Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa
File: 323830333a393334303a3a2f33322d3438203d3e20323634363936.roa (raw, json)
Hash identifier: OXWsG2DGjyadFaEuj9XQUCpeovAwCs+/92xw9NqFBlU=
Subject key identifier: 8D:E0:9D:9C:91:42:D0:D5:B9:81:55:19:56:D6:16:34:7D:EC:65:3D
Certificate issuer: /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial: 6BC43FDAEA1F85DBC10452CD76BDD3C8A6730505
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa
Signing time: Tue 04 Feb 2025 18:36:05 +0000
ROA not before: Tue 04 Feb 2025 18:31:05 +0000
ROA not after: Tue 03 Feb 2026 18:36:05 +0000
asID: 264696
IP address blocks: 2803:9340::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 14:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c4:3f:da:ea:1f:85:db:c1:04:52:cd:76:bd:d3:c8:a6:73:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
Validity
Not Before: Feb 4 18:31:05 2025 GMT
Not After : Feb 3 18:36:05 2026 GMT
Subject: CN=8DE09D9C9142D0D5B981551956D616347DEC653D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:97:78:83:33:0f:ae:3c:95:90:f1:f5:9d:
65:0f:04:8f:ef:ca:95:98:3b:37:3e:db:c2:39:f3:
5c:0a:00:34:b1:6f:2d:26:5e:7c:76:b8:8b:f8:81:
fc:d2:26:99:6c:d8:3b:24:18:37:d8:68:49:c8:c7:
3d:9a:1c:b9:5d:20:d2:96:45:12:55:72:1c:01:fe:
48:d2:f0:09:b7:b1:fc:33:a0:5d:0e:4d:a3:60:5f:
ed:b0:89:79:8b:9b:88:a0:60:ac:0e:25:a3:77:41:
70:ee:a2:d1:aa:0b:c0:2d:33:34:ed:b4:38:96:de:
1f:a0:74:5b:62:b2:24:11:86:8b:b2:cd:18:07:3d:
43:36:00:77:73:8b:b2:3a:cf:ad:04:0f:f2:1e:05:
15:7d:1c:b0:82:ee:b6:19:5c:96:7f:44:44:93:b4:
c0:35:93:5c:38:51:1a:ad:8c:2f:eb:dc:80:40:d2:
fa:18:81:41:ac:ea:92:8b:9f:fd:72:67:ae:91:2f:
f7:64:a2:a0:f5:2f:4e:f9:c2:2f:47:4d:7d:c1:4a:
a7:65:dc:21:ed:23:6e:ce:53:53:a7:83:54:f5:9d:
29:77:27:4e:86:68:72:c1:af:fc:04:da:dc:13:e8:
a5:57:24:fd:4b:b9:0f:c2:0d:df:3a:fd:80:af:22:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:9D:9C:91:42:D0:D5:B9:81:55:19:56:D6:16:34:7D:EC:65:3D
X509v3 Authority Key Identifier:
keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9340::/32
Signature Algorithm: sha256WithRSAEncryption
3f:e3:0a:a7:ea:1d:72:c8:93:85:70:67:c6:43:52:77:a1:be:
6c:45:e8:e9:9b:e2:41:9a:91:e7:5a:3f:f3:fb:42:14:45:2c:
ff:99:f3:c6:53:75:75:7b:ab:65:43:62:be:1a:23:b8:fe:fe:
71:84:3f:6d:0e:3b:44:66:ea:f4:e4:56:e2:f4:0e:6d:61:e7:
b7:95:53:4c:95:a3:bd:0b:89:a7:86:72:5a:60:c0:d7:3c:41:
67:43:38:56:c4:be:54:45:37:a6:8d:a3:73:9e:5e:3f:4b:80:
57:62:f7:ee:0b:b1:da:4f:04:5b:ac:7d:df:27:ab:19:02:f9:
ec:c8:78:9b:58:b6:8c:53:67:89:4d:ed:a9:87:57:b4:f9:79:
b2:d2:bf:ad:be:de:50:ce:49:ff:cb:50:08:25:ac:b6:6b:3d:
2f:e9:01:fd:ab:91:dc:fc:ad:a9:ab:dc:fe:ab:f2:4d:be:20:
c0:d5:ef:7c:8b:a0:29:4b:9b:ae:c5:fa:d8:6e:52:19:a1:ca:
6a:f3:61:b8:f9:f9:a4:d4:6b:1e:3b:06:c3:0f:be:2d:d7:5d:
98:73:29:69:6a:25:0c:3e:47:3d:47:d7:4a:0a:11:bc:ab:ad:
6d:44:f0:5c:54:50:5d:9a:f8:40:60:ae:09:96:2c:c7:4e:bd:
7b:38:e1:da
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUa8Q/2uofhdvBBFLNdr3TyKZzBQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBNTMzN0ZBODc3OTc5NzFEMjMzQkUzMjc5MDczOTZE
MDgxM0Q1RTAeFw0yNTAyMDQxODMxMDVaFw0yNjAyMDMxODM2MDVaMDMxMTAvBgNV
BAMTKDhERTA5RDlDOTE0MkQwRDVCOTgxNTUxOTU2RDYxNjM0N0RFQzY1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS25d4gzMPrjyVkPH1nWUPBI/v
ypWYOzc+28I581wKADSxby0mXnx2uIv4gfzSJpls2DskGDfYaEnIxz2aHLldINKW
RRJVchwB/kjS8Am3sfwzoF0OTaNgX+2wiXmLm4igYKwOJaN3QXDuotGqC8AtMzTt
tDiW3h+gdFtisiQRhouyzRgHPUM2AHdzi7I6z60ED/IeBRV9HLCC7rYZXJZ/REST
tMA1k1w4URqtjC/r3IBA0voYgUGs6pKLn/1yZ66RL/dkoqD1L075wi9HTX3BSqdl
3CHtI27OU1Ong1T1nSl3J06GaHLBr/wE2twT6KVXJP1LuQ/CDd86/YCvIr7fAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjeCdnJFC0NW5gVUZVtYWNH3sZT0wHwYDVR0j
BBgwFoAU0qUzf6h3l5cdIzvjJ5BzltCBPV4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzVENzg0NkNERjlGQjFDQTcxQkUwNkM2NDU3NDAzRTUw
NUU3NDEzNDE0RDU3QzYxOUQ5MkY3QUQ1NTlBREZCLzAvRDJBNTMzN0ZBODc3OTc5
NzFEMjMzQkUzMjc5MDczOTZEMDgxM0Q1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkE1MzM3RkE4Nzc5Nzk3MUQy
MzNCRTMyNzkwNzM5NkQwODEzRDVFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc1RDc4NDZDREY5RkIxQ0E3MUJFMDZDNjQ1NzQwM0U1MDVFNzQxMzQx
NEQ1N0M2MTlEOTJGN0FENTU5QURGQi8wLzMyMzgzMDMzM2EzOTMzMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDk0Aw
DQYJKoZIhvcNAQELBQADggEBAD/jCqfqHXLIk4VwZ8ZDUnehvmxF6Omb4kGakeda
P/P7QhRFLP+Z88ZTdXV7q2VDYr4aI7j+/nGEP20OO0Rm6vTkVuL0Dm1h57eVU0yV
o70LiaeGclpgwNc8QWdDOFbEvlRFN6aNo3OeXj9LgFdi9+4LsdpPBFusfd8nqxkC
+ezIeJtYtoxTZ4lN7amHV7T5ebLSv62+3lDOSf/LUAglrLZrPS/pAf2rkdz8ramr
3P6r8k2+IMDV73yLoClLm67F+thuUhmhymrzYbj5+aTUax47BsMPvi3XXZhzKWlq
JQw+Rz1H10oKEbyrrW1E8FxUUF2a+EBgrgmWLMdOvXs44do=
-----END CERTIFICATE-----
Generated at Mon Apr 14 11:28:17 2025 by rpki-client