Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323232303a3a2f34332d3634203d3e203634313230.roa
File: 323830333a663038303a323232303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier: kgxP8GBlOAXsba6YLukkEd4Ok+ixWdgdSFHZiOihsI4=
Subject key identifier: AE:DE:4A:F2:8C:46:B1:27:8D:C8:0A:99:37:EC:71:08:34:AA:97:E5
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 277ECACAA912F96B87DFD7F27C9E49DC62698490
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323232303a3a2f34332d3634203d3e203634313230.roa
Signing time: Thu 20 Feb 2025 13:50:00 +0000
ROA not before: Thu 20 Feb 2025 13:45:00 +0000
ROA not after: Thu 19 Feb 2026 13:50:00 +0000
asID: 64120
IP address blocks: 2803:f080:2220::/43 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 17:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7e:ca:ca:a9:12:f9:6b:87:df:d7:f2:7c:9e:49:dc:62:69:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Feb 20 13:45:00 2025 GMT
Not After : Feb 19 13:50:00 2026 GMT
Subject: CN=AEDE4AF28C46B1278DC80A9937EC710834AA97E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:72:00:68:f6:eb:e1:7f:20:99:51:08:29:
74:bd:ac:23:f7:5a:e9:55:e2:ce:14:0c:a1:74:97:
f8:38:cd:1c:c0:16:ac:5c:8e:81:0f:f5:f8:ea:de:
67:08:0d:58:32:be:3d:e6:93:ad:75:7c:ab:b7:f1:
28:08:56:f0:b0:e5:19:29:9c:26:93:cf:39:5e:dd:
73:92:ed:d5:dc:e4:fc:76:ad:2a:66:ce:93:9d:4e:
eb:16:b1:fc:56:28:b0:a7:45:09:d4:42:88:b8:0a:
d8:0c:c7:8f:77:89:79:1d:fa:cc:b7:51:a1:22:9a:
8a:1a:c2:f2:28:26:14:80:e4:98:9c:1b:e6:18:f3:
f1:2c:7e:09:ce:15:80:1f:e0:35:48:cd:51:65:49:
eb:51:80:ca:93:b5:5d:ae:e8:9c:4b:3d:57:2c:42:
9e:ae:41:c8:74:3d:e3:c1:7f:ed:52:b8:2c:3c:ba:
dd:c2:af:7f:14:c6:d5:27:34:53:22:8e:73:46:55:
e2:95:9f:69:b2:3e:f5:25:dc:6d:65:76:98:8e:5a:
52:e6:37:6c:32:51:b8:3c:2b:b8:1c:27:b0:31:0c:
6b:e7:21:ab:b9:56:ba:15:3e:41:a4:74:ba:27:f7:
60:70:e6:88:a3:db:20:ed:d2:84:89:87:90:c3:d2:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:4A:F2:8C:46:B1:27:8D:C8:0A:99:37:EC:71:08:34:AA:97:E5
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323232303a3a2f34332d3634203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:2220::/43
Signature Algorithm: sha256WithRSAEncryption
58:db:93:56:0d:63:02:eb:78:b4:a9:f8:93:d3:e3:39:3a:12:
76:0e:7d:61:7b:4b:a3:64:68:4e:12:19:6b:f2:17:49:c7:76:
96:32:97:27:f0:6d:ac:68:08:0e:d1:b0:0a:8f:ae:58:8d:f5:
53:4b:65:8a:09:0a:8b:41:24:71:1b:ca:4a:ee:02:1f:c7:56:
1d:a8:1b:28:96:83:a0:14:0e:80:57:8b:e0:8f:2e:57:bd:2c:
4c:8b:67:1b:bb:ec:88:58:c2:b9:d2:ab:96:81:32:ab:90:25:
f0:3e:48:8d:d3:b7:e8:02:09:b5:e6:ec:70:ac:45:b1:5e:3d:
6b:80:6c:bb:7a:a5:1e:db:05:fd:57:9c:b9:39:e2:53:87:0b:
46:ef:5c:e8:9f:38:63:41:ab:bb:b7:12:13:c8:a6:e1:da:2a:
c7:a3:c1:a9:1e:94:f4:bd:f9:51:44:8a:21:6d:b7:14:6c:d1:
92:83:f6:fd:39:00:05:38:87:02:d5:00:1b:67:a5:59:2d:73:
92:32:35:b7:14:fc:cb:40:0d:ef:b9:fd:d5:2d:98:c8:7d:45:
4f:83:f7:cc:9b:e5:25:e6:54:9d:93:74:de:60:c4:3c:f7:9d:
b7:a4:8f:5b:94:93:9f:9a:30:20:81:3d:25:39:d4:1a:74:47:
69:2c:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:37:37 2025 by rpki-client