Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/323830303a3661303a3a2f33322d3634203d3e203237393332.roa
File: 323830303a3661303a3a2f33322d3634203d3e203237393332.roa (raw, json)
Hash identifier: U6xnKoPuJUO0B0XhxDTo6tf/syyRrQI7Z5VlofQ3iLY=
Subject key identifier: 9C:8C:FB:80:CA:E9:62:62:B5:45:5B:5E:FC:42:8F:D5:A9:66:C9:29
Certificate issuer: /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial: 5B72A49584084B3A116546F4C16CB7B823D39824
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/323830303a3661303a3a2f33322d3634203d3e203237393332.roa
Signing time: Tue 04 Feb 2025 18:09:07 +0000
ROA not before: Tue 04 Feb 2025 18:04:07 +0000
ROA not after: Tue 03 Feb 2026 18:09:07 +0000
asID: 27932
IP address blocks: 2800:6a0::/32 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 08:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:72:a4:95:84:08:4b:3a:11:65:46:f4:c1:6c:b7:b8:23:d3:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Validity
Not Before: Feb 4 18:04:07 2025 GMT
Not After : Feb 3 18:09:07 2026 GMT
Subject: CN=9C8CFB80CAE96262B5455B5EFC428FD5A966C929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:20:36:6d:f3:4b:ae:49:ff:c5:b0:ad:ef:
97:5e:e3:df:46:8a:79:23:e8:dd:bc:f7:b5:ad:c7:
d1:38:20:f7:66:d5:9b:e6:78:f2:17:d0:92:76:6d:
f2:4f:b0:6c:10:fe:2b:29:d9:58:a5:ad:7e:6e:fc:
e5:a7:50:53:2c:7b:36:cd:ba:57:f1:64:85:7e:7a:
4b:58:47:53:cd:d5:e2:8c:35:a0:92:4b:b3:5c:f5:
2c:76:38:a2:0c:c4:f3:7c:68:16:8c:0d:9a:e2:c0:
ad:d5:d6:7c:3b:6b:de:41:59:82:67:1a:4c:dd:73:
37:e4:28:bd:5c:9c:3f:06:0a:f9:21:34:7b:bc:9c:
ef:42:41:27:18:0d:7a:6d:f4:49:dc:02:70:f9:14:
27:b7:95:ca:84:7b:d1:c7:c1:bc:ba:14:bc:2e:f9:
31:db:dd:43:50:9b:88:40:e8:4c:96:8e:e9:df:34:
57:38:25:f5:76:8e:44:c1:52:8c:2d:18:af:a1:20:
0c:3e:9d:79:f9:f1:cd:b3:53:d6:1f:70:64:f0:cd:
f0:8d:ca:f7:05:57:2d:2e:ba:50:67:91:da:9a:cf:
f3:3a:49:56:4d:ad:83:ee:3c:de:1b:a9:c6:4c:4a:
9f:c7:ee:f5:81:e9:09:e7:c7:a4:4b:0a:3e:31:cf:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:FB:80:CA:E9:62:62:B5:45:5B:5E:FC:42:8F:D5:A9:66:C9:29
X509v3 Authority Key Identifier:
keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/323830303a3661303a3a2f33322d3634203d3e203237393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:6a0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:c2:55:c7:4a:b8:82:1d:fb:90:17:e8:6f:02:ce:a4:65:ba:
23:77:eb:9b:43:74:e9:1d:8b:b9:6b:79:f9:59:84:b6:4e:62:
09:f7:37:68:ce:97:a4:3f:f3:48:a7:14:2c:72:a0:79:e1:dc:
74:3f:16:28:64:9c:24:0a:e7:82:55:66:d5:23:b4:a5:e8:db:
0c:5d:7a:e0:0d:3a:13:da:7d:9d:5e:e9:c1:7d:d7:26:f0:f4:
52:84:09:b1:f7:d7:9d:6a:4b:29:da:57:b2:5c:eb:bc:78:a6:
ee:47:8a:b8:00:db:a3:25:78:24:b4:d7:ae:f3:f0:cf:04:82:
2a:14:61:b2:67:d3:d7:c8:e5:a9:07:6f:f8:96:79:b5:84:70:
c0:05:44:9d:19:a1:0b:32:e9:40:8f:72:2d:f4:b9:ab:8c:1f:
5c:81:9f:53:d2:94:31:98:50:37:a7:5d:25:f0:aa:68:08:a6:
8b:f1:93:38:8f:14:45:9c:0e:c6:0b:9d:b8:af:a0:29:7f:34:
7a:fb:21:36:dd:cf:49:34:db:5e:10:53:51:f6:75:fa:86:78:
a6:3f:53:4c:cd:20:79:4a:75:d1:29:82:4d:26:dc:ab:6f:8d:
ef:d2:a3:f1:e8:64:78:c6:f5:ea:0d:71:32:bf:66:0b:5c:48:
86:5d:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:08:51 2025 by rpki-client