Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa
File: 323830333a646165303a3a2f33322d3438203d3e20323639393433.roa (raw, json)
Hash identifier: 4c5vVk7G4scjdHcarPgRHNWlkmEG8HbwN8yzUGn+eus=
Subject key identifier: B6:42:5A:10:C6:28:FD:48:EE:66:AF:F0:9D:A9:0D:FF:73:9A:21:F3
Certificate issuer: /CN=2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6
Certificate serial: 12BB1319ED60DF04798453DD90D369834096EC86
Authority key identifier: 2C:77:F3:25:F2:D7:DD:23:DD:BC:32:FB:E7:C8:B6:76:F7:90:2B:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa
Signing time: Tue 04 Feb 2025 18:31:00 +0000
ROA not before: Tue 04 Feb 2025 18:26:00 +0000
ROA not after: Tue 03 Feb 2026 18:31:00 +0000
asID: 269943
IP address blocks: 2803:dae0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.crl
rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 06:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bb:13:19:ed:60:df:04:79:84:53:dd:90:d3:69:83:40:96:ec:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6
Validity
Not Before: Feb 4 18:26:00 2025 GMT
Not After : Feb 3 18:31:00 2026 GMT
Subject: CN=B6425A10C628FD48EE66AFF09DA90DFF739A21F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:8a:b2:4b:c0:40:15:77:f5:94:c5:06:47:
13:82:4f:3d:db:f3:32:56:b8:8f:62:e1:3b:8f:d6:
32:43:9d:9e:10:ea:2f:33:f3:d7:72:ef:4d:07:08:
ff:2b:e4:80:87:08:54:ef:1e:59:fa:b8:6c:bd:ea:
f2:13:2f:e0:23:c2:b2:df:c4:56:11:67:60:01:23:
c6:05:38:6c:49:43:0b:ac:b6:8e:ef:88:85:19:7f:
50:3e:d0:bf:af:65:f3:ea:1b:ec:b3:39:e7:8e:13:
bd:60:3e:6a:2f:30:0f:5d:ca:65:d1:b5:2e:bf:8e:
24:60:b0:16:36:2b:d2:3c:ba:a6:51:44:cd:f8:4a:
1c:35:40:b0:85:c1:36:46:f9:d3:d6:bb:2d:a4:71:
56:46:2b:d5:74:9f:e7:3b:88:61:a8:9f:a1:54:b8:
18:43:5f:f4:83:ab:96:f5:6f:41:6a:bd:c7:6b:83:
63:9d:6f:42:63:73:6b:1b:30:6c:91:ef:07:3d:84:
9e:73:ca:9e:65:d8:7a:71:56:69:f8:99:0b:3b:91:
61:1b:c1:43:30:df:83:39:83:81:76:d7:0e:24:b4:
7f:9d:32:f5:2f:65:6b:22:b4:4d:a4:8b:e3:1b:3d:
10:de:8d:0f:38:13:a0:82:de:e0:4c:87:e0:98:7e:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:5A:10:C6:28:FD:48:EE:66:AF:F0:9D:A9:0D:FF:73:9A:21:F3
X509v3 Authority Key Identifier:
keyid:2C:77:F3:25:F2:D7:DD:23:DD:BC:32:FB:E7:C8:B6:76:F7:90:2B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C77F325F2D7DD23DDBC32FBE7C8B676F7902BC6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4EF079256E3658C084DA3B0F6EEC5E581FC3B42732B18EF8D3347D0A13A7052/0/323830333a646165303a3a2f33322d3438203d3e20323639393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:dae0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:f2:a9:4c:15:59:b8:36:8d:3f:ef:19:14:1e:35:0e:db:23:
ad:06:c4:3f:b9:59:51:83:3a:f3:57:a0:35:9f:8f:b4:2b:ef:
ae:d5:07:37:1c:b8:a0:2d:d3:55:9a:16:1e:e2:18:04:78:7d:
ac:db:51:f0:c6:46:35:db:57:64:59:95:0d:6e:a8:6b:4e:35:
29:55:37:94:ec:e0:2f:b5:71:0f:77:88:59:db:71:c7:7d:a2:
59:c7:27:e1:61:5e:ed:cb:2e:12:e4:24:bb:f0:75:9a:71:42:
b3:1c:0a:79:cf:85:30:ff:36:87:95:a4:05:5c:61:58:27:9d:
71:ef:3e:e5:b6:6e:e1:f9:5e:ca:11:a4:11:17:19:de:3f:73:
0c:21:47:cf:b6:3d:77:54:ec:e3:e5:73:9e:71:29:28:99:19:
7b:65:9f:6d:74:7a:85:21:96:28:c6:01:2e:98:a9:fc:0a:2a:
cb:70:72:b3:c0:c7:b9:43:a1:9a:c0:bd:08:5e:ce:81:67:f3:
65:d8:8e:cd:b4:55:99:af:de:8c:72:3e:13:39:01:65:0c:87:
60:1e:bf:e8:fe:81:34:fe:54:a9:66:12:69:58:5e:75:2f:bc:
94:dc:0c:0f:fc:ae:fe:cf:3e:58:83:56:e0:41:d9:23:c5:92:
bd:a7:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:57 2025 by rpki-client