Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa
File: 323830333a383731303a3a2f33322d3332203d3e20323732303935.roa (raw, json)
Hash identifier: Sk76CmIfDPMxF2yQ0NmyvHVvpjMr2XHl6RovN5UiB6Y=
Subject key identifier: 7E:C4:14:BB:18:BE:48:8F:86:7A:77:A3:B8:FD:1E:96:CA:02:23:7A
Certificate issuer: /CN=1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C
Certificate serial: 34BF86C3812D85ABA7E78B9D020936E2197E9EA3
Authority key identifier: 1B:96:6A:77:A4:0B:A7:6A:B1:30:28:0B:62:E4:FD:AF:DE:A7:DF:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa
Signing time: Wed 12 Feb 2025 03:00:00 +0000
ROA not before: Wed 12 Feb 2025 02:55:00 +0000
ROA not after: Wed 11 Feb 2026 03:00:00 +0000
asID: 272095
IP address blocks: 2803:8710::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.crl
rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bf:86:c3:81:2d:85:ab:a7:e7:8b:9d:02:09:36:e2:19:7e:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C
Validity
Not Before: Feb 12 02:55:00 2025 GMT
Not After : Feb 11 03:00:00 2026 GMT
Subject: CN=7EC414BB18BE488F867A77A3B8FD1E96CA02237A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:c2:66:81:60:80:c0:93:76:6c:36:ab:a1:
17:53:6d:07:c6:34:38:f6:72:a2:f2:eb:3d:6f:48:
32:36:0b:39:6a:92:ae:8f:b0:fd:e3:29:d1:56:8e:
ec:5c:04:f2:f4:72:ff:5b:29:a4:5e:02:ec:ca:66:
b3:f2:8b:f9:30:61:34:a3:a3:0d:17:e7:f2:99:3d:
04:5e:53:79:f1:51:88:3a:04:4b:8f:e7:49:28:65:
d7:cb:1a:71:f7:09:91:7b:85:9b:c9:1c:bf:ec:a6:
60:ef:a5:29:c4:bb:e8:08:03:0d:4e:b4:b0:11:92:
05:02:f1:3b:7d:4f:bd:57:7f:5e:cf:51:c3:11:0e:
30:c5:d9:3d:6b:14:b4:50:31:b6:4f:3c:6e:37:ae:
40:f6:9b:c2:d8:b3:ed:03:2f:df:1b:2d:c8:ef:58:
cd:88:15:ff:65:77:4e:ec:af:66:2f:94:38:8b:fc:
ef:e5:29:c9:00:fc:71:fc:0f:2c:46:21:99:af:1e:
11:2a:77:29:64:e6:c3:7d:8d:f9:fe:1c:e4:8b:66:
8e:06:6f:d1:01:d4:e4:e5:9d:eb:2c:c5:b0:fa:9f:
a2:fe:12:10:eb:a8:80:52:8d:27:bf:65:66:a4:53:
9c:30:2b:c7:c0:bc:2e:17:e3:e3:a4:49:30:ef:cc:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:14:BB:18:BE:48:8F:86:7A:77:A3:B8:FD:1E:96:CA:02:23:7A
X509v3 Authority Key Identifier:
keyid:1B:96:6A:77:A4:0B:A7:6A:B1:30:28:0B:62:E4:FD:AF:DE:A7:DF:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B966A77A40BA76AB130280B62E4FDAFDEA7DF1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0517548BD700E17CC87398351D2B7FDF7BB46B8F373B2857C41355A5BAB576B/0/323830333a383731303a3a2f33322d3332203d3e20323732303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8710::/32
Signature Algorithm: sha256WithRSAEncryption
b0:b2:6a:3b:59:29:4e:c6:16:9d:4e:1d:64:f6:d3:f3:43:6b:
55:cd:84:91:a4:2d:59:1f:ef:9b:49:71:82:6e:d1:77:f7:df:
cf:f3:b4:04:06:16:2b:85:dd:85:95:ea:17:2d:ac:3e:07:f7:
9a:3a:d9:19:5d:77:91:d9:87:2b:2b:f2:26:c7:2a:a3:fd:3a:
f6:a9:7c:25:8e:8e:ce:35:f5:4d:ee:7c:00:98:dc:f9:da:a4:
1b:20:0b:9a:47:f8:a3:f3:09:f8:82:b4:ed:9e:3f:fc:5a:7b:
a4:74:d7:25:3e:5b:06:b2:a2:44:3a:47:48:07:5c:88:5e:be:
f3:c1:2c:2f:92:14:d2:f3:8d:7d:8e:99:3e:04:3c:19:6a:04:
b3:11:a5:28:28:12:1a:64:cd:83:e8:1a:60:ad:63:a0:a1:ef:
df:66:4c:64:63:61:7e:5b:37:91:3b:c7:c5:9e:a9:fc:a1:06:
45:74:54:4d:b9:8f:72:fd:4c:42:3f:63:59:a1:02:a9:7a:62:
5d:63:f8:63:14:10:51:ad:43:54:4b:c2:61:50:f7:15:42:e4:
31:47:15:96:34:33:fb:b7:10:93:32:55:7a:d5:91:c2:db:a9:
18:0e:da:47:ce:da:88:78:f0:79:fb:90:11:47:56:0a:ef:58:
25:b1:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:21 2025 by rpki-client