Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa
File: 323830303a6337303a3a2f33322d3438203d3e203233323031.roa (raw, json)
Hash identifier: MoxFn0plJNiWWgW4cQtb0JdImXxHlOWK2LxKSr0fDTM=
Subject key identifier: 5A:36:26:5D:63:C0:7B:8D:C1:F5:13:C0:32:B9:9A:EC:A5:D1:E1:C3
Certificate issuer: /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial: 2DF67FD3CAB0EDA511302AAE6B17A929B52C4BE7
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa
Signing time: Tue 04 Feb 2025 18:40:30 +0000
ROA not before: Tue 04 Feb 2025 18:35:30 +0000
ROA not after: Tue 03 Feb 2026 18:40:30 +0000
asID: 23201
IP address blocks: 2800:c70::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f6:7f:d3:ca:b0:ed:a5:11:30:2a:ae:6b:17:a9:29:b5:2c:4b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Validity
Not Before: Feb 4 18:35:30 2025 GMT
Not After : Feb 3 18:40:30 2026 GMT
Subject: CN=5A36265D63C07B8DC1F513C032B99AECA5D1E1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:a4:ce:d7:75:9e:ad:fa:bb:cc:3b:2c:cc:
39:23:f8:0f:1f:5d:43:1d:d5:60:38:ca:b3:4e:fe:
ea:b7:4c:d0:32:80:16:75:bf:a0:69:da:12:7c:d3:
8c:99:fd:ff:68:d5:e8:68:a4:2b:d9:a7:88:a9:69:
73:30:ab:b6:4d:c0:63:24:30:7d:7e:8c:d1:a8:43:
6e:10:be:46:df:90:28:50:20:f0:17:c7:27:fb:e6:
1c:70:cb:d9:06:37:d2:6e:b3:27:d0:24:8a:b7:73:
5a:ed:43:86:da:1f:7e:0f:16:ac:6d:0a:13:9a:bb:
2a:a3:75:df:d4:9b:c4:81:39:cf:7a:47:3e:0f:54:
f6:98:30:db:c9:a7:01:c8:f5:a0:84:14:9b:4e:28:
b1:c8:30:82:79:2d:ef:4c:56:bd:c6:65:14:fc:e4:
5b:9e:94:91:9c:87:94:eb:7d:2f:5f:7f:a9:7a:85:
de:7f:2f:4a:5e:7a:30:83:4a:ab:5c:4e:f0:cf:5a:
23:4f:c4:df:3d:bf:cd:33:69:d6:26:ed:c1:4f:2e:
c3:6a:f8:f3:99:c6:60:26:37:f6:b2:4b:43:90:94:
10:00:17:ba:4a:bd:df:93:26:11:a3:79:f3:32:67:
5a:12:f6:c6:ff:90:d5:8c:a7:77:f0:e7:8a:59:b6:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:26:5D:63:C0:7B:8D:C1:F5:13:C0:32:B9:9A:EC:A5:D1:E1:C3
X509v3 Authority Key Identifier:
keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:c70::/32
Signature Algorithm: sha256WithRSAEncryption
35:e9:b3:70:b4:2c:49:33:89:40:44:10:ee:4e:f5:43:fd:1e:
35:82:a6:68:4a:0e:52:cf:59:25:a7:b4:66:93:b1:26:0c:39:
11:17:20:a3:89:56:94:69:25:38:51:46:f5:70:33:2b:6a:10:
5f:80:ca:60:9f:71:51:1a:e8:73:79:60:51:8f:e5:05:8f:bb:
35:d2:51:ff:35:44:95:e1:ce:38:05:8a:f2:8f:a4:b3:a6:26:
0d:87:f0:5e:05:64:41:74:9b:b6:f6:f2:e4:27:8c:fa:98:54:
0c:3f:f1:2b:c4:71:22:93:cd:27:ae:df:30:4b:a8:72:17:e0:
f8:1c:5f:81:b0:cc:89:86:af:18:16:d8:ba:99:fc:ed:8d:cd:
6e:61:2a:2b:97:71:76:69:b6:cb:b9:64:b2:7a:68:0d:67:00:
d2:8b:1b:c9:d5:34:5d:26:d3:8a:05:a5:0f:06:6f:7c:55:3a:
a4:ac:9c:8a:af:2c:93:12:79:10:9b:aa:90:2b:7c:78:85:31:
b7:78:95:33:a2:dc:9f:66:e4:17:2a:95:8f:0a:ee:bd:19:02:
f8:82:fe:42:65:18:8e:4f:43:0e:c1:1c:27:91:97:b0:f4:ba:
d0:f8:9e:49:89:d5:96:c6:17:b2:d4:19:da:c1:08:d2:7e:76:
65:b4:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:28:07 2025 by rpki-client