Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/323830333a333932303a3a2f33322d3438203d3e20323639383338.roa
File: 323830333a333932303a3a2f33322d3438203d3e20323639383338.roa (raw, json)
Hash identifier: tBRXABbDgyeZN3qHRB4hhBplRIOCbBrH/ory+0BorjU=
Subject key identifier: C2:49:91:8C:4E:25:20:D8:CF:07:5D:64:AD:F2:F5:80:D8:7B:F7:BF
Certificate issuer: /CN=938F00AB707A673E33DEB078154945BAC29E6E67
Certificate serial: 153CEACF83A7A6C01BA7E6B67F779C408F0696BE
Authority key identifier: 93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/323830333a333932303a3a2f33322d3438203d3e20323639383338.roa
Signing time: Tue 04 Feb 2025 18:36:56 +0000
ROA not before: Tue 04 Feb 2025 18:31:56 +0000
ROA not after: Tue 03 Feb 2026 18:36:56 +0000
asID: 269838
IP address blocks: 2803:3920::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.crl
rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3c:ea:cf:83:a7:a6:c0:1b:a7:e6:b6:7f:77:9c:40:8f:06:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938F00AB707A673E33DEB078154945BAC29E6E67
Validity
Not Before: Feb 4 18:31:56 2025 GMT
Not After : Feb 3 18:36:56 2026 GMT
Subject: CN=C249918C4E2520D8CF075D64ADF2F580D87BF7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:29:b0:ad:77:6e:aa:0d:79:7e:17:ff:5b:
b3:81:ce:ec:26:08:0a:78:28:89:4c:ac:98:17:03:
65:a2:bd:9c:dc:5e:7e:f7:a7:78:48:fd:68:f5:9c:
a9:5c:cc:79:7c:fe:81:ca:8d:8a:c2:1f:99:73:f9:
65:cf:48:84:bb:4c:cc:81:52:a1:69:8a:13:14:a3:
bd:f0:49:ee:5b:3e:d3:37:24:c7:1e:70:27:ec:1b:
55:af:fe:e3:59:33:86:9c:d8:25:1a:d9:ad:eb:ec:
1a:ee:62:d9:0c:9a:b5:a7:28:ee:c3:38:f5:50:ba:
87:c5:b0:d1:59:02:ad:7e:9a:cb:0a:cb:e6:fb:a3:
e8:b7:29:87:61:cd:f1:c3:73:49:a2:42:c0:b3:92:
e2:8b:36:f2:d2:e5:6a:cd:83:1c:de:47:5a:73:fd:
04:23:82:56:bb:77:2a:0b:60:3c:7d:ba:d7:32:44:
d8:5e:98:f9:53:27:28:37:9e:ab:b7:78:70:9e:62:
ad:ed:d4:bc:41:ba:68:eb:c4:a4:ac:ca:54:74:c7:
74:76:e6:ed:ca:48:db:b5:8e:d1:e3:f2:79:c9:4c:
46:62:fe:7f:1c:e6:59:c4:46:58:c9:bd:70:c6:63:
7e:89:87:a9:a1:f6:19:cc:b4:3f:ce:98:01:37:56:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:91:8C:4E:25:20:D8:CF:07:5D:64:AD:F2:F5:80:D8:7B:F7:BF
X509v3 Authority Key Identifier:
keyid:93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/323830333a333932303a3a2f33322d3438203d3e20323639383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3920::/32
Signature Algorithm: sha256WithRSAEncryption
81:b7:3e:b4:78:0a:6f:8a:f6:dd:f1:94:5d:2e:0c:43:a9:1f:
e3:42:b3:e1:28:f5:91:35:28:ce:1d:7a:12:ba:f2:71:8f:9d:
64:43:7d:76:f8:8d:11:52:76:ec:40:a0:e0:3b:88:46:75:18:
c3:0c:38:1d:6c:46:af:be:32:83:73:19:3c:89:9c:c7:eb:80:
86:80:46:62:7b:43:39:7c:6a:5a:91:29:2f:28:d8:46:bb:a4:
65:79:1d:41:79:0f:87:00:ec:2c:0a:d5:f9:f7:74:9d:4a:82:
ad:c1:e1:fd:22:0c:25:70:6c:e0:ed:86:23:87:d2:66:97:df:
ee:16:c5:79:59:12:66:fe:b1:b0:d5:45:ad:16:4f:4c:48:a8:
f3:8f:41:6b:c0:fc:ec:bf:10:c4:60:20:a0:8b:9a:bb:ea:9d:
ad:98:29:6e:e2:7e:85:f2:fe:eb:09:e1:9b:1c:f9:58:af:48:
b5:97:a2:fd:fd:fb:e2:37:0c:75:76:d4:d7:78:f7:c6:e1:ec:
c8:9b:ce:20:9f:c5:0e:d5:7e:13:81:8f:b3:a3:d4:09:69:6a:
e4:23:85:54:03:c4:e8:d4:37:92:c4:51:36:15:82:54:c1:d6:
6d:5b:82:66:49:03:4d:0c:1f:4b:56:cd:f3:78:7e:80:f6:38:
0e:de:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:48 2025 by rpki-client