Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa
File: 323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa (raw, json)
Hash identifier: V1xyUPYAjipTK+3sDH4aXFZ89DzLccYQhWWSV9rsqLs=
Subject key identifier: 98:18:02:9E:B1:04:A6:7B:BA:98:EF:D2:B4:48:4D:0C:77:FE:81:B1
Certificate issuer: /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial: 14032F740389014BD207ABE0536208F70979F620
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa
Signing time: Tue 04 Feb 2025 18:54:01 +0000
ROA not before: Tue 04 Feb 2025 18:49:01 +0000
ROA not after: Tue 03 Feb 2026 18:54:01 +0000
asID: 3132
IP address blocks: 2801:1f:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:2f:74:03:89:01:4b:d2:07:ab:e0:53:62:08:f7:09:79:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Validity
Not Before: Feb 4 18:49:01 2025 GMT
Not After : Feb 3 18:54:01 2026 GMT
Subject: CN=9818029EB104A67BBA98EFD2B4484D0C77FE81B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:85:a2:25:32:3c:2e:d9:e5:f6:ec:94:eb:
c0:70:43:d8:f3:00:4a:c9:82:18:52:11:c3:39:dd:
39:b9:b4:49:22:a6:9c:cf:e9:63:6b:a9:4b:17:81:
9e:64:e3:8d:ab:72:5c:6f:6e:02:fe:1b:b6:0d:8d:
cb:b0:f8:fe:5c:ae:ae:0b:65:56:e1:00:04:1b:7d:
f2:16:43:88:5d:2b:ec:50:5a:6e:d5:ae:1a:d1:8f:
df:a9:6d:b7:6e:76:dc:20:54:cd:b3:63:18:07:3c:
29:ab:ef:1a:c5:69:05:34:42:4b:99:32:b4:3b:3d:
09:73:ea:59:b1:10:b2:c9:1f:3e:b6:6f:3b:2a:21:
f2:ba:33:aa:33:9d:fa:f1:c7:43:ed:58:5c:ba:eb:
c3:14:5a:7a:42:5a:f3:a1:90:2f:af:94:23:e0:36:
1f:0a:9d:09:3b:4c:1f:65:f7:38:ca:f7:98:94:80:
7e:3b:a8:a7:d6:75:06:9b:89:5b:eb:93:96:6a:52:
e0:e6:25:fe:7e:80:8a:8b:e6:3a:b5:06:b9:2f:b6:
8b:3c:82:7f:07:a4:1e:b6:ed:3e:86:1b:da:72:c7:
7d:f7:9c:89:aa:a3:c3:83:0c:59:d5:07:37:86:d6:
d2:8c:65:12:66:08:a7:fe:bb:75:c0:af:69:fa:c3:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:02:9E:B1:04:A6:7B:BA:98:EF:D2:B4:48:4D:0C:77:FE:81:B1
X509v3 Authority Key Identifier:
keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f:6800::/48
Signature Algorithm: sha256WithRSAEncryption
a3:c3:ba:61:e8:f0:20:ef:71:52:b3:ad:92:99:19:8a:90:d7:
fa:4d:d3:dc:fb:39:10:88:67:b1:5d:cc:3a:40:e2:5f:d2:d1:
8d:93:ff:ae:9d:36:02:8f:f4:82:d9:b0:83:c7:09:7d:c5:75:
cc:8c:30:fe:47:0a:83:ba:d7:39:4e:55:07:18:cd:70:ff:f9:
e9:be:e5:20:f1:fb:d2:02:51:24:25:52:88:b9:59:5c:8b:b0:
bf:6d:6f:88:19:84:4b:78:18:3b:04:72:04:85:f3:43:71:b9:
ee:51:9e:18:58:ec:0a:47:fc:e8:5d:9a:6a:1a:ac:45:34:a4:
1e:bc:0f:3c:c0:72:9d:c9:3b:0b:d8:28:c0:42:87:a4:dc:73:
e3:fb:d4:c2:7a:83:88:63:d9:be:ce:74:06:50:a3:41:2b:5c:
50:04:b8:bc:ff:5d:a9:e3:96:88:b8:0b:4a:42:9b:92:a5:dc:
9f:0a:c6:2a:61:6e:97:6d:d7:fa:66:e7:90:90:5e:7c:91:a7:
45:7e:b1:c2:2e:de:06:f3:0e:d7:82:33:d3:2a:b7:e6:80:fa:
a0:22:3d:8b:41:f7:3b:88:e6:77:07:d0:f6:52:f4:43:9a:2c:
d5:9f:31:11:2f:0e:04:c6:07:7f:2d:6e:1e:d3:37:cc:70:10:
8a:2e:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:27 2025 by rpki-client