Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa
File: 323830363a3430303a3a2f33352d3335203d3e20323730323137.roa (raw, json)
Hash identifier: PkMRVANLl0mT78Bn7bJX649ETsfO440vVRS0LYO/9iM=
Subject key identifier: 0A:CE:8B:0E:65:7C:1E:A3:E0:87:2C:C8:43:0C:91:DE:17:7D:92:23
Certificate issuer: /CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Certificate serial: 44415D64E04652399E8E6E9CB5F188E1511A2F04
Authority key identifier: D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa
Signing time: Tue 04 Feb 2025 18:54:36 +0000
ROA not before: Tue 04 Feb 2025 18:49:36 +0000
ROA not after: Tue 03 Feb 2026 18:54:36 +0000
asID: 270217
IP address blocks: 2806:400::/35 maxlen: 35
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 00:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:41:5d:64:e0:46:52:39:9e:8e:6e:9c:b5:f1:88:e1:51:1a:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Validity
Not Before: Feb 4 18:49:36 2025 GMT
Not After : Feb 3 18:54:36 2026 GMT
Subject: CN=0ACE8B0E657C1EA3E0872CC8430C91DE177D9223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:56:c7:bd:85:49:0a:a3:45:e6:ec:5d:9a:
dc:78:7d:b1:46:57:1a:6f:0a:da:ed:a2:88:55:d3:
27:5b:8e:73:4d:65:df:c0:88:c3:b9:05:4c:e9:21:
68:53:82:4e:63:47:54:33:0b:c9:d2:f5:0f:de:90:
ef:87:19:0d:b3:54:42:88:29:23:75:86:b9:59:02:
7d:b0:ea:36:07:7e:e9:80:c2:67:ed:d9:c0:40:b4:
17:9c:39:c6:a5:10:8c:69:b8:b9:25:97:62:77:3c:
15:f1:ee:bb:59:af:55:6b:8c:48:cc:40:f5:61:c7:
b7:74:f6:6c:6a:ec:ed:1d:22:f8:d4:1f:ee:39:ef:
85:59:c9:e0:fb:14:5a:c5:76:21:91:ba:d3:08:47:
f0:34:77:aa:33:a4:49:35:73:b1:87:f6:c7:57:46:
90:aa:de:e6:5e:0d:ae:e5:77:7d:42:dc:3a:4a:6c:
7c:fd:61:29:79:78:c5:b8:b7:63:03:0c:6a:bc:98:
d4:86:6b:3d:1a:19:d1:60:82:b6:08:0c:f0:28:4f:
8f:3c:f8:c4:b2:ac:ae:73:f2:a6:00:51:a2:68:d2:
5d:42:13:ec:07:a7:59:d8:10:a6:7a:e3:df:17:2a:
dd:19:f3:b0:55:09:85:e0:20:2c:21:ae:8e:b2:25:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:8B:0E:65:7C:1E:A3:E0:87:2C:C8:43:0C:91:DE:17:7D:92:23
X509v3 Authority Key Identifier:
keyid:D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a3a2f33352d3335203d3e20323730323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:400::/35
Signature Algorithm: sha256WithRSAEncryption
35:a0:a4:5f:16:e4:6c:78:28:e0:90:a5:f0:80:a5:8a:f4:d1:
f3:47:77:0a:a6:5b:aa:c4:bc:3f:f8:e3:c2:b3:1c:ab:dc:f3:
31:86:e7:8e:13:a7:54:36:7d:60:9a:73:cd:dd:c8:79:aa:81:
60:eb:6f:99:d5:c6:74:9d:10:ee:fa:1e:dd:07:a9:f4:26:5f:
dc:69:9e:85:06:71:1c:2e:a2:80:55:5b:81:83:52:bb:42:9f:
bd:8b:8e:96:c8:4d:1f:66:29:17:10:6e:a2:38:ad:68:f5:54:
23:13:06:c1:55:17:dd:73:be:8a:72:4f:52:6a:18:d8:56:1e:
18:09:52:2d:47:44:f9:27:09:28:aa:5f:6e:1b:01:26:d9:fa:
7b:b6:78:b4:59:1c:08:c6:2e:a2:40:1c:f3:1c:0d:f1:21:b9:
a0:f0:c4:bd:98:bd:cd:7d:9b:5f:63:fd:5f:69:0c:80:b0:11:
b4:be:67:6b:11:75:cd:ed:44:a7:2b:d6:83:c2:be:66:7b:47:
38:f7:17:30:bf:2a:cb:69:6d:8b:db:9a:13:3c:e9:77:c0:76:
b4:5d:ab:e0:95:a1:33:a7:d5:4c:56:03:9e:98:e3:f3:d6:51:
40:8a:da:c5:6f:f3:da:c9:c2:59:33:39:04:c6:34:67:5c:17:
73:41:b5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:42:51 2025 by rpki-client