Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/323830333a626565303a3a2f33322d3438203d3e20323639393839.roa
File: 323830333a626565303a3a2f33322d3438203d3e20323639393839.roa (raw, json)
Hash identifier: fx4q7NFT5QlSStSy3ebmKvMJx5SyahRji9++cZ30+UU=
Subject key identifier: 2A:CF:62:08:0C:F1:3F:ED:22:3E:33:60:33:39:11:49:ED:D8:5B:26
Certificate issuer: /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial: 1D2F055E31BB19B611656BC763D172443969E3AF
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/323830333a626565303a3a2f33322d3438203d3e20323639393839.roa
Signing time: Tue 04 Feb 2025 18:08:37 +0000
ROA not before: Tue 04 Feb 2025 18:03:37 +0000
ROA not after: Tue 03 Feb 2026 18:08:37 +0000
asID: 269989
IP address blocks: 2803:bee0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2f:05:5e:31:bb:19:b6:11:65:6b:c7:63:d1:72:44:39:69:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Validity
Not Before: Feb 4 18:03:37 2025 GMT
Not After : Feb 3 18:08:37 2026 GMT
Subject: CN=2ACF62080CF13FED223E336033391149EDD85B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:98:ce:43:a8:b9:c7:b9:3c:01:22:38:e9:
73:4c:70:9f:52:71:d2:bf:72:cf:34:de:eb:45:8a:
3c:4a:4a:78:91:3f:b1:76:c6:2f:79:c6:b1:58:7b:
85:42:06:0e:1c:94:e6:01:4e:42:18:28:79:49:09:
48:1b:0a:00:d5:57:36:1c:c5:42:a4:02:ac:ec:6a:
82:6a:ec:6d:07:38:be:8e:95:df:36:a3:11:82:bd:
bd:91:1a:5d:0c:8c:bc:71:d4:14:fe:d8:b6:76:eb:
d0:a0:9d:5e:30:6a:4f:df:98:bd:4a:46:62:d3:51:
46:c0:dd:b9:ef:19:c8:4e:4b:8b:31:4e:34:5d:3f:
e1:9a:f0:ae:08:04:08:52:69:ca:fc:b1:d0:39:a6:
fd:6b:3b:5d:14:a9:81:0f:17:35:91:16:04:5d:85:
c1:2b:90:fe:49:94:2f:f3:fb:a6:54:b9:33:50:6d:
dc:07:d8:70:a3:28:f0:d5:8c:0a:72:87:c0:5c:0a:
3d:e6:e3:1e:50:49:4e:b5:be:76:6b:0c:f5:fd:3d:
cc:7e:09:a3:b2:80:b9:8c:89:da:15:c7:04:70:e4:
15:39:0e:51:90:2d:e1:89:f5:d0:8c:e2:0d:07:58:
9c:ee:1f:87:39:cd:30:9f:3b:50:20:f4:a5:95:26:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CF:62:08:0C:F1:3F:ED:22:3E:33:60:33:39:11:49:ED:D8:5B:26
X509v3 Authority Key Identifier:
keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/323830333a626565303a3a2f33322d3438203d3e20323639393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:bee0::/32
Signature Algorithm: sha256WithRSAEncryption
14:97:03:4c:88:16:2c:d7:33:0b:f1:b1:4c:fe:4e:e4:bb:4e:
16:af:99:0c:ef:a9:6e:f6:99:50:34:0a:ed:04:9d:cd:5c:97:
90:f2:41:74:1f:0d:08:1b:f0:e1:bc:c6:98:66:f8:a9:5f:c4:
e3:d5:6d:35:23:4b:a1:a8:dd:36:f8:ef:95:20:99:a2:03:5f:
ba:14:2e:28:ef:9b:1e:9f:bc:09:a7:88:24:89:01:2f:e8:a7:
cd:73:42:d6:b5:e9:3f:f4:0a:ab:b0:83:0b:a5:99:b6:8a:06:
e1:ca:b7:ac:ce:d5:f4:9a:83:9b:eb:63:16:58:d3:63:d8:4d:
ef:39:fd:7e:4c:03:35:5f:67:24:b4:ca:06:5e:60:2f:15:7e:
1a:10:13:49:b5:4f:cf:b8:f2:f8:f8:c5:e6:ad:ab:81:8f:db:
13:d3:e6:21:db:74:ba:36:1d:a1:68:98:30:eb:4a:67:c8:f0:
48:30:30:74:2e:52:75:eb:e2:49:1d:45:41:e5:5f:d2:1d:7a:
31:6f:40:47:f1:3d:37:5f:8d:bf:7c:68:f0:d0:3b:28:b6:09:
f7:b1:23:8d:f1:0a:e2:a4:f5:e0:99:30:61:90:b2:ec:86:b0:
97:57:32:23:a9:2d:5f:e8:89:08:5d:ba:f6:8f:18:4b:e7:68:
6b:2b:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:13:47 2025 by rpki-client