Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa
File: 323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa (raw, json)
Hash identifier: YyvGTqhawgEdQUp5v0YVBHS8t4+Gg1x6wQY9wcOIhDM=
Subject key identifier: BF:E4:FD:C7:06:9E:0B:0F:F9:DF:9F:FA:35:8B:BB:2E:97:0E:F4:8E
Certificate issuer: /CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
Certificate serial: 3292FEED5F4DC9B18ADE39F86CFE736A446A46D2
Authority key identifier: C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa
Signing time: Tue 04 Feb 2025 19:59:52 +0000
ROA not before: Tue 04 Feb 2025 19:54:52 +0000
ROA not after: Tue 03 Feb 2026 19:59:52 +0000
asID: 263204
IP address blocks: 2801:16:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.crl
rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 11:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:92:fe:ed:5f:4d:c9:b1:8a:de:39:f8:6c:fe:73:6a:44:6a:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
Validity
Not Before: Feb 4 19:54:52 2025 GMT
Not After : Feb 3 19:59:52 2026 GMT
Subject: CN=BFE4FDC7069E0B0FF9DF9FFA358BBB2E970EF48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:26:29:34:e6:77:58:83:e2:b1:4a:e1:50:
e1:ca:b8:e0:b7:82:4c:72:7f:3e:7b:65:46:29:2b:
12:42:67:9d:d5:ba:cb:fd:bf:2e:44:98:81:04:b6:
f3:40:a9:3e:6d:a5:7a:91:bc:70:55:50:e5:f0:17:
a2:f7:82:40:ff:9c:eb:ce:e6:a2:ca:59:e5:03:35:
5c:6a:36:b6:1d:d6:97:a4:4b:bd:d4:4b:18:39:83:
e3:5d:42:56:77:37:c5:92:4b:79:69:4a:d1:ae:ad:
99:f8:b1:7f:3f:7b:28:36:5d:d7:dd:6d:51:a8:0b:
21:dc:ef:d4:c7:69:e8:a5:25:a0:54:78:a8:a0:52:
93:5e:7c:85:b5:2c:4e:57:12:dc:e2:0d:d3:1c:6f:
f3:8e:a6:fa:58:fa:09:0c:2c:5b:6f:35:6d:6e:93:
3e:6a:17:87:87:b8:b6:62:4e:30:b1:91:88:73:06:
c1:bb:fd:ac:83:dc:8c:72:1c:3c:f7:65:c4:29:57:
0d:4a:dc:6d:58:a7:40:e0:af:2c:d9:1e:3f:7f:f9:
68:fd:59:59:d0:97:5f:8e:94:74:df:51:90:1f:f0:
f1:50:2b:3b:a2:b3:65:dd:1a:f1:d4:79:bb:f4:61:
ef:6e:ee:a7:44:4e:1c:07:25:fe:e2:a0:49:e9:8b:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:FD:C7:06:9E:0B:0F:F9:DF:9F:FA:35:8B:BB:2E:97:0E:F4:8E
X509v3 Authority Key Identifier:
keyid:C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:16:c000::/48
Signature Algorithm: sha256WithRSAEncryption
7e:fc:e2:5b:a0:b2:73:6d:05:4f:d0:71:b9:70:c3:e0:b3:56:
56:d3:5b:e8:ba:d5:9b:04:8d:2b:fe:90:fc:db:e2:11:b0:1c:
3e:84:b3:3b:90:95:a0:a4:5a:a9:03:21:ee:44:6b:6b:36:03:
7a:e1:10:c8:37:cf:9a:75:52:c1:62:b7:0b:58:9b:c2:48:4a:
ed:33:c7:c6:a0:2b:b0:97:40:c5:94:de:c4:b7:ae:cc:ba:26:
ba:24:c1:c9:4a:a2:93:33:01:ac:20:40:e4:94:b6:5e:dd:c0:
55:52:55:5d:d9:23:7d:3b:d3:d8:07:1b:8d:0e:2a:ca:d1:42:
b5:9c:bc:81:4b:be:03:6f:56:e0:d6:b9:46:fc:ed:df:c0:aa:
ad:11:34:0f:4f:47:d8:43:46:3c:32:84:67:97:e3:c7:c4:e7:
1e:09:10:c1:5d:4a:bd:6d:81:9c:9d:31:d4:6e:37:14:46:fd:
c3:a3:35:40:e3:7d:1b:3d:69:09:23:d7:41:e2:61:05:08:8d:
2f:44:c0:5a:25:e7:ce:e1:0d:c3:f8:85:f9:51:85:7f:91:2a:
3a:8b:60:0d:f9:3e:c4:7c:c7:3a:c6:a0:09:60:d6:d5:8c:5a:
7d:6b:05:71:f4:14:b8:da:cc:a2:ce:71:9e:9c:4f:c6:ab:6f:
94:0c:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:03 2025 by rpki-client