Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa
File: 323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier: CChiOJ2vFj3i2dj61c689xkEOpoju4Of18HKhnVmbkU=
Subject key identifier: C2:95:F1:D2:6F:4B:2A:7D:E7:DE:66:50:FC:6A:F1:B3:1C:AA:D2:7F
Certificate issuer: /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial: 040557367704AD422943BD0899C27602619DB4C2
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa
Signing time: Mon 10 Feb 2025 20:09:30 +0000
ROA not before: Mon 10 Feb 2025 20:04:30 +0000
ROA not after: Mon 09 Feb 2026 20:09:30 +0000
asID: 262182
IP address blocks: 2803:f00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 16:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:05:57:36:77:04:ad:42:29:43:bd:08:99:c2:76:02:61:9d:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Validity
Not Before: Feb 10 20:04:30 2025 GMT
Not After : Feb 9 20:09:30 2026 GMT
Subject: CN=C295F1D26F4B2A7DE7DE6650FC6AF1B31CAAD27F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:bb:51:97:6c:b7:45:42:6d:a9:28:3d:d6:
4b:82:94:37:f0:e6:e2:8b:67:1a:a2:db:f5:ee:20:
6e:51:d8:7e:fc:9c:5a:4b:c2:c4:8c:42:e1:29:20:
46:96:ff:af:4c:06:ce:d7:ff:0e:51:42:3d:bc:c1:
42:0e:43:67:9f:fd:c8:7a:1c:01:de:ba:cb:29:9b:
29:40:cc:ca:19:e3:a9:09:ec:a6:e1:41:ca:ce:17:
98:73:a0:ce:cf:12:34:f7:b6:3f:a5:06:22:4a:f0:
83:04:0d:4b:b1:40:0d:ef:3f:97:9f:50:05:e0:59:
e2:2c:1b:76:8a:46:11:2d:e8:3d:db:be:e8:c2:5d:
09:18:ef:1d:a4:31:15:5d:55:f3:b9:bf:05:86:f0:
af:f7:68:38:57:1c:c7:67:25:f2:17:c7:7e:1f:1a:
0a:db:a2:73:e4:16:e7:9c:5a:af:9e:7a:25:6d:cd:
36:4d:41:1b:b6:5c:5f:d7:d9:a5:d8:18:8b:13:b3:
45:b6:d7:ff:58:31:da:02:fb:b6:30:41:63:27:08:
00:c5:f8:29:7e:d1:77:66:8e:2d:61:3f:da:15:9c:
cc:95:ab:71:46:35:22:d3:ec:47:39:85:43:53:a5:
38:8d:e2:3c:5f:85:14:a6:ab:35:4f:f3:2c:34:10:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:F1:D2:6F:4B:2A:7D:E7:DE:66:50:FC:6A:F1:B3:1C:AA:D2:7F
X509v3 Authority Key Identifier:
keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f00:4::/48
Signature Algorithm: sha256WithRSAEncryption
60:1d:d8:fe:f0:9a:52:69:33:7f:2b:44:5f:a0:69:c6:43:1e:
07:05:3d:43:fa:75:61:17:38:b1:75:f5:bf:71:d4:18:a6:1b:
17:16:e2:37:ce:db:bf:44:42:a8:72:24:a5:4c:f7:11:e3:4e:
97:c2:78:b8:73:3e:f9:02:22:44:b1:d3:e0:fe:ee:ba:ec:d0:
0f:79:c3:cc:15:01:6e:cc:a3:b6:46:2d:72:26:35:bd:6f:98:
b4:ff:c6:7f:3d:00:85:6c:fe:32:d5:d0:6b:11:44:30:02:1a:
4c:7c:fd:11:40:aa:d9:2e:9b:5c:6b:2e:d1:61:1d:b8:e8:4a:
99:d7:0d:ff:47:b0:b2:59:60:ba:9c:3b:d0:6b:c6:95:8d:53:
b4:8b:c4:f8:62:86:ac:29:06:92:71:fb:9a:99:4c:67:18:1f:
46:51:58:be:66:6c:18:12:d9:94:d8:6b:f1:fe:fe:b0:6e:36:
7f:8c:35:ad:6c:a7:b6:11:30:29:b8:cc:4b:e7:ed:2f:5d:c8:
82:a3:7e:6b:df:87:fd:ae:31:6b:c0:39:42:2a:64:90:0e:96:
36:91:8c:61:fb:cc:6c:cb:26:c9:bf:35:50:47:a7:45:da:34:
dd:23:11:12:22:c2:4f:39:9f:49:14:b8:60:05:62:9e:f7:00:
5b:59:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:26 2025 by rpki-client