Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa
File: 323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa (raw, json)
Hash identifier: XqAU2BKpKvab+jL5DTaAjt9wv6AYoz7F8ReEYm95wgQ=
Subject key identifier: 9D:85:79:BA:5C:53:65:D7:51:74:B5:80:74:16:AD:DD:65:B5:D8:F9
Certificate issuer: /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial: 21E804DBB7BCE62A34AD929100DF2747A7E59F3E
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa
Signing time: Tue 04 Feb 2025 18:02:22 +0000
ROA not before: Tue 04 Feb 2025 17:57:22 +0000
ROA not after: Tue 03 Feb 2026 18:02:22 +0000
asID: 23246
IP address blocks: 2803:c310:fe00::/39 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 09:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e8:04:db:b7:bc:e6:2a:34:ad:92:91:00:df:27:47:a7:e5:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
Validity
Not Before: Feb 4 17:57:22 2025 GMT
Not After : Feb 3 18:02:22 2026 GMT
Subject: CN=9D8579BA5C5365D75174B5807416ADDD65B5D8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:3c:40:28:06:a6:9a:93:a4:ec:56:fa:71:
56:2a:d4:fe:e1:4c:6d:98:1a:c1:40:84:99:0f:2c:
d9:13:75:7a:f0:91:e0:6f:7a:0a:c8:b8:6b:63:9f:
88:ae:78:d8:d3:d7:4a:33:37:33:bf:f8:83:62:90:
bc:47:8d:18:1b:7d:0e:46:4f:cd:fb:3a:3b:fc:0a:
f5:6d:d0:6f:31:13:dd:a6:94:06:97:28:34:de:00:
be:2b:5e:88:99:7d:17:9e:4f:78:de:62:d3:96:17:
f6:98:f4:fc:1b:37:11:a4:4c:49:08:9c:f2:f6:a6:
47:82:03:1e:3b:78:94:13:bc:4c:64:b9:21:1b:85:
a7:a3:4a:4b:1b:30:3f:b5:a5:42:09:df:df:45:b1:
9c:92:41:9d:9b:53:03:b2:1b:d0:98:a6:fc:ba:28:
cf:9d:74:c9:95:79:e1:e1:76:41:8f:e6:43:0b:d1:
5f:37:03:77:ac:13:e6:e1:4b:0b:51:7a:ad:9d:fe:
30:a1:77:73:46:33:9f:30:06:80:ec:7e:19:1c:06:
c2:23:8b:ea:0f:34:26:29:ff:a7:af:a2:de:26:bd:
60:4e:57:a7:ea:7e:8f:59:2a:51:d4:e1:24:00:45:
4d:23:e6:6e:57:37:33:dc:aa:48:2c:28:04:34:5b:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:79:BA:5C:53:65:D7:51:74:B5:80:74:16:AD:DD:65:B5:D8:F9
X509v3 Authority Key Identifier:
keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c310:fe00::/39
Signature Algorithm: sha256WithRSAEncryption
5a:02:41:20:7f:cb:6c:60:ee:b4:16:80:97:9e:c1:73:b6:c3:
d9:f2:db:22:d5:b9:f6:7b:47:10:f5:43:31:6d:af:ff:64:16:
2d:27:b5:ea:91:c7:87:5a:d1:b1:db:85:46:2a:fd:39:4d:7a:
24:a9:3f:e9:4e:1f:b2:07:d0:aa:08:42:5a:d9:aa:b1:0f:02:
34:a7:31:99:1f:53:2d:b4:bd:1a:11:9d:72:b5:ec:5d:a4:44:
32:c3:68:2e:f9:82:3c:ac:fd:c3:00:e0:3a:70:0d:d6:70:cf:
39:b9:87:5c:a9:ef:aa:91:df:95:5d:17:89:d0:71:6e:f1:35:
fe:4b:c4:e4:3f:eb:01:76:a7:68:1f:de:64:27:3c:e5:2e:7e:
5a:84:b3:98:d0:21:ed:a3:a0:a9:1f:f2:c7:81:46:f4:d8:c8:
51:cf:e5:ae:7b:72:95:73:b4:a6:ef:73:6d:8d:2b:3e:8f:48:
4c:57:79:c5:87:18:00:9b:14:ca:c8:24:8a:62:0c:4f:ea:22:
bd:89:14:3c:6a:05:38:38:30:27:fe:f8:fb:d9:f1:cb:43:a5:
f2:1b:b5:52:5f:d2:42:f1:cf:55:04:0f:06:5e:4b:a9:2a:96:
30:20:5a:d0:74:8b:82:ac:8d:fe:cb:a3:57:66:9f:44:da:ee:
fe:ce:a1:b2
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIegE27e85io0rZKRAN8nR6flnz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz
NTQzMjA2ODAeFw0yNTAyMDQxNzU3MjJaFw0yNjAyMDMxODAyMjJaMDMxMTAvBgNV
BAMTKDlEODU3OUJBNUM1MzY1RDc1MTc0QjU4MDc0MTZBRERENjVCNUQ4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTzDxAKAammpOk7Fb6cVYq1P7h
TG2YGsFAhJkPLNkTdXrwkeBvegrIuGtjn4iueNjT10ozNzO/+INikLxHjRgbfQ5G
T837Ojv8CvVt0G8xE92mlAaXKDTeAL4rXoiZfReeT3jeYtOWF/aY9PwbNxGkTEkI
nPL2pkeCAx47eJQTvExkuSEbhaejSksbMD+1pUIJ399FsZySQZ2bUwOyG9CYpvy6
KM+ddMmVeeHhdkGP5kML0V83A3esE+bhSwtReq2d/jChd3NGM58wBoDsfhkcBsIj
i+oPNCYp/6evot4mvWBOV6fqfo9ZKlHU4SQARU0j5m5XNzPcqkgsKAQ0W7ezAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUnYV5ulxTZddRdLWAdBat3WW12PkwHwYDVR0j
BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF
NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx
MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG
NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw
OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMyMzgzMDMzM2E2MzMzMzEzMDNhNjY2
NTMwMzAzYTNhMmYzMzM5MmQzNDM4MjAzZDNlMjAzMjMzMzIzNDM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYBKAPDEP4wDQYJKoZIhvcNAQELBQADggEBAFoCQSB/y2xg7rQWgJeewXO2w9ny
2yLVufZ7RxD1QzFtr/9kFi0nteqRx4da0bHbhUYq/TlNeiSpP+lOH7IH0KoIQlrZ
qrEPAjSnMZkfUy20vRoRnXK17F2kRDLDaC75gjys/cMA4DpwDdZwzzm5h1yp76qR
35VdF4nQcW7xNf5LxOQ/6wF2p2gf3mQnPOUuflqEs5jQIe2joKkf8seBRvTYyFHP
5a57cpVztKbvc22NKz6PSExXecWHGACbFMrIJIpiDE/qIr2JFDxqBTg4MCf++PvZ
8ctDpfIbtVJf0kLxz1UEDwZeS6kqljAgWtB0i4Ksjf7Lo1dmn0Ta7v7OobI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:22:06 2025 by rpki-client