
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa
File: 323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: 4pqXtyNR1cdBXvl8jwrUrWGiszl1G1HyLjHhjjvJYUg=
Subject key identifier: 1C:4D:D9:F5:96:6A:68:93:C6:F5:08:91:0D:73:BA:10:41:48:47:03
Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial: 38BD52D80F0F1F82E64DD8D67057755D185F2688
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa
Signing time: Tue 04 Feb 2025 18:40:38 +0000
ROA not before: Tue 04 Feb 2025 18:35:38 +0000
ROA not after: Tue 03 Feb 2026 18:40:38 +0000
asID: 13489
IP address blocks: 2801:1a9:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 11:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bd:52:d8:0f:0f:1f:82:e6:4d:d8:d6:70:57:75:5d:18:5f:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Validity
Not Before: Feb 4 18:35:38 2025 GMT
Not After : Feb 3 18:40:38 2026 GMT
Subject: CN=1C4DD9F5966A6893C6F508910D73BA1041484703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:c7:35:a6:02:81:d0:fd:7a:bf:5c:3e:aa:
42:63:6a:3a:b5:e4:64:81:cc:b7:34:1d:16:92:a7:
d9:41:65:cf:55:df:30:15:53:8f:ac:96:04:21:a1:
c9:be:7a:2b:07:1e:50:df:b9:79:53:3f:47:90:9a:
a7:e8:a2:cf:89:33:b1:a6:cc:27:55:e8:d5:34:c7:
7e:ec:59:9b:6e:6a:a3:ff:38:af:ea:e0:76:90:44:
1d:9a:c1:12:af:63:18:77:b7:2d:5b:da:cb:ff:c4:
41:8b:a0:62:d2:65:29:9d:a5:de:9a:57:f1:fa:12:
20:56:e0:e7:14:a3:dc:40:52:66:9e:95:e9:bd:56:
08:e4:de:09:bc:cf:12:6e:0e:ae:af:09:eb:c7:f8:
3f:f9:df:0b:c5:30:ba:78:05:0d:bc:13:9c:58:2c:
c8:8b:cd:33:f9:e3:8b:ee:47:f2:a6:03:19:00:88:
ed:b5:9e:26:f4:ad:26:b1:aa:d6:04:c0:ab:58:27:
6a:dc:d7:80:5a:93:6b:80:3f:bc:2c:89:db:56:54:
13:c7:65:49:47:e5:d8:8e:04:f2:ae:fe:ac:d4:e9:
d9:02:7d:7d:72:24:42:7d:7d:79:19:8f:46:ab:6b:
a4:aa:b5:6c:6b:f1:2b:fd:19:bd:27:0c:b4:9e:45:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4D:D9:F5:96:6A:68:93:C6:F5:08:91:0D:73:BA:10:41:48:47:03
X509v3 Authority Key Identifier:
keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a9:2::/48
Signature Algorithm: sha256WithRSAEncryption
65:99:72:67:f7:a6:00:a9:63:b8:58:01:90:e8:ac:79:08:f7:
25:8b:82:c1:8d:30:ee:28:f6:27:1c:1d:06:a8:22:64:ca:40:
4c:56:88:37:6c:7b:11:f5:2a:39:8a:50:34:e2:25:bd:94:f7:
0b:25:68:46:a7:e1:62:0a:82:f3:c2:a1:0f:7f:45:7a:ee:0f:
45:76:e4:69:37:62:b5:26:b3:9f:e7:30:a4:aa:99:79:83:f2:
8b:c4:e3:d1:9f:4f:40:5b:a6:10:55:dd:39:29:7b:45:e2:fc:
f1:27:91:ba:9d:84:75:c0:db:ef:f8:20:c6:12:fa:58:ce:d5:
c9:33:2a:1c:b8:3a:9b:4c:49:fa:87:3b:4a:59:40:c3:7e:56:
23:df:b1:01:c1:0a:ca:f1:21:c5:43:6f:7f:de:a4:f1:3b:1a:
b5:37:ad:47:97:a2:dd:7a:ac:aa:97:5f:29:2b:7e:01:1a:57:
f0:cf:ff:52:d2:01:4a:84:90:94:e9:0f:6b:26:1a:63:03:ba:
3b:a4:fe:7e:62:9a:cd:75:06:53:a5:76:fe:47:66:65:cb:2a:
d4:6b:91:72:24:3f:b0:8c:c9:13:82:85:91:68:f1:42:dc:53:
aa:8f:72:d8:e7:6c:34:37:9e:8b:6c:bf:aa:c2:73:c4:9e:ef:
e0:83:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:57:20 2025 by rpki-client