Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
File: 323830333a346665303a3a2f33322d3336203d3e20323731373735.roa (raw, json)
Hash identifier: VzAEzeU8QFg3P272Movg3iUSNxVzSowf0sophIhcX4o=
Subject key identifier: 22:7D:46:A6:35:EB:61:DF:30:A0:DC:41:08:40:E5:3D:F0:26:4A:3C
Certificate issuer: /CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Certificate serial: 7AD6C5C4A361D87B521239894D387326032FF9
Authority key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
Signing time: Tue 04 Feb 2025 18:27:18 +0000
ROA not before: Tue 04 Feb 2025 18:22:18 +0000
ROA not after: Tue 03 Feb 2026 18:27:18 +0000
asID: 271775
IP address blocks: 2803:4fe0::/32 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d6:c5:c4:a3:61:d8:7b:52:12:39:89:4d:38:73:26:03:2f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Validity
Not Before: Feb 4 18:22:18 2025 GMT
Not After : Feb 3 18:27:18 2026 GMT
Subject: CN=227D46A635EB61DF30A0DC410840E53DF0264A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:56:9c:0a:7e:8d:97:ee:8e:6c:82:62:d4:
f4:8f:a1:0f:2e:b3:32:5b:a4:f3:b7:c7:0d:4d:3a:
f1:21:fb:55:a5:42:0f:05:ec:eb:ae:0b:ce:de:de:
bc:2e:58:dc:b3:53:ab:f8:67:f1:b0:f3:f0:12:f1:
53:ec:68:d9:bf:6c:d2:5a:60:cc:f1:17:4a:e4:5c:
2b:d1:08:93:91:e1:d1:ff:55:8c:ab:2a:6c:f9:82:
4f:02:03:b6:02:8c:82:44:95:80:2c:59:aa:5c:52:
f1:73:a1:dd:8b:62:ab:11:0f:1b:f4:c7:9a:a2:04:
ee:9f:51:65:cc:1c:e3:58:7f:e0:4e:0e:f0:56:9d:
e4:7d:df:91:79:4b:f2:cb:12:0c:c2:ad:2e:33:4f:
0f:9c:3d:f4:a6:2f:76:a7:cf:67:89:73:29:ed:77:
60:85:44:9e:25:86:ba:8d:07:b8:c5:12:57:c2:47:
1e:c9:af:72:bb:70:05:02:13:8f:64:d5:22:3d:d6:
bf:9a:94:52:6e:bf:48:18:4f:e8:fb:aa:a2:14:8a:
8e:e8:0a:45:69:a1:9d:17:06:3c:f2:b8:dd:d4:f3:
19:fb:fe:9a:31:6f:65:3d:d0:9b:48:17:56:7d:2e:
27:dd:ad:36:9b:02:42:ba:69:a1:a2:58:70:e9:6b:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:46:A6:35:EB:61:DF:30:A0:DC:41:08:40:E5:3D:F0:26:4A:3C
X509v3 Authority Key Identifier:
keyid:22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4fe0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:85:3b:0e:fe:b7:5c:7d:06:95:f0:8b:ce:99:8d:21:59:f2:
16:e7:e8:01:4d:40:06:70:a5:55:cb:b0:30:0a:48:ba:5c:df:
24:3f:07:8d:59:b5:05:90:b5:47:33:7e:2f:b8:ce:2f:48:68:
c9:60:38:57:f2:59:da:36:94:32:dd:23:f6:2b:46:10:f1:18:
7d:8f:07:ce:ee:8b:09:75:5d:1d:55:40:c8:10:95:92:f2:a6:
0e:00:f6:24:37:e3:c3:c8:54:60:6a:57:a4:0f:c3:aa:44:6b:
c3:ea:1f:3e:71:b1:fe:65:09:c5:20:bc:90:4d:c2:57:a6:7b:
e9:42:b0:5e:bf:76:4f:5d:42:73:e4:1a:d8:f2:14:b3:5b:49:
8d:9c:cc:4a:fd:83:46:6b:47:b6:5b:e5:1b:56:56:f6:af:5b:
f1:b8:c4:ab:0d:f4:6d:7c:04:0c:97:4a:ed:a5:54:4f:a2:58:
06:d7:47:ae:7c:55:d3:5e:d0:c9:b1:3f:a7:d5:c1:72:60:c6:
2b:4b:58:6f:7a:37:1a:da:d2:24:0e:99:bb:81:fb:10:c1:97:
ab:b8:57:18:d6:c4:ee:f8:ba:5c:b8:cb:4f:c1:8c:20:89:9c:
a3:95:87:b9:77:aa:86:5f:39:48:d2:bd:c3:b0:be:fa:e7:0d:
3d:37:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:46 2025 by rpki-client