Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a613a3a2f34382d3438203d3e20323733313133.roa
File: 323830333a363835303a613a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier: 8Oojthprj6F5IoDA2UNClosvcpGr8FxwXimHppKTZoI=
Subject key identifier: 7A:E2:47:EB:75:D0:76:37:A3:1F:C1:CE:67:A4:AC:84:68:80:E6:32
Certificate issuer: /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial: 709D89B4679227EEBAA90ACB79D572009DA230FA
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a613a3a2f34382d3438203d3e20323733313133.roa
Signing time: Tue 04 Feb 2025 18:29:17 +0000
ROA not before: Tue 04 Feb 2025 18:24:17 +0000
ROA not after: Tue 03 Feb 2026 18:29:17 +0000
asID: 273113
IP address blocks: 2803:6850:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 30 Apr 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9d:89:b4:67:92:27:ee:ba:a9:0a:cb:79:d5:72:00:9d:a2:30:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Validity
Not Before: Feb 4 18:24:17 2025 GMT
Not After : Feb 3 18:29:17 2026 GMT
Subject: CN=7AE247EB75D07637A31FC1CE67A4AC846880E632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0c:39:88:66:b4:4d:3b:14:30:5b:fb:21:3c:
99:a5:1a:66:1e:c4:90:b6:54:3d:ee:58:73:b3:11:
69:b8:9e:75:f6:a1:f6:e4:49:9b:a4:00:82:3d:bf:
09:dd:23:86:b4:7b:8f:95:62:a2:92:c5:26:e9:26:
db:af:3c:8e:be:45:3d:0d:d5:8f:18:6b:ec:00:61:
e5:fd:2a:5e:6c:85:ab:14:ab:13:47:24:d0:15:6f:
c4:cc:93:40:b8:1c:7e:a6:8d:1f:13:5b:fa:33:f0:
c4:ee:cd:66:73:a4:c2:f5:f2:c3:55:17:af:1d:81:
21:b2:7b:76:7c:ea:7c:a0:57:69:b8:bb:df:76:f1:
ae:97:d7:32:e5:d8:59:64:2c:09:4e:aa:85:4e:51:
3d:87:fc:fd:be:cc:94:17:59:4e:39:6b:73:ad:f3:
4f:ff:45:9a:16:f6:ae:8e:a2:86:1a:f1:46:e0:ee:
7a:38:dd:85:ec:dd:5d:bc:11:44:15:3a:47:56:a4:
e5:7b:61:00:01:1d:59:fd:c7:2f:62:51:b9:42:15:
90:4b:43:16:66:38:0b:89:2d:4e:ee:c4:64:f7:af:
0c:68:6e:0e:66:4b:a9:af:e8:32:bc:75:a2:b9:1f:
3a:e5:a7:25:64:80:8a:f9:7c:0b:0a:6e:97:e8:c2:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:47:EB:75:D0:76:37:A3:1F:C1:CE:67:A4:AC:84:68:80:E6:32
X509v3 Authority Key Identifier:
keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a613a3a2f34382d3438203d3e20323733313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6850:a::/48
Signature Algorithm: sha256WithRSAEncryption
0f:57:86:84:7b:2c:9e:28:cf:b6:d0:16:6e:d5:f6:7a:09:ed:
ef:78:9c:02:ab:3d:80:63:ce:45:ac:33:f1:75:0f:b0:73:15:
77:e5:26:e7:be:4c:89:0e:b8:7b:a0:c5:f0:17:95:e9:aa:c7:
dc:0b:78:52:24:6c:6a:a9:1d:e8:60:33:77:74:f7:75:f8:17:
4f:bc:7b:37:13:52:0b:a0:80:f1:4b:02:39:a7:4d:b8:f2:fb:
3a:f9:7d:3b:34:a9:f3:07:d6:a1:2b:d5:50:50:dc:a8:f3:4e:
3a:b8:41:b1:39:53:dd:47:6a:50:17:7e:e2:7c:05:b0:97:88:
86:eb:22:3c:ce:d1:a5:ae:44:dc:4b:44:b2:92:b4:e8:c1:77:
14:a2:e9:12:a1:58:ba:db:51:91:8b:24:de:39:93:e6:9f:3a:
90:f9:32:fc:6e:50:63:e7:45:3d:29:02:f8:ac:03:55:cf:03:
0e:a7:4e:2b:fd:82:75:79:42:3b:93:cb:4f:ed:82:9a:ef:b6:
ce:d1:df:42:51:2e:13:a4:68:69:ef:a0:29:49:50:11:4f:92:
41:f0:7a:5b:30:26:7a:be:5b:1f:d9:ce:33:58:e7:35:6a:e4:
26:c2:e0:df:c6:c7:6c:d1:8a:39:46:3a:da:a2:bf:9f:ee:ef:
bb:b5:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:37:41 2025 by rpki-client