Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa
File: 323830333a646132303a3a2f33322d3438203d3e20323635383535.roa (raw, json)
Hash identifier: iTEEXimOih4pNZLBydbqGSiA3MM1TyUjgxOKzRBzJkk=
Subject key identifier: 99:0F:11:6E:72:EF:24:AA:B4:77:E8:AC:B0:56:40:34:91:95:9E:F6
Certificate issuer: /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial: 3F67C9E967361DCE66E793D748AB34F62450A2F0
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa
Signing time: Tue 04 Feb 2025 18:05:45 +0000
ROA not before: Tue 04 Feb 2025 18:00:45 +0000
ROA not after: Tue 03 Feb 2026 18:05:45 +0000
asID: 265855
IP address blocks: 2803:da20::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:67:c9:e9:67:36:1d:ce:66:e7:93:d7:48:ab:34:f6:24:50:a2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
Validity
Not Before: Feb 4 18:00:45 2025 GMT
Not After : Feb 3 18:05:45 2026 GMT
Subject: CN=990F116E72EF24AAB477E8ACB056403491959EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:c8:20:60:79:f3:79:b7:60:bd:11:67:84:
f6:09:43:92:32:83:f2:07:d4:b0:bf:50:56:e4:b2:
40:7b:4e:6d:c9:8a:fb:45:18:7b:57:e0:5d:fe:cd:
c2:f9:94:58:ce:1d:b6:4a:77:4b:b2:9c:30:d4:be:
fc:5f:26:61:be:68:8a:e9:87:dc:87:40:67:a6:2c:
b6:f3:a6:5d:33:96:08:14:73:44:aa:1f:0f:3d:49:
00:eb:24:f4:71:e2:eb:b4:bc:71:ef:5b:0c:e6:aa:
90:8a:b6:c1:da:42:01:78:5c:90:12:45:bf:86:9e:
63:4c:28:32:3a:d0:93:75:94:a7:c6:83:a2:33:62:
08:f6:b9:db:bf:f9:98:06:6f:2d:77:06:f9:9d:0e:
bc:9c:9a:98:01:31:7c:8b:05:25:7d:2d:2c:ac:54:
68:f6:8c:85:6b:94:f1:81:9c:c2:15:90:78:8f:ff:
c5:b3:22:8f:6b:10:ae:bd:11:c7:c4:cb:be:1b:b7:
27:f8:a4:07:fc:b7:d8:7c:ad:2f:ae:81:ad:94:23:
de:48:b1:0e:22:d8:56:38:f5:ba:b2:2f:b6:9e:3e:
f9:0c:8c:28:9b:3f:6a:c9:ef:75:62:6d:63:3e:bd:
e3:de:2e:af:68:cc:3a:6e:49:a8:43:a4:99:01:5b:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:11:6E:72:EF:24:AA:B4:77:E8:AC:B0:56:40:34:91:95:9E:F6
X509v3 Authority Key Identifier:
keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:da20::/32
Signature Algorithm: sha256WithRSAEncryption
1a:c4:44:d4:da:a5:68:14:43:2c:1c:31:51:fa:f7:d0:e3:f8:
79:6b:1f:0d:00:56:53:4e:21:91:58:75:d6:91:22:54:c4:2b:
fe:a2:58:e5:7e:93:05:72:4d:6f:be:3a:9c:c1:57:6f:cb:ff:
86:07:02:03:25:8a:86:d1:0f:13:00:71:5c:eb:c6:c4:70:24:
d7:03:1c:36:99:4d:16:b5:28:58:ef:47:75:c7:ae:cd:6c:8f:
6d:00:f9:c9:da:6d:03:d1:47:a9:3a:3b:c9:3c:32:66:c0:c4:
c4:2a:df:6f:20:db:84:a8:fc:4c:5d:bb:0b:3a:c9:81:b8:5b:
88:8c:04:ea:a3:a5:21:b7:c4:48:b5:23:af:8c:52:81:b6:46:
b7:f3:2a:70:9a:a1:1a:b1:e3:50:01:2c:da:6d:31:12:17:ec:
35:3e:17:65:22:2f:e1:20:f1:64:11:71:2c:cb:76:4b:f3:1b:
6b:8d:be:9d:c8:9d:7a:3a:eb:84:a3:f7:42:41:a7:a0:b8:34:
12:47:57:eb:f6:2f:ca:c2:fa:61:3a:0b:71:5e:48:e4:26:ac:
b5:d0:3e:d7:20:c5:c6:f9:6d:be:c3:5e:ec:9f:fa:50:80:54:
0f:65:ee:ba:15:d6:44:6d:e6:c0:79:d1:ee:a5:d4:c7:92:cf:
d5:87:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:46 2025 by rpki-client