feb 3 18:53:13 2026 GMT
Subject: CN=8A7265C5B2061A6A9BAE0A1C894FF7D6FF2F36DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:d1:e5:2f:0d:98:94:60:c9:de:ab:b6:37:
f6:56:4d:51:9c:91:b6:d7:8f:1f:77:db:81:ef:b1:
5d:42:d0:92:3b:46:94:f9:fd:fb:b8:37:4e:93:f7:
57:c9:9d:1c:6a:54:68:7b:43:6b:4f:87:c3:47:47:
8d:f7:b1:3e:2b:70:f4:89:cf:ba:ba:e8:9e:b3:90:
44:a2:af:27:85:2b:a0:46:65:7d:c2:3f:0a:6b:dc:
39:62:f9:42:9d:70:83:d9:5b:80:93:30:4c:73:ba:
dc:bb:5f:bb:28:cb:46:b9:f5:a3:6b:3d:32:50:13:
80:c4:b6:47:79:28:22:af:84:58:9c:eb:c2:9c:26:
39:a1:30:8c:58:dc:7f:ec:e6:aa:fa:e4:ed:b6:42:
fb:39:42:73:9b:18:94:ae:a8:44:33:5e:52:54:2e:
cf:01:5b:8c:2a:07:0c:90:8c:02:4f:a3:e3:39:df:
93:d8:61:d0:47:4c:7f:47:ef:26:75:4a:2a:ac:7e:
a4:7a:8e:76:dc:9d:96:f5:b0:1f:58:9a:e0:e6:ba:
aa:b8:3d:30:5b:14:44:4f:01:e4:8e:61:e8:ad:72:
29:10:be:99:bf:09:ed:67:7a:23:5e:60:15:7d:40:
11:d1:c6:89:8b:73:a6:1e:5c:fc:6e:ea:cf:eb:ed:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:65:C5:B2:06:1A:6A:9B:AE:0A:1C:89:4F:F7:D6:FF:2F:36:DE
X509v3 Authority Key Identifier:
keyid:72:E8:64:A0:AE:E3:57:2D:AA:87:8F:32:66:54:66:99:69:76:A4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:fee0::/32
Signature Algorithm: sha256WithRSAEncryption
29:fd:ad:8e:30:01:18:87:a5:c1:01:d9:de:31:b8:a2:d5:ab:
3a:78:ae:94:68:cf:09:57:c9:c3:6c:58:10:e2:64:b0:c2:1e:
b1:31:a8:42:6d:34:9a:9f:e2:2d:dc:d8:7c:c6:c6:fa:1c:27:
12:99:b6:99:20:8d:cf:6c:3f:e3:34:9a:7e:8b:ba:df:09:a4:
09:85:3a:53:2b:71:4a:7f:94:d0:6b:dd:69:8e:12:67:7e:72:
61:f9:bb:0b:38:e4:f7:65:9c:1f:f0:b2:10:11:c6:51:9c:31:
fd:42:73:e7:eb:26:d5:d9:dc:04:08:93:98:9a:00:df:a8:32:
fd:0a:8d:8a:1e:9f:77:a0:2e:35:75:c8:64:6b:6e:b8:eb:25:
20:b0:52:25:8c:1c:e7:33:d3:3e:da:05:1f:a0:46:0e:06:94:
2c:fc:6d:7c:7f:62:e5:af:14:b9:b7:4f:51:87:4d:67:1e:7d:
52:31:34:9a:c4:8c:6b:92:b1:42:f0:3b:49:59:83:dc:3d:a9:
c3:32:88:48:69:bc:1f:ab:07:ba:3e:4a:12:e7:ea:00:74:2f:
85:c3:06:75:97:70:39:fb:6e:cb:74:89:a7:02:00:0e:c8:2e:
06:2d:05:ca:d3:77:b4:3d:74:4c:cc:ba:67:a9:0a:b7:e5:8b:
ae:f1:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:08:35 2025 by rpki-client