Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: xlZg5ErvTuKy3GWpptuYUePy/UdIBMwRlnoagsh1y3U=
Subject key identifier: 11:3E:C6:DF:35:98:64:47:A9:D9:2D:08:93:49:4B:4F:42:62:3E:C2
Certificate issuer: /CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Certificate serial: 09118A1EDFFC4DBE161D3CF0965891476F607880
Authority key identifier: 2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 04 Feb 2025 19:58:09 +0000
ROA not before: Tue 04 Feb 2025 19:53:09 +0000
ROA not after: Tue 03 Feb 2026 19:58:09 +0000
asID: 14080
IP address blocks: 2801:1a:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:11:8a:1e:df:fc:4d:be:16:1d:3c:f0:96:58:91:47:6f:60:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Validity
Not Before: Feb 4 19:53:09 2025 GMT
Not After : Feb 3 19:58:09 2026 GMT
Subject: CN=113EC6DF35986447A9D92D0893494B4F42623EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:74:8a:a9:0b:9e:e4:8c:e7:3f:93:e2:1b:
9a:e5:17:d2:55:51:1e:27:e9:44:b5:6e:c7:91:61:
e0:eb:31:15:d3:e4:93:84:ba:1f:03:66:c3:80:ac:
a1:44:e8:af:33:7b:be:65:35:54:75:c8:e5:e0:59:
66:43:39:af:d9:67:39:35:54:85:e3:17:8c:1d:3e:
13:6d:4d:e2:ca:0e:b3:d5:ef:17:73:4a:51:3b:78:
25:b8:70:ba:67:c9:f9:35:47:fc:2b:6a:39:9e:b0:
19:59:bf:16:22:9a:e4:48:68:79:f2:15:c7:d9:06:
eb:73:00:47:41:3d:18:f7:79:60:95:b8:e8:6a:d1:
a8:f0:6e:21:dc:61:b4:a2:f9:52:32:62:f8:04:e1:
9a:be:6f:39:28:4c:dd:cd:ff:a3:7d:8f:16:ab:eb:
8b:57:42:17:86:a5:a8:4e:c2:3c:ee:5f:61:a1:9c:
6a:65:e1:5c:4e:25:e6:17:a9:35:17:1f:1a:12:8b:
52:b9:17:ec:7a:91:eb:fd:52:6f:9b:06:dd:a2:d4:
99:6d:69:73:1a:dd:9f:41:86:c1:58:0c:96:f6:3f:
d8:ad:62:5e:fc:08:93:5c:1e:7e:ca:8d:52:02:69:
27:02:8e:42:81:28:74:71:dc:a2:bc:0d:b2:0c:e8:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:C6:DF:35:98:64:47:A9:D9:2D:08:93:49:4B:4F:42:62:3E:C2
X509v3 Authority Key Identifier:
keyid:2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a:c000::/48
Signature Algorithm: sha256WithRSAEncryption
a2:91:e6:d4:38:f4:29:8b:4b:06:65:25:6d:44:79:cf:ad:ee:
e4:d1:e5:26:a3:6c:71:c6:89:75:b8:0a:97:af:f4:50:eb:d6:
7c:1d:d3:e5:ae:03:a1:a8:d5:4f:be:73:1c:89:67:3a:2d:43:
88:b1:65:6b:91:08:70:fa:36:dc:05:52:14:d7:ed:bf:70:b3:
c0:7a:94:77:8e:e3:38:8d:d1:c5:71:ba:e8:2c:5d:4d:f0:d3:
47:c3:6d:c1:9b:69:68:2f:3e:20:39:92:9a:78:cd:e0:57:f9:
70:a5:f0:04:e3:a2:43:c9:c7:da:30:f7:1f:13:86:e6:86:2f:
67:80:92:1c:d0:77:be:7d:18:ed:e3:22:4f:35:1c:11:87:ac:
05:74:8f:7b:b4:f5:de:5f:fc:bd:3f:a6:c1:f3:2f:6a:3f:1c:
6b:dd:a2:83:b4:d4:04:ea:73:d0:7e:ec:ab:b1:69:86:4f:92:
17:d6:f2:b8:de:37:00:34:98:c9:96:ea:fd:99:f8:36:1a:18:
aa:67:41:e4:39:33:97:ed:21:bf:39:1c:44:d6:0f:d7:18:dc:
84:a3:c8:1f:13:19:08:28:53:30:31:ee:51:ab:77:cd:ac:d3:
58:9a:b2:47:62:77:e1:c4:93:f5:59:d7:b3:3f:c2:96:0b:1e:
ef:a0:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:49 2025 by rpki-client