Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
File: 323830303a3339303a3a2f33322d3333203d3e203235363230.roa (raw, json)
Hash identifier: R/CsF7eWi6c2XsI4YZhCISY9l6oid1LMZr4Xk+jo4IA=
Subject key identifier: E7:48:A2:A5:EC:8F:89:4C:76:E2:E4:C8:EC:2A:F7:C3:44:37:46:7F
Certificate issuer: /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial: 5D28DE15040C45DF97282FE778848A07A0E5268B
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
Signing time: Tue 04 Feb 2025 18:28:01 +0000
ROA not before: Tue 04 Feb 2025 18:23:01 +0000
ROA not after: Tue 03 Feb 2026 18:28:01 +0000
asID: 25620
IP address blocks: 2800:390::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:de:15:04:0c:45:df:97:28:2f:e7:78:84:8a:07:a0:e5:26:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Validity
Not Before: Feb 4 18:23:01 2025 GMT
Not After : Feb 3 18:28:01 2026 GMT
Subject: CN=E748A2A5EC8F894C76E2E4C8EC2AF7C34437467F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:e4:6a:9d:d4:08:92:53:23:3f:af:09:7c:
f2:3d:61:f6:8e:14:76:87:00:6c:98:e0:35:ca:ee:
a3:1d:6e:9c:3a:8c:12:b7:08:b3:b9:f4:1c:ab:a9:
f7:1a:1a:8d:bd:51:7c:9f:9d:76:4c:05:89:03:0c:
ac:72:ed:8c:12:69:c1:3c:3c:fe:9c:0d:cf:43:3a:
9a:4b:a3:c8:aa:ea:88:64:a7:cb:ea:9d:1a:26:7e:
21:c4:5f:b6:cc:06:8d:84:39:f5:81:5f:95:61:75:
89:6e:31:ba:38:9c:24:41:71:a0:8e:3c:79:32:a5:
86:8a:7f:ba:ce:b8:bf:bc:71:e8:bc:04:95:d7:e8:
3e:8e:ff:6d:7b:b9:8c:c9:f1:42:3e:fe:5c:6e:cd:
f4:cb:eb:1b:c3:67:91:88:a4:63:5b:3e:d2:f7:5e:
f9:a4:57:77:68:49:f8:08:dc:9e:2e:40:b9:fc:20:
f2:48:23:9f:02:08:7c:57:ad:28:2b:d3:78:46:b4:
94:f5:ac:df:f3:16:6d:ce:91:d4:38:dd:7f:4b:a2:
51:48:11:aa:f5:74:f2:70:77:7a:2d:c6:8b:a6:94:
b3:a4:fc:e2:b1:46:51:34:df:bb:ad:d4:24:cc:75:
24:ea:e5:84:45:d7:fe:b7:71:c4:db:13:9a:3e:2e:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:A2:A5:EC:8F:89:4C:76:E2:E4:C8:EC:2A:F7:C3:44:37:46:7F
X509v3 Authority Key Identifier:
keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:390::/32
Signature Algorithm: sha256WithRSAEncryption
12:87:a9:6f:71:09:a7:81:09:24:58:e5:a4:54:e5:cf:b5:d5:
61:2d:3a:b7:ab:6b:40:e4:79:f9:10:e7:7e:4f:6b:f0:6d:77:
6e:7a:44:fb:c5:9a:ec:74:a2:dd:49:fe:ac:b0:4b:76:a9:a6:
45:5f:5a:03:9b:f6:50:6a:43:9d:8f:b2:c9:d4:38:17:11:0e:
2a:09:bc:78:bb:63:2a:88:18:ba:61:4a:ef:08:3e:d3:6f:75:
d5:7b:2d:32:b6:e2:c1:3b:e6:d8:46:98:4d:cc:31:57:93:68:
b2:12:38:36:e5:ba:b9:b2:fb:da:65:ed:91:b1:44:9c:d2:a4:
6b:3a:24:e0:5e:79:d3:dd:95:9c:16:1b:ea:5b:ea:3b:92:23:
d4:b0:5a:af:38:2a:7b:20:84:1b:16:31:29:64:37:f7:66:91:
29:dd:53:7b:b0:fd:a9:af:f1:08:0f:58:e0:0a:34:2f:0f:2e:
4e:4b:44:5c:c5:4e:65:62:95:62:de:c0:b4:92:eb:38:aa:5e:
4d:69:ff:68:a3:ff:a9:0b:3e:ac:90:b9:c5:e7:80:bf:c5:3f:
0d:45:2a:07:fe:ff:45:85:d7:12:99:db:1a:d6:00:ac:39:bc:
01:99:20:1b:df:9b:d2:c4:c1:b9:13:06:fb:b5:e5:96:a0:95:
69:f8:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:28 2025 by rpki-client