Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/323830333a633330303a3a2f33322d3438203d3e203232383639.roa
File: 323830333a633330303a3a2f33322d3438203d3e203232383639.roa (raw, json)
Hash identifier: jiG7q18MuCF8LGDvVHIiHHfocuSkV6edN4+wGumfMCg=
Subject key identifier: E2:8A:72:7F:05:8F:30:02:A3:49:EF:F4:2B:A9:F7:65:77:60:48:92
Certificate issuer: /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial: 09D7F6BF850E313DB5FD9F889067C6EECEB8288F
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/323830333a633330303a3a2f33322d3438203d3e203232383639.roa
Signing time: Tue 04 Feb 2025 18:24:01 +0000
ROA not before: Tue 04 Feb 2025 18:19:01 +0000
ROA not after: Tue 03 Feb 2026 18:24:01 +0000
asID: 22869
IP address blocks: 2803:c300::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d7:f6:bf:85:0e:31:3d:b5:fd:9f:88:90:67:c6:ee:ce:b8:28:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231411337300474BC5489725C8707684F70A876D
Validity
Not Before: Feb 4 18:19:01 2025 GMT
Not After : Feb 3 18:24:01 2026 GMT
Subject: CN=E28A727F058F3002A349EFF42BA9F76577604892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:ba:0b:ea:53:07:1f:eb:b4:a2:1b:4f:3e:
7c:a9:ca:3c:a6:52:db:6d:5c:95:8b:ef:d2:e8:aa:
ba:19:1f:17:df:2e:03:c8:eb:95:65:9e:96:4a:5d:
14:a6:31:7a:bf:f0:07:d8:69:0f:27:15:74:6c:a3:
5f:5d:d2:af:87:0f:ae:3a:24:83:d2:9a:90:fa:75:
6d:9e:6b:75:64:0f:0b:fc:81:a9:ee:ba:8a:f8:02:
fe:71:80:40:a8:fc:b2:98:ab:f0:fd:b2:60:83:d2:
6e:85:75:32:00:db:90:28:50:30:97:79:99:5f:5e:
2a:14:ee:90:cc:f9:59:3d:2f:c5:cd:30:0a:e9:7d:
ce:17:a3:58:ee:87:c8:c7:b2:5c:a9:08:83:0f:c6:
29:ff:e1:c4:d2:4d:3e:55:41:f6:92:86:a4:29:92:
60:24:d4:d6:ee:2c:72:05:82:40:dc:1f:99:a7:1c:
56:04:92:76:9f:5a:bf:10:ec:6a:cb:2b:3f:3c:a3:
8a:87:fc:b8:a6:f6:73:59:b8:b4:6c:63:66:2f:b7:
34:94:14:f7:e6:da:d8:de:01:a7:45:e1:13:60:3f:
c2:4a:0b:5c:7b:5d:ab:95:b4:8e:78:e8:48:ed:28:
27:63:71:c9:7b:e8:7b:28:43:4e:fa:50:6f:71:6f:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:72:7F:05:8F:30:02:A3:49:EF:F4:2B:A9:F7:65:77:60:48:92
X509v3 Authority Key Identifier:
keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/323830333a633330303a3a2f33322d3438203d3e203232383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c300::/32
Signature Algorithm: sha256WithRSAEncryption
5b:65:5b:d0:15:7d:86:fe:6a:cc:6d:a4:96:21:d5:c6:65:67:
f5:f3:86:1b:2d:2a:06:dd:62:5d:74:1a:8f:05:fb:69:7c:92:
32:15:b8:25:cf:fa:4a:c5:99:8f:1b:31:07:be:15:6d:47:8c:
dc:2c:e1:41:fa:e1:6f:ea:6e:c7:98:d1:92:1e:a1:3f:79:c7:
12:2a:dc:97:dc:a1:66:33:b3:2c:a2:d1:8b:7d:b6:46:65:cb:
3e:1e:e7:d4:73:85:86:ad:52:74:6c:aa:b3:23:57:a3:42:fb:
01:13:81:da:49:d4:fa:ff:ec:d3:96:67:7c:8d:b5:f8:3c:72:
8b:7e:ae:54:93:bd:53:10:1c:a7:bd:13:ea:cb:30:f5:ed:9c:
0b:ff:52:3f:ca:8a:20:73:c1:85:26:95:d8:7b:d3:33:14:fe:
32:d7:44:e2:78:1f:96:38:37:df:c2:97:a3:e3:24:43:16:ae:
02:0c:b6:93:b2:f4:29:b9:a5:43:8f:db:2a:c5:1f:b3:69:f7:
5d:e1:f8:bd:19:17:29:7f:de:48:5c:a9:1e:13:af:cd:54:b8:
fe:bc:80:22:f4:0d:b2:9d:6b:15:dc:a5:70:55:34:cc:21:a8:
e2:d1:ea:42:70:95:ca:4a:09:ce:2d:28:7d:0c:67:ad:78:f4:
da:d6:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:46 2025 by rpki-client