Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a343030303a3a2f34302d3430203d3e203134353232.roa
File: 323830303a3961333a343030303a3a2f34302d3430203d3e203134353232.roa (raw, json)
Hash identifier: MqaOWPQqanb3J3kJeSxn1tLkC+RXSAapBUBHCRK7ie4=
Subject key identifier: EA:39:DE:DB:0A:9F:BE:62:0F:1C:91:69:BD:80:B1:83:A7:9E:CB:10
Certificate issuer: /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial: 130062D9A7A2FF57EBDE2E43D63BE709732CA95C
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a343030303a3a2f34302d3430203d3e203134353232.roa
Signing time: Tue 04 Feb 2025 20:08:45 +0000
ROA not before: Tue 04 Feb 2025 20:03:45 +0000
ROA not after: Tue 03 Feb 2026 20:08:45 +0000
asID: 14522
IP address blocks: 2800:9a3:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:00:62:d9:a7:a2:ff:57:eb:de:2e:43:d6:3b:e7:09:73:2c:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Validity
Not Before: Feb 4 20:03:45 2025 GMT
Not After : Feb 3 20:08:45 2026 GMT
Subject: CN=EA39DEDB0A9FBE620F1C9169BD80B183A79ECB10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:50:f0:64:0e:34:6f:91:ce:75:d1:f5:f3:
11:ff:de:9c:80:ed:50:d5:7a:79:ce:c3:e5:86:d4:
bc:64:03:85:83:65:5c:68:a4:f2:06:56:50:0e:6d:
d2:57:c2:63:2a:d8:ed:f5:f0:e5:39:03:83:3a:3e:
91:33:b1:e2:d1:8f:d9:23:3c:36:8c:61:04:8d:1d:
e8:46:57:b0:f6:39:51:b7:bc:21:3e:3d:9d:9e:fe:
d6:d5:ff:6c:cf:06:0c:9f:1f:25:dc:91:94:6e:c7:
a2:aa:a7:42:2d:52:44:06:e2:14:26:b1:47:e3:5f:
ba:2f:d5:6a:75:fb:0c:dd:14:37:59:f5:ef:e0:3b:
1b:2d:fc:42:52:2b:cb:ae:78:58:b7:19:f2:08:57:
ce:8d:6e:29:7e:0d:a0:6f:37:c4:ff:54:af:13:9d:
7d:c0:65:e3:be:9c:9a:28:58:f9:5f:3c:f6:97:67:
7b:aa:31:02:10:23:57:07:f7:94:6e:b2:e2:ac:0d:
ef:91:9b:b8:6d:b2:49:2d:67:2e:4d:d1:a4:86:6c:
4b:8e:76:62:6b:78:4c:bb:b7:c5:07:87:f8:1f:38:
d5:21:6a:32:04:ba:f6:91:d6:55:83:8d:33:64:46:
7c:ac:23:c7:b6:81:23:70:08:ec:d2:dc:87:c2:55:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:DE:DB:0A:9F:BE:62:0F:1C:91:69:BD:80:B1:83:A7:9E:CB:10
X509v3 Authority Key Identifier:
keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a343030303a3a2f34302d3430203d3e203134353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:9a3:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:16:38:1c:5b:a0:3d:d4:8c:b1:e7:df:c2:d0:43:90:42:be:
c2:bf:81:a7:bb:d9:ac:5e:9c:49:78:f3:df:b9:49:47:11:81:
9e:2c:97:d2:30:41:06:a4:4d:12:c3:ed:79:b3:49:0a:d7:f5:
ce:77:b1:7d:05:a2:7a:75:00:18:ac:99:ea:69:c3:df:d0:7b:
85:d8:14:25:fb:e3:25:d4:04:2f:c0:88:6b:30:19:bc:96:ee:
b0:3a:5f:15:c5:dc:24:4f:5f:d1:3c:b8:00:69:2f:17:4f:2a:
bd:48:75:e3:09:c6:19:b6:59:2b:68:19:30:3a:b3:5c:40:f2:
fd:90:2a:b3:dd:85:ba:09:5e:3f:3f:6e:d5:d8:38:dc:02:b7:
9c:82:91:f7:e6:07:be:fe:b1:b3:81:8e:e7:c5:46:08:31:f4:
93:53:06:ce:f9:66:65:07:3a:eb:c2:df:00:89:a8:ef:fd:68:
c0:46:3f:36:70:ec:cc:c9:e5:30:dd:a6:62:10:41:0a:54:3b:
7e:45:4c:3b:7b:a9:f2:e3:e4:ff:1a:23:ff:53:7c:bb:89:b9:
06:8b:9f:12:ed:ed:e2:e4:01:8f:c8:b5:f2:ea:34:e8:f3:80:
a6:3d:98:6b:35:74:85:d7:1d:85:1d:50:32:08:93:4e:39:14:
e9:be:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:28:04 2025 by rpki-client