Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa
File: 323830313a3135613a3a2f34302d3430203d3e20323637373838.roa (raw, json)
Hash identifier: UTtTaB0TE/0fVQmzECvsarI29U/24+aLp5xoddKW2B8=
Subject key identifier: 66:81:8F:80:F4:45:06:72:9F:3F:92:03:59:F3:2C:A7:CF:E2:81:1F
Certificate issuer: /CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
Certificate serial: 3A5F429FA886ACC4E92EB2C5425A34E11BF37CF2
Authority key identifier: A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa
Signing time: Tue 04 Feb 2025 18:43:45 +0000
ROA not before: Tue 04 Feb 2025 18:38:45 +0000
ROA not after: Tue 03 Feb 2026 18:43:45 +0000
asID: 267788
IP address blocks: 2801:15a::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl
rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5f:42:9f:a8:86:ac:c4:e9:2e:b2:c5:42:5a:34:e1:1b:f3:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
Validity
Not Before: Feb 4 18:38:45 2025 GMT
Not After : Feb 3 18:43:45 2026 GMT
Subject: CN=66818F80F44506729F3F920359F32CA7CFE2811F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:2a:83:e2:82:1d:0a:28:80:e8:3d:75:7e:
c8:4f:b3:86:30:31:95:89:a5:90:16:ee:36:29:88:
e3:f1:87:89:2b:4e:8c:bc:4b:bc:de:dd:08:f8:40:
da:3b:8b:f6:28:82:fc:79:a0:d6:d7:90:05:b2:e0:
44:04:32:86:c9:b1:13:f6:6f:17:b7:d1:7c:d0:04:
10:9b:b0:d5:56:72:4f:b6:10:75:b8:a0:01:e9:f4:
e8:24:4c:a2:0e:b6:82:9e:47:5c:53:e9:40:8e:cb:
65:c8:d1:22:ae:7b:3f:b2:70:3c:ef:f4:62:13:5d:
d9:c5:4e:b4:40:56:f2:db:d1:8b:aa:6f:0f:07:86:
5e:76:92:5b:62:7f:18:b1:e3:05:1d:c7:0b:c9:86:
d6:d7:38:1c:9d:d8:7b:50:2c:58:84:e5:fd:b7:58:
6e:94:0e:6f:d4:1d:8d:2e:f8:42:0b:1c:c9:f1:e3:
1b:45:85:35:0b:8a:eb:d2:35:d9:31:fa:03:35:b5:
d7:24:c9:70:a8:28:48:eb:b4:01:df:a5:1b:b3:be:
fe:d0:d6:cd:10:87:b5:d1:21:6b:a1:e5:24:68:e3:
28:49:29:99:0f:81:de:fe:71:32:bd:3f:2a:7b:4b:
d6:53:f2:48:ca:77:0c:e4:38:f0:8d:e3:04:68:74:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:8F:80:F4:45:06:72:9F:3F:92:03:59:F3:2C:A7:CF:E2:81:1F
X509v3 Authority Key Identifier:
keyid:A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/323830313a3135613a3a2f34302d3430203d3e20323637373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:15a::/40
Signature Algorithm: sha256WithRSAEncryption
4f:63:5d:cf:be:cd:31:69:26:8c:49:fd:ec:02:f0:a3:26:50:
4a:e1:96:5e:2c:62:0b:17:23:c9:11:c6:80:83:46:2c:4f:f4:
eb:9a:b5:cb:af:50:27:8b:19:a9:54:32:9e:a6:32:ed:2b:11:
38:07:f0:58:f8:4b:6e:53:ae:16:3a:42:86:20:dc:fa:13:b6:
d5:cd:9a:01:5d:2a:31:d0:98:1b:e2:4e:27:3c:68:2b:98:70:
57:ce:b6:4a:7b:0e:2c:09:d5:21:e0:11:07:72:6e:4d:ef:4c:
2b:d4:06:b9:40:51:a0:cf:6d:28:69:ab:7c:9e:b0:2d:97:d9:
fb:d2:f8:07:3b:8c:90:c6:de:46:29:d1:fe:82:59:a6:0c:1d:
65:21:69:a4:03:a8:d9:f9:53:85:49:e8:44:da:78:18:03:cf:
63:a9:9c:6b:49:78:45:85:41:79:fc:6e:48:ea:6d:9c:6a:ec:
50:1f:d3:d8:0d:45:27:73:e4:9a:5e:8d:ad:6e:cc:f7:24:18:
bc:39:05:14:16:1e:e6:1c:b6:cd:78:34:5f:70:81:3a:4a:53:
b1:4b:60:15:f0:31:58:9f:0e:e0:1e:75:1f:67:b3:8e:fd:ee:
cd:85:0b:83:ec:e3:c0:62:62:3a:7d:f6:dc:61:a3:9b:15:b5:
99:3b:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:44 2025 by rpki-client