Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
File: 323830333a326636303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier: ltN+oTl6i45aJjH36BPqcc3CG7Z16Di2uBkFJMKa5Ec=
Subject key identifier: 02:69:EE:D3:3F:62:2F:40:57:89:6B:72:6F:C7:73:18:6F:39:78:35
Certificate issuer: /CN=52644702D94F3D876A774ED4C8509A38B1587D80
Certificate serial: 78BBBAB6487B685E1E047C171BDF715CADF166EF
Authority key identifier: 52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
Signing time: Tue 04 Feb 2025 18:34:20 +0000
ROA not before: Tue 04 Feb 2025 18:29:20 +0000
ROA not after: Tue 03 Feb 2026 18:34:20 +0000
asID: 52496
IP address blocks: 2803:2f60::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bb:ba:b6:48:7b:68:5e:1e:04:7c:17:1b:df:71:5c:ad:f1:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52644702D94F3D876A774ED4C8509A38B1587D80
Validity
Not Before: Feb 4 18:29:20 2025 GMT
Not After : Feb 3 18:34:20 2026 GMT
Subject: CN=0269EED33F622F4057896B726FC773186F397835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:6c:cf:74:6d:df:24:ba:d4:ce:55:bc:15:
d7:14:4f:3b:e6:47:41:82:bd:e8:c8:e6:60:28:7d:
f5:4e:f3:07:4f:a6:20:47:b6:71:da:82:e1:20:a1:
aa:7e:3c:ad:26:21:ff:3c:33:7f:21:58:c6:43:c4:
7b:30:b5:24:c1:d2:60:56:ce:4d:15:cc:d7:9f:49:
d9:24:c9:a9:5c:d9:da:dd:70:50:b7:c3:72:bc:3a:
1e:e8:68:e8:e3:7c:8b:7b:5e:dd:31:be:c1:d9:37:
1e:d1:a4:26:46:42:e0:30:1c:e5:14:16:35:4c:b5:
c9:11:9d:18:c9:a7:71:d0:af:1c:e0:7f:77:7a:ba:
48:e3:bc:c3:e5:50:28:57:d1:cb:28:d6:dd:72:11:
75:85:f8:ca:c9:83:a7:ac:70:d2:24:d4:a9:2c:6c:
41:31:6d:20:eb:a6:3e:7b:85:c2:39:ec:a2:e6:a6:
53:68:dd:05:41:57:5f:fb:3b:e6:6e:fa:f5:5d:cb:
bc:4c:61:bb:82:14:25:77:d3:ae:53:e0:e8:6b:56:
f0:c4:0b:f8:21:bc:2c:8b:aa:66:d8:a2:83:cb:db:
5a:d8:c2:94:74:ce:2c:c5:31:8c:58:63:22:c6:7e:
68:cc:8d:52:0a:cf:62:55:0c:e3:1c:71:22:22:39:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:EE:D3:3F:62:2F:40:57:89:6B:72:6F:C7:73:18:6F:39:78:35
X509v3 Authority Key Identifier:
keyid:52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2f60::/32
Signature Algorithm: sha256WithRSAEncryption
8d:1c:8b:b1:36:53:35:1e:40:53:46:53:e4:db:d8:1e:25:01:
5b:8f:e7:3f:ae:f7:48:1a:65:30:87:77:59:d3:10:9b:b1:00:
81:68:fd:45:92:c4:a4:84:d0:06:da:a8:d9:2b:fb:ac:bd:d9:
78:cc:39:d6:45:99:aa:9c:f2:14:f3:be:3c:12:64:e3:1b:71:
bb:ec:7b:34:57:1f:77:a5:9f:47:cc:9f:05:08:36:f5:58:6f:
5b:6d:19:1d:77:94:c1:b2:46:a5:7d:9e:5d:35:09:9e:be:21:
0a:24:ae:81:be:67:c0:0e:17:ff:41:50:03:4c:c4:d9:ed:93:
c9:5d:e7:76:7f:b9:ca:d1:bf:2f:22:8b:37:13:ab:6e:67:95:
db:38:34:d4:05:1e:f8:b1:ca:29:24:73:c3:f3:64:e9:c6:82:
be:0d:a4:6f:2a:65:0b:24:32:25:6b:0a:d7:0a:9b:7c:54:40:
54:b1:6a:4e:96:26:c3:c8:ef:23:38:15:ca:9c:e2:1d:11:34:
d8:14:6f:83:81:e6:24:cf:89:38:84:db:29:9e:b7:2f:a1:c4:
ee:d7:04:8a:e5:0b:ba:4f:98:84:83:2b:01:b3:34:21:0e:92:
7f:f9:02:b4:97:4e:ca:02:af:ec:83:54:c9:fe:d6:ab:8d:9b:
59:cf:57:57
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUeLu6tkh7aF4eBHwXG99xXK3xZu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2NDQ3MDJEOTRGM0Q4NzZBNzc0RUQ0Qzg1MDlBMzhC
MTU4N0Q4MDAeFw0yNTAyMDQxODI5MjBaFw0yNjAyMDMxODM0MjBaMDMxMTAvBgNV
BAMTKDAyNjlFRUQzM0Y2MjJGNDA1Nzg5NkI3MjZGQzc3MzE4NkYzOTc4MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNWzPdG3fJLrUzlW8FdcUTzvm
R0GCvejI5mAoffVO8wdPpiBHtnHaguEgoap+PK0mIf88M38hWMZDxHswtSTB0mBW
zk0VzNefSdkkyalc2drdcFC3w3K8Oh7oaOjjfIt7Xt0xvsHZNx7RpCZGQuAwHOUU
FjVMtckRnRjJp3HQrxzgf3d6ukjjvMPlUChX0cso1t1yEXWF+MrJg6escNIk1Kks
bEExbSDrpj57hcI57KLmplNo3QVBV1/7O+Zu+vVdy7xMYbuCFCV3065T4OhrVvDE
C/ghvCyLqmbYooPL21rYwpR0zizFMYxYYyLGfmjMjVIKz2JVDOMccSIiOT5DAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUAmnu0z9iL0BXiWtyb8dzGG85eDUwHwYDVR0j
BBgwFoAUUmRHAtlPPYdqd07UyFCaOLFYfYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRkFDM0QxNDYxNzc2RTUxNTZFREEzRjJDMTIyNjA0Mzk1
MkNDODBBRTcxNEE5RUE1QkFBODM1QTE0OUU3RTFFLzAvNTI2NDQ3MDJEOTRGM0Q4
NzZBNzc0RUQ0Qzg1MDlBMzhCMTU4N0Q4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjY0NDcwMkQ5NEYzRDg3NkE3
NzRFRDRDODUwOUEzOEIxNTg3RDgwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkZBQzNEMTQ2MTc3NkU1MTU2RURBM0YyQzEyMjYwNDM5NTJDQzgwQUU3
MTRBOUVBNUJBQTgzNUExNDlFN0UxRS8wLzMyMzgzMDMzM2EzMjY2MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAy9gMA0G
CSqGSIb3DQEBCwUAA4IBAQCNHIuxNlM1HkBTRlPk29geJQFbj+c/rvdIGmUwh3dZ
0xCbsQCBaP1FksSkhNAG2qjZK/usvdl4zDnWRZmqnPIU8748EmTjG3G77Hs0Vx93
pZ9HzJ8FCDb1WG9bbRkdd5TBskalfZ5dNQmeviEKJK6BvmfADhf/QVADTMTZ7ZPJ
Xed2f7nK0b8vIos3E6tuZ5XbODTUBR74scopJHPD82TpxoK+DaRvKmULJDIlawrX
Cpt8VEBUsWpOlibDyO8jOBXKnOIdETTYFG+DgeYkz4k4hNspnrcvocTu1wSK5Qu6
T5iEgysBszQhDpJ/+QK0l07KAq/sg1TJ/tarjZtZz1dX
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:18 2025 by rpki-client