Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
File: 323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (raw, json)
Hash identifier: takJjmGC1G1/7xGuybEIuyQDwN9y4okf/jc5QDfFvR4=
Subject key identifier: 71:BC:E9:C7:53:86:27:CB:82:29:8F:4E:D4:20:FE:4F:3B:E1:93:C9
Certificate issuer: /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial: 2EFF1AFCF048EFEF19FAEC638815CA224EA96146
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
Signing time: Tue 04 Feb 2025 18:40:48 +0000
ROA not before: Tue 04 Feb 2025 18:35:48 +0000
ROA not after: Tue 03 Feb 2026 18:40:48 +0000
asID: 269976
IP address blocks: 2803:f6e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ff:1a:fc:f0:48:ef:ef:19:fa:ec:63:88:15:ca:22:4e:a9:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Validity
Not Before: Feb 4 18:35:48 2025 GMT
Not After : Feb 3 18:40:48 2026 GMT
Subject: CN=71BCE9C7538627CB82298F4ED420FE4F3BE193C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:d3:e3:4b:03:14:14:c9:a6:3f:64:2f:0d:
cc:f7:95:29:47:b3:81:cb:fa:61:d2:65:17:61:a2:
fd:9f:39:22:66:73:80:a2:46:74:5d:b4:8d:6d:ef:
22:43:dc:c1:93:07:c6:f8:93:32:20:dd:d2:e5:b9:
aa:c4:35:e8:55:05:c0:5f:40:f0:9b:fa:83:24:91:
8a:f7:f4:74:8a:24:e7:c7:be:b7:89:a6:62:41:89:
0e:36:75:0c:d8:9e:3f:3c:4d:13:03:bb:60:6a:22:
0e:64:93:da:d3:bb:d4:bd:5d:95:83:e5:a5:7b:aa:
d7:92:ff:28:82:32:55:b7:21:73:89:05:57:da:dc:
28:16:5f:e7:3f:46:38:53:4b:5f:c6:01:f2:f2:64:
81:ad:47:44:be:73:9d:cf:d4:0b:8a:6f:60:89:e9:
53:84:89:78:c8:9b:cb:97:14:d7:83:fc:f7:6d:96:
fe:91:b2:5b:36:f1:d2:1e:c9:1c:aa:00:e9:9a:fe:
ed:be:8d:3f:3b:23:b8:e1:b7:ca:dd:c4:04:49:00:
2a:1e:de:4d:0c:d8:3f:65:09:37:e8:79:61:9e:48:
08:07:28:1d:86:98:fb:55:8c:78:45:c6:6d:44:1a:
ac:52:3c:c6:b0:15:61:5f:54:f3:29:c7:d7:5b:92:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:E9:C7:53:86:27:CB:82:29:8F:4E:D4:20:FE:4F:3B:E1:93:C9
X509v3 Authority Key Identifier:
keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f6e0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:69:68:cb:71:9f:54:28:d0:42:6d:b4:fa:93:d7:f3:38:b4:
a7:5b:48:ad:3f:6d:98:d7:7f:98:5e:9b:ff:25:a2:b1:d4:c2:
8f:93:99:2f:3a:cf:4f:f3:4c:6f:cf:95:e6:c4:df:fd:b2:3e:
79:bb:d1:fc:17:44:2e:a4:a0:49:02:f9:4f:9c:42:af:3f:c1:
a5:56:24:cf:d3:19:44:d0:ab:a1:8e:09:49:fc:46:2e:09:90:
43:16:d9:cb:9e:9f:2b:12:94:76:87:b6:6c:34:ed:55:65:45:
e1:85:26:9e:61:cc:fc:8a:9c:a1:af:af:85:73:ca:1c:39:e0:
a3:c1:72:72:00:8d:09:f4:d9:49:06:c9:a7:ab:52:a7:a0:d6:
d2:b3:7e:d0:f2:50:eb:66:1c:a5:0c:8f:4c:8a:80:fe:79:7e:
4d:2c:19:28:e7:d2:8a:c3:10:eb:77:e6:5a:00:b2:f0:98:60:
fe:fc:16:9b:71:c0:86:c7:fd:6f:60:b1:7e:06:92:be:9c:9c:
47:f3:e2:40:88:5b:ed:b1:19:c5:dc:87:83:95:88:46:57:f7:
10:f9:65:60:03:3a:25:61:b3:72:1d:27:f7:45:03:56:17:70:
48:79:58:d9:93:64:40:5e:d1:fd:c5:ca:86:f1:78:93:06:bc:
51:8f:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:35:39 2025 by rpki-client