Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa
File: 323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier: N5IBXHusEITvFJG9fNfMp4GK7l3cXQJs+xzzEHUeyB0=
Subject key identifier: 9E:B8:42:13:D1:68:A6:95:68:93:87:A1:E4:78:4E:C2:48:F4:6E:79
Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial: 0F1E6BBF7E7BB3ACAA959F756AFF1A00798AA9CC
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa
Signing time: Mon 10 Feb 2025 17:20:00 +0000
ROA not before: Mon 10 Feb 2025 17:15:00 +0000
ROA not after: Mon 09 Feb 2026 17:20:00 +0000
asID: 272979
IP address blocks: 2803:b0e0:99cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1e:6b:bf:7e:7b:b3:ac:aa:95:9f:75:6a:ff:1a:00:79:8a:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Validity
Not Before: Feb 10 17:15:00 2025 GMT
Not After : Feb 9 17:20:00 2026 GMT
Subject: CN=9EB84213D168A695689387A1E4784EC248F46E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:be:a3:86:04:8e:45:2b:c9:0f:4c:e4:37:
5f:df:17:b0:b8:40:5a:21:de:19:0a:f6:35:93:e6:
5e:2d:1e:59:3b:c9:31:32:25:3e:2f:33:61:a4:bc:
dd:1f:4a:13:a1:18:0c:3b:17:83:21:6c:5a:bc:c1:
19:eb:c0:49:79:66:a5:b1:dd:ef:b9:a2:2a:99:6a:
aa:d3:6c:62:94:f4:02:b9:de:17:a6:91:02:e6:8b:
cf:88:74:d4:c7:89:0a:3b:b8:fa:e8:18:7a:60:2e:
d4:12:42:46:2f:b6:67:e0:70:01:03:fd:10:68:cb:
a4:dc:64:b2:70:b8:79:a7:7a:59:f6:9a:a9:30:ad:
c2:36:74:04:6a:02:af:ce:8d:66:56:79:a7:79:a2:
2b:92:91:db:a6:8f:da:c2:d5:9c:7a:64:1a:87:63:
04:62:9c:9a:b6:26:ec:49:ca:94:83:be:b6:5f:be:
10:d2:29:43:49:15:80:06:4e:e2:e3:18:d8:e8:0e:
da:91:54:30:0a:d8:07:e8:13:25:89:9c:65:07:07:
92:28:1a:6b:22:ba:10:09:88:ce:5f:77:8c:ce:a6:
c0:49:2b:35:6b:bf:36:39:15:02:90:d9:c4:8a:8d:
8e:47:48:e7:05:94:fe:24:48:0b:68:fa:ce:c5:be:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:42:13:D1:68:A6:95:68:93:87:A1:E4:78:4E:C2:48:F4:6E:79
X509v3 Authority Key Identifier:
keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:99cd::/48
Signature Algorithm: sha256WithRSAEncryption
82:e9:e8:f9:74:33:a5:89:d0:31:a6:c7:5d:af:8a:47:0f:35:
c4:e0:76:87:e7:2c:44:0d:c3:c8:84:d7:a3:6d:0b:1c:e9:19:
ae:6d:a2:31:c7:b7:e5:96:bf:d3:71:a8:c2:c4:1a:47:5e:43:
60:54:32:f9:28:c4:53:31:b3:4c:c5:a2:46:0d:e6:66:ac:c1:
4a:34:2a:9b:18:f3:f5:00:3b:fe:ce:d3:ab:6b:0a:96:b6:14:
52:67:89:cb:f3:38:b4:98:e9:4f:24:99:79:c1:bc:74:3d:2b:
42:cc:40:76:74:7a:56:16:58:ee:17:f9:f5:46:bf:16:d3:bc:
ed:90:dc:a1:13:8d:3c:85:68:cf:05:07:68:6a:ec:c6:57:4c:
02:72:20:c6:de:25:80:e0:45:a9:1a:15:3f:7d:cd:17:61:a2:
de:c1:03:88:cf:d3:62:80:fe:c0:da:b9:75:e3:2b:e0:40:55:
0a:30:6a:d5:92:16:4f:fc:35:61:5a:57:93:54:a8:d9:7e:6a:
f5:6a:56:84:88:d1:eb:36:59:62:3e:63:45:f6:d6:2e:f3:bf:
e2:a1:ff:d5:83:a4:c4:ed:2f:bf:12:27:dd:1b:81:01:24:c1:
84:72:c9:55:5c:04:1e:e9:7f:5e:a8:39:a7:02:8c:37:c5:68:
fd:9b:e2:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 11:28:10 2025 by rpki-client