Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237353a3a2f34382d3438203d3e203532333036.roa
File: 323030313a313339383a3237353a3a2f34382d3438203d3e203532333036.roa (raw, json)
Hash identifier: Fl3SrOHwAX6O6vQul4P376eJAmat5QCom3qq9Y++mGo=
Subject key identifier: 2F:20:91:C4:84:68:BC:9E:86:EE:E6:46:87:4A:BF:9B:59:47:E3:31
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 16D57BCAFF23AA28AC11CB88E1CC1B7D5FA163BB
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237353a3a2f34382d3438203d3e203532333036.roa
Signing time: Tue 04 Feb 2025 20:05:50 +0000
ROA not before: Tue 04 Feb 2025 20:00:50 +0000
ROA not after: Tue 03 Feb 2026 20:05:50 +0000
asID: 52306
IP address blocks: 2001:1398:275::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 03:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d5:7b:ca:ff:23:aa:28:ac:11:cb:88:e1:cc:1b:7d:5f:a1:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Feb 4 20:00:50 2025 GMT
Not After : Feb 3 20:05:50 2026 GMT
Subject: CN=2F2091C48468BC9E86EEE646874ABF9B5947E331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:d2:44:d4:c2:13:d6:67:12:9b:33:c6:ca:
14:1c:99:54:df:22:5f:9a:90:fc:22:95:50:c7:77:
8e:d7:7f:27:f5:15:a1:8f:52:31:c2:64:cc:33:e3:
62:aa:91:48:ec:d8:b2:26:08:40:2e:f8:da:23:bf:
a7:16:e1:f4:e4:8d:ee:55:1a:74:f5:f4:2d:fa:aa:
59:fd:2b:16:78:e9:e9:88:02:2e:51:0d:ec:b1:53:
71:fa:41:18:b9:1f:41:c6:1e:50:15:bd:bb:ae:ec:
3a:df:6f:0f:ec:89:6e:a5:15:39:1c:a2:78:a7:e2:
b3:36:ad:21:e5:16:80:82:47:3a:19:9c:65:43:e7:
b6:ba:51:c7:95:51:35:e9:9d:80:88:c8:1c:69:31:
7e:20:44:fb:7f:12:d4:a3:57:a8:22:d7:2c:ba:de:
e6:1c:fa:10:4b:b9:2d:2b:b6:18:26:94:8a:09:f8:
df:9b:8d:01:55:61:a5:02:3b:5f:8c:cb:48:37:b1:
91:4b:58:dc:45:80:10:30:99:36:b3:19:0d:da:62:
b4:5b:55:1d:44:3e:43:2d:e8:4e:bc:58:f9:be:b1:
20:bd:7d:cd:b8:4d:64:a5:2b:5b:40:d3:51:84:85:
d7:85:f2:18:5a:a6:49:8e:1f:3e:45:1f:6a:cb:5c:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:91:C4:84:68:BC:9E:86:EE:E6:46:87:4A:BF:9B:59:47:E3:31
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3237353a3a2f34382d3438203d3e203532333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1398:275::/48
Signature Algorithm: sha256WithRSAEncryption
23:4d:8a:85:72:dc:b5:d5:f1:1f:bc:eb:f8:34:16:e7:79:7a:
cb:63:05:0b:57:e0:05:94:45:ae:cd:b3:bb:72:b4:a4:e5:f6:
84:31:da:26:a8:a4:ae:d0:1b:8e:58:3e:1d:6b:ae:e1:ef:7d:
97:b1:ef:cd:fb:ee:5c:ae:c7:b5:9a:ac:eb:e7:c3:19:6c:29:
6b:8d:92:4d:0b:08:3e:85:28:1f:78:b1:f1:5c:b7:4e:a1:6d:
f2:07:65:f2:be:cf:16:12:37:ec:31:7a:28:4b:a3:8d:97:da:
44:88:c5:60:60:a7:10:8d:6e:f8:28:f3:4e:e4:c2:95:ee:16:
72:0a:2d:d0:7e:17:96:64:ec:e2:94:15:77:db:f6:1d:81:79:
10:42:bf:37:fb:9a:26:e3:27:81:bb:ed:c2:39:cc:77:3c:a1:
32:58:a3:be:7f:b5:60:ae:aa:64:5c:a4:af:dd:40:a0:b9:9a:
d4:79:64:a0:c3:00:b2:dd:85:c6:15:49:6f:a6:f9:dd:89:4d:
c0:03:91:27:f1:17:45:e6:13:ed:be:b0:c0:c5:30:fb:96:6d:
31:bb:fd:7f:9e:f1:49:db:1f:35:c3:96:84:c2:7b:1c:36:7d:
9c:92:1a:1f:bc:02:fa:9a:a9:09:52:ee:07:93:56:22:8a:49:
e4:f8:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:06 2025 by rpki-client