Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3530303a3a2f34302d3430203d3e20323636363739.roa
File: 323830333a663932303a3530303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier: qpWcf0emFM2oI0+rsVh8Ckkgr/2LBD5Cd708fZc8G24=
Subject key identifier: 53:18:2C:C3:C0:33:14:B6:2A:F5:94:30:0F:62:F8:23:83:FF:89:88
Certificate issuer: /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial: 13BC172D0688264EC36BD14F68D7F362B7B03AD7
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3530303a3a2f34302d3430203d3e20323636363739.roa
Signing time: Wed 19 Feb 2025 04:15:02 +0000
ROA not before: Wed 19 Feb 2025 04:10:02 +0000
ROA not after: Wed 18 Feb 2026 04:15:02 +0000
asID: 266679
IP address blocks: 2803:f920:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bc:17:2d:06:88:26:4e:c3:6b:d1:4f:68:d7:f3:62:b7:b0:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
Validity
Not Before: Feb 19 04:10:02 2025 GMT
Not After : Feb 18 04:15:02 2026 GMT
Subject: CN=53182CC3C03314B62AF594300F62F82383FF8988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:56:e2:ca:8a:b7:fe:3e:92:66:4d:d6:88:
19:87:2e:89:52:47:00:99:24:8f:74:11:11:39:80:
f1:29:3b:29:d7:0e:85:8b:a0:36:f8:cd:d7:86:48:
3f:16:94:14:86:43:56:73:6a:51:16:fc:03:0a:d1:
02:99:0c:f4:91:da:d2:a0:e7:97:56:29:e3:d4:7f:
a1:75:84:b5:f5:54:ff:45:44:63:13:cf:d7:e1:56:
7d:3d:a2:8b:14:39:bf:a0:7e:1d:2d:2c:a1:63:73:
2a:33:1e:ee:ee:a7:e4:ed:b8:13:cb:00:58:14:18:
1d:23:c9:71:85:34:82:c6:a9:ac:9c:9c:dd:38:67:
6c:3a:f8:d7:37:c7:e9:93:1d:ce:c1:15:c7:a1:b9:
a9:46:74:45:63:52:a7:3c:19:fb:d6:c9:0d:f3:ad:
22:ff:5f:a3:fb:af:85:82:5c:b7:bd:f6:71:a8:ee:
be:bf:81:c5:77:6f:26:dd:b2:e1:2c:46:8f:f9:2f:
eb:7c:76:aa:bb:f2:b5:5d:5e:b2:74:41:b5:23:08:
c1:98:b8:1f:23:64:58:f6:e2:3f:cd:95:36:cc:a3:
37:bc:34:33:8c:37:ef:54:1f:7c:ce:0c:08:0d:76:
b5:0d:3f:fb:ed:98:44:e5:ac:08:d3:8b:1a:7a:4b:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:2C:C3:C0:33:14:B6:2A:F5:94:30:0F:62:F8:23:83:FF:89:88
X509v3 Authority Key Identifier:
keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3530303a3a2f34302d3430203d3e20323636363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f920:500::/40
Signature Algorithm: sha256WithRSAEncryption
6b:2a:ce:c2:fe:00:0d:99:e1:dd:72:7e:ab:8f:08:2c:82:1f:
62:28:26:fe:4d:0d:08:3f:71:8a:7f:f0:36:74:07:2a:5a:95:
9b:35:85:b5:1c:62:f9:7d:e1:a6:a5:14:c5:09:6b:b8:f4:88:
f7:9b:2a:c9:25:cb:3d:2a:1d:02:cf:3e:ae:7b:35:19:e7:02:
d6:da:72:af:6d:52:44:63:dc:fc:b8:c3:73:06:e2:0a:fe:21:
79:30:04:c6:2b:d0:7a:84:98:1d:a7:6b:5c:d6:0e:a9:06:d4:
ef:da:22:f8:e3:e5:00:60:ee:81:d6:1f:e9:91:ce:50:f4:98:
46:6d:c1:13:62:de:74:f6:d5:c5:3c:a3:b1:4d:31:8a:10:b6:
ab:ed:68:15:3b:a8:ae:df:32:34:67:8d:30:ce:82:97:cc:15:
08:a8:20:06:ab:97:77:85:79:66:be:06:de:b3:50:7d:f5:9b:
e9:7b:87:6a:63:ff:5e:2e:a0:c8:0b:89:80:23:2c:5f:77:06:
fe:a7:4e:a1:a2:ee:80:dd:79:2c:7f:5f:d2:d9:8a:09:78:98:
cb:a1:70:5c:54:53:a7:18:32:23:c9:22:98:71:b6:fe:66:89:
00:4f:33:2e:37:68:13:02:92:a1:75:ab:6c:58:72:eb:e7:f6:
a5:7f:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:46 2025 by rpki-client