Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133362e302f32342d3234203d3e20323733303031.roa
File: 34352e36352e3133362e302f32342d3234203d3e20323733303031.roa (raw, json)
Hash identifier: b7DpjCGZEaZ9Omk+ZjNj7GK1AtkkDTKqFV2//aR9yCk=
Subject key identifier: 45:6C:28:1B:A2:14:5F:56:84:67:3E:1D:74:F9:7F:80:88:37:BF:92
Certificate issuer: /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial: 0555A06681D3CD99DFF364BF9820FCB169C0DC76
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133362e302f32342d3234203d3e20323733303031.roa
Signing time: Tue 04 Feb 2025 17:59:00 +0000
ROA not before: Tue 04 Feb 2025 17:54:00 +0000
ROA not after: Tue 03 Feb 2026 17:59:00 +0000
asID: 273001
IP address blocks: 45.65.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 23:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:55:a0:66:81:d3:cd:99:df:f3:64:bf:98:20:fc:b1:69:c0:dc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Validity
Not Before: Feb 4 17:54:00 2025 GMT
Not After : Feb 3 17:59:00 2026 GMT
Subject: CN=456C281BA2145F5684673E1D74F97F808837BF92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:da:f8:80:cd:81:24:af:ff:43:18:9d:ec:
bf:56:7a:67:0e:26:76:9f:26:3f:18:7c:fd:f7:74:
dd:a1:e6:db:d8:8a:4f:d8:64:09:8c:36:e6:c3:5b:
2d:18:e6:44:df:6a:8b:9d:98:92:fe:7a:5b:44:c5:
7a:bd:a1:31:cd:29:f1:e5:e1:af:93:bd:fe:4b:28:
ed:77:52:24:52:95:d1:c3:bf:99:8c:05:71:5f:11:
6e:03:d1:61:61:8f:ab:b7:53:a6:bb:50:ab:75:d9:
b9:e9:bc:96:65:14:ef:82:11:ce:c0:2f:19:ff:20:
ae:74:91:40:05:e3:ed:4a:d9:a1:cf:56:11:a8:8c:
12:46:e1:17:29:88:ee:b1:53:2e:d8:a1:18:1a:a7:
99:9b:3c:05:38:38:a1:15:6f:2e:f2:52:7d:62:be:
c2:89:4d:6c:9e:61:6a:86:19:90:db:f6:b4:93:bb:
11:6f:17:09:a0:3c:87:4a:d1:0d:e7:36:af:ae:e8:
71:b5:f1:fd:fc:d3:84:cb:3a:ee:1f:8e:4f:41:2b:
e9:39:fa:19:1d:37:cf:fd:0b:40:8f:85:a0:e3:55:
e9:2e:2c:10:4c:ca:fb:88:4d:22:8e:2b:8f:b0:98:
f2:ef:5a:9f:d6:5f:43:69:4f:2c:f0:44:30:0e:99:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:28:1B:A2:14:5F:56:84:67:3E:1D:74:F9:7F:80:88:37:BF:92
X509v3 Authority Key Identifier:
keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133362e302f32342d3234203d3e20323733303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.136.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:e5:7e:50:b4:fc:eb:de:26:d2:86:6b:c6:d3:47:f6:24:
d4:fd:29:77:95:b1:00:ce:8f:b8:cb:f9:91:9d:74:34:94:52:
58:ea:fb:7a:8a:b3:e4:dd:96:94:4a:f0:b4:34:cd:f4:ff:8a:
a4:b0:ef:45:27:ce:9b:3f:b6:61:4a:e1:3d:10:47:41:2c:da:
b2:2d:f9:94:5c:68:4b:af:3a:c9:af:0a:be:f2:29:0b:2a:e1:
ad:a3:ef:d0:b0:77:f6:1c:40:90:1f:8b:6b:a3:ce:9a:ab:ca:
43:72:7d:c4:19:c6:b2:f1:51:d5:d1:1e:38:86:7f:13:99:2e:
bd:f4:1a:e6:5e:c9:5a:54:1d:24:cb:f7:c7:63:76:02:5a:88:
3a:0b:9b:ea:e8:a4:74:4f:e4:09:df:bd:f3:2d:50:90:f9:ee:
47:ce:ed:1e:17:71:29:c0:34:01:11:1f:ca:19:05:a4:09:5c:
c4:bf:2f:8b:1d:9d:14:3a:8f:b6:5b:2a:3f:19:15:19:e0:d2:
4e:6e:34:3a:16:b7:a2:b5:8e:c5:da:82:93:fd:67:ec:47:6a:
03:d5:a5:f2:98:e0:c8:59:de:a8:4a:8d:0d:3e:07:f1:2b:b9:
12:4c:f7:f1:26:cf:25:cd:af:b8:68:6c:23:ac:35:40:6e:02:
eb:85:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:41 2025 by rpki-client