Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa
File: 323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa (raw, json)
Hash identifier: fHtX4pJu+c+n6pViXDqcerUIJe9UAtieML/CLwZa67I=
Subject key identifier: DB:AA:92:0D:48:89:D8:FE:37:46:0D:1A:7F:0C:75:C9:C7:0B:EA:38
Certificate issuer: /CN=64B6C96BB638070D77C87C67A1FA4111CB8C1173
Certificate serial: 0510CBAE627995705D03EC228BF362D2F413374E
Authority key identifier: 64:B6:C9:6B:B6:38:07:0D:77:C8:7C:67:A1:FA:41:11:CB:8C:11:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa
Signing time: Tue 04 Feb 2025 18:25:29 +0000
ROA not before: Tue 04 Feb 2025 18:20:29 +0000
ROA not after: Tue 03 Feb 2026 18:25:29 +0000
asID: 52382
IP address blocks: 2801:0:330::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.crl
rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 03:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:10:cb:ae:62:79:95:70:5d:03:ec:22:8b:f3:62:d2:f4:13:37:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B6C96BB638070D77C87C67A1FA4111CB8C1173
Validity
Not Before: Feb 4 18:20:29 2025 GMT
Not After : Feb 3 18:25:29 2026 GMT
Subject: CN=DBAA920D4889D8FE37460D1A7F0C75C9C70BEA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:b3:f9:59:8d:a5:df:f0:8b:72:30:67:b8:
cd:ea:72:a3:66:a3:f5:51:29:75:41:04:ea:ac:e3:
9c:76:5d:78:ce:6e:d2:2e:45:b6:cd:d1:57:cd:77:
42:bb:1f:02:54:83:85:f1:8e:77:4e:9a:66:52:c2:
0b:e9:40:b6:7e:64:a4:5d:e2:ed:2e:f6:cd:1f:b5:
cc:d6:f5:82:59:1f:9d:f3:74:61:1f:11:1f:1f:6a:
fa:ea:b7:f7:4b:cd:5c:0b:08:6e:3c:33:f6:61:13:
d6:77:e2:d7:e2:65:5b:6c:6e:a3:f0:18:97:fc:82:
1d:c4:1a:b7:a7:cc:0e:77:25:44:72:0f:b2:21:11:
a4:65:c6:0b:a2:8b:5f:8c:94:26:93:fa:6f:2d:f9:
bd:6a:73:06:4a:27:36:eb:0c:6f:b6:23:3d:06:24:
f9:a5:fa:38:73:8a:da:54:5b:21:b8:70:0e:5f:36:
d0:a7:7e:22:71:8c:49:9f:15:f3:b0:a5:3f:54:e8:
69:5e:ce:82:54:b0:b6:b8:31:3c:95:c7:83:8d:23:
52:a6:12:dc:2a:92:d2:19:0f:83:b1:c6:d5:cf:bb:
97:b9:5b:83:1e:48:a8:35:8d:f1:99:0c:2d:f9:15:
d2:f5:94:10:88:a2:dc:95:6c:2d:c1:28:77:da:f1:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:92:0D:48:89:D8:FE:37:46:0D:1A:7F:0C:75:C9:C7:0B:EA:38
X509v3 Authority Key Identifier:
keyid:64:B6:C9:6B:B6:38:07:0D:77:C8:7C:67:A1:FA:41:11:CB:8C:11:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:330::/48
Signature Algorithm: sha256WithRSAEncryption
89:86:98:44:8b:2e:1b:36:ae:2f:0b:b0:a2:8f:4e:18:62:07:
b9:28:67:74:18:0b:28:fd:2d:74:36:d9:45:2a:1d:bd:18:db:
57:99:65:c3:dd:1d:3e:8f:6d:20:ee:eb:19:de:5f:71:91:93:
7a:80:58:9a:51:f9:4b:3c:fb:69:02:c3:4d:c8:43:d3:b2:5e:
71:ac:c0:f9:13:fd:f1:75:65:99:a8:eb:b6:9a:ea:e6:24:87:
39:bc:73:12:f4:3c:c4:0b:9c:23:4e:a9:f4:0f:db:d1:0f:3f:
04:94:47:19:8f:72:c3:8e:97:9d:c8:c2:e1:e9:90:b7:a8:67:
2b:c5:95:85:1f:e4:51:42:a6:e0:c3:45:13:e3:82:42:28:ce:
1e:04:28:10:22:9f:23:86:13:05:c6:d3:08:37:f3:85:b7:68:
df:1a:cb:54:e9:c8:1a:cb:04:2b:56:97:17:25:7d:3e:e5:08:
13:21:59:54:61:ec:0f:07:d4:14:dd:96:af:89:a5:40:d3:e9:
64:5b:15:91:25:90:35:f9:c7:7a:de:3e:2b:a5:01:7d:08:9e:
4f:3e:b5:f6:82:05:00:68:9b:d6:d7:59:29:ae:dc:cd:f8:f6:
4d:c3:15:94:00:90:60:f7:7b:21:45:e2:3b:ca:83:5d:91:a4:
d0:6b:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:04 2025 by rpki-client