Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
File: 323830333a616165303a3a2f33322d3438203d3e20323637363834.roa (raw, json)
Hash identifier: 6RpsALmCyh6fioxJSy2Yew0rQTJcmTJJdrTvpQPRDvU=
Subject key identifier: A1:79:A9:17:74:6C:CF:A1:87:75:E6:78:05:70:2D:0E:CC:B7:96:7E
Certificate issuer: /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial: 3517856E026BB1CEF8C0CEEB49DB7FEA33893A80
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
Signing time: Tue 04 Feb 2025 18:46:41 +0000
ROA not before: Tue 04 Feb 2025 18:41:41 +0000
ROA not after: Tue 03 Feb 2026 18:46:41 +0000
asID: 267684
IP address blocks: 2803:aae0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 18:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:17:85:6e:02:6b:b1:ce:f8:c0:ce:eb:49:db:7f:ea:33:89:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
Validity
Not Before: Feb 4 18:41:41 2025 GMT
Not After : Feb 3 18:46:41 2026 GMT
Subject: CN=A179A917746CCFA18775E67805702D0ECCB7967E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:5b:f6:4a:f6:dd:d4:1e:e5:16:2a:00:7e:
2a:5c:dc:ce:e3:95:ed:c7:03:0f:f4:16:b1:f8:96:
3d:e8:92:89:38:e1:69:04:06:e1:a7:be:7b:3a:32:
d7:29:08:9e:a6:33:bd:db:28:a4:74:ee:84:de:67:
7e:52:f4:48:61:80:42:84:8e:c1:2e:24:8d:93:f3:
4b:4d:1e:42:f5:21:4d:a5:55:13:e1:6a:c5:dc:9e:
29:92:d4:cf:16:77:98:e4:3b:95:63:ca:f2:d9:1e:
b0:fd:d0:4d:81:df:44:f2:4b:85:6d:90:15:9f:d1:
4e:0c:4a:e7:79:f2:7f:17:28:11:13:77:de:5c:c8:
fc:7b:6d:2a:5e:96:c1:ba:83:cf:9d:d5:0f:42:89:
28:0a:06:c9:cb:f8:5c:85:55:aa:d2:37:f7:0c:79:
65:b8:de:03:cb:bc:6f:99:32:db:82:08:e6:69:4d:
38:ca:9c:ee:34:cc:3b:82:ce:77:b9:86:e1:54:bc:
dd:3f:bd:bf:9a:b3:62:c0:0e:ce:a6:38:85:5b:32:
6d:4a:41:9d:a9:0d:1a:25:1b:ac:c9:c5:91:89:11:
08:5f:46:39:25:c6:65:ed:85:30:cd:5d:6b:b9:33:
60:b4:5f:e0:95:67:9d:db:14:44:c3:4e:a4:a7:0e:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:A9:17:74:6C:CF:A1:87:75:E6:78:05:70:2D:0E:CC:B7:96:7E
X509v3 Authority Key Identifier:
keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:aae0::/32
Signature Algorithm: sha256WithRSAEncryption
94:0f:85:53:bf:d8:3a:ad:fb:10:44:26:d2:4d:60:82:db:2c:
5f:72:d1:b5:fd:14:e6:d5:f8:89:0f:ca:b9:3e:17:06:19:da:
99:81:57:b1:c4:65:d1:59:b3:c1:a8:08:32:26:9c:1d:17:30:
3f:6b:bd:b9:92:dd:47:2c:a3:b2:28:2a:a8:00:6c:3d:b3:b1:
7f:27:e6:a6:c5:3a:7b:11:cb:37:e9:84:7d:af:43:98:8c:dd:
ab:e1:a1:7f:fe:75:b4:19:69:ff:d3:92:85:db:15:96:d3:91:
c2:7b:f3:c1:fb:7d:53:77:6a:e3:39:36:bd:db:c1:3b:b5:4e:
c5:b1:88:0a:25:6f:f9:ff:ee:64:80:a1:df:30:78:35:cb:b4:
5c:6d:97:22:09:3c:71:5b:ef:2d:f9:d2:b7:8c:3c:09:35:c4:
18:0e:32:3e:05:76:8d:d7:48:5e:62:1b:35:81:66:49:21:ee:
91:eb:76:e6:cf:59:68:94:7e:b7:a6:74:88:68:8c:21:dc:13:
18:6c:4a:19:e0:27:bf:18:57:42:d5:95:2c:20:9f:46:16:72:
c5:fc:b5:bc:e4:8f:57:b9:c4:9c:c7:9d:53:aa:91:9e:78:9e:
a7:da:a6:41:e2:cf:59:83:2b:ac:49:2d:54:9f:15:82:c2:a8:
40:b7:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:55:07 2025 by rpki-client