Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
File: 323830333a636231303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier: mk+8aoBC4p9hTaHCNbUHbGqYlmWlQ7ut1WMKUcmVQ4Q=
Subject key identifier: 95:09:E8:6A:39:AB:50:E3:DB:37:D2:17:F7:06:00:C1:AF:A3:C2:97
Certificate issuer: /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial: 3E4B79F07A27321A94AB7D5ED60CCCA268CFEE68
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
Signing time: Tue 04 Feb 2025 18:55:33 +0000
ROA not before: Tue 04 Feb 2025 18:50:33 +0000
ROA not after: Tue 03 Feb 2026 18:55:33 +0000
asID: 265688
IP address blocks: 2803:cb10::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4b:79:f0:7a:27:32:1a:94:ab:7d:5e:d6:0c:cc:a2:68:cf:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Validity
Not Before: Feb 4 18:50:33 2025 GMT
Not After : Feb 3 18:55:33 2026 GMT
Subject: CN=9509E86A39AB50E3DB37D217F70600C1AFA3C297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:b5:6c:34:e5:0f:b6:14:1d:f5:05:0e:9d:
c9:a2:b1:fb:18:7a:ab:56:e8:d1:d6:9a:55:68:f1:
a4:a0:a1:46:5c:84:c1:6d:bf:88:57:60:b9:5b:c6:
9d:c8:89:01:0f:6c:bc:51:bf:9c:d0:5f:b5:7b:e7:
b1:a3:00:ef:53:d9:8f:bb:7d:86:a6:f3:4e:05:54:
07:5b:f9:0b:71:68:4b:fa:a9:cb:92:6a:c1:81:92:
8b:d2:d0:05:bb:9c:c3:0f:62:ff:56:cc:d2:07:aa:
7f:e1:9f:68:a5:66:8e:02:79:7c:ec:bc:ac:f9:ed:
65:11:a0:14:5a:73:23:d6:eb:bd:9b:5c:f7:0e:a7:
0c:d5:0a:a5:6c:41:35:85:46:13:11:c6:22:0c:97:
eb:7b:1f:7d:46:4b:f9:6b:94:05:f6:d5:08:f3:99:
0b:50:9e:c0:2f:80:9b:c7:1c:ac:cc:c7:e6:a0:a0:
4d:25:8d:99:09:8a:ed:60:a2:d7:f2:96:56:e7:21:
bd:1d:eb:5e:c0:8f:ed:40:4e:ff:73:9f:d8:16:81:
dd:bb:44:95:fb:52:c0:97:69:9e:4c:56:c8:34:45:
e3:fd:ed:49:23:05:2d:c5:51:04:1b:7d:d4:3a:87:
3a:f1:be:82:66:64:ad:80:42:85:13:25:8d:ad:cb:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:E8:6A:39:AB:50:E3:DB:37:D2:17:F7:06:00:C1:AF:A3:C2:97
X509v3 Authority Key Identifier:
keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cb10::/32
Signature Algorithm: sha256WithRSAEncryption
07:91:e1:ff:38:4c:09:6b:c7:18:ac:15:e9:0f:78:5f:7f:b1:
05:ad:6c:86:8f:cb:92:21:04:9c:7e:c8:5c:ef:52:e2:e1:d6:
a8:df:18:87:c0:91:a5:b1:98:bf:dc:65:c1:fc:25:1f:64:5f:
0e:02:11:ac:e7:07:99:72:89:2f:dd:05:0c:2f:a3:c6:d3:74:
38:40:d1:04:f6:92:40:59:73:c8:1e:a4:b9:e3:af:ad:c7:38:
2f:05:66:74:be:93:26:d0:c6:ec:a6:fe:24:1f:50:3c:a7:57:
f5:c4:4f:73:e9:fb:cc:2e:72:ea:ef:de:92:e6:fc:35:1f:35:
5b:08:93:87:de:12:29:e2:c9:9d:e7:36:18:1d:c0:cc:7a:36:
ec:47:26:72:c5:0a:a6:92:aa:8f:53:ee:f0:95:85:f7:93:fe:
a2:77:b4:a4:7f:dc:e1:ca:3b:3a:5d:11:22:5d:0b:88:b2:9d:
dd:a9:58:47:f9:ed:78:ac:30:90:30:89:60:53:2b:ac:7b:09:
75:3e:38:3a:a1:f2:90:86:85:b0:53:e2:34:de:39:c3:56:44:
75:a0:e2:4f:a8:c5:c8:c6:12:41:79:4c:88:ff:40:7b:df:6c:
9a:07:2b:62:dc:93:10:17:07:b8:38:48:f7:97:d1:3d:aa:d3:
ff:63:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:08 2025 by rpki-client