Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432333838.roa
File: 323830333a616438303a3a2f33322d3438203d3e203432333838.roa (raw, json)
Hash identifier: Y/QCvRVls0niBkHoOVCKfSnI9+ZRu4cqgWCjfwNkLkA=
Subject key identifier: 71:C1:A1:C0:A1:7F:C4:DF:A1:3D:8F:0A:5A:C6:D5:28:9F:9B:FE:D9
Certificate issuer: /CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Certificate serial: 32C941E8EEAB994B51BE2FD0E947BCE5E5A0EFAD
Authority key identifier: CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432333838.roa
Signing time: Tue 04 Feb 2025 18:20:25 +0000
ROA not before: Tue 04 Feb 2025 18:15:25 +0000
ROA not after: Tue 03 Feb 2026 18:20:25 +0000
asID: 42388
IP address blocks: 2803:ad80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c9:41:e8:ee:ab:99:4b:51:be:2f:d0:e9:47:bc:e5:e5:a0:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Validity
Not Before: Feb 4 18:15:25 2025 GMT
Not After : Feb 3 18:20:25 2026 GMT
Subject: CN=71C1A1C0A17FC4DFA13D8F0A5AC6D5289F9BFED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:40:09:83:5d:18:d4:2a:91:96:9d:f4:4b:
90:f7:cb:f5:af:70:43:e6:d5:43:7f:e8:5c:85:21:
be:cf:c9:f3:24:43:e7:c8:64:84:48:01:60:7d:45:
9b:f9:d8:59:48:82:9e:77:5c:61:24:3b:ba:06:0f:
dc:d4:b5:80:d5:ac:35:f4:82:1b:33:65:83:e0:ba:
96:f4:69:c0:41:50:2b:98:6d:56:74:07:70:79:24:
0a:93:a4:4a:0d:63:d7:c0:06:17:80:03:82:8b:da:
94:61:5f:91:27:a5:5b:b1:41:8c:b8:b1:f8:cf:7b:
86:28:ec:0c:c5:0b:93:82:77:2e:8f:5f:92:6f:4b:
47:e2:0a:30:db:c3:0a:17:4a:6c:08:1f:ea:fa:67:
64:3e:f0:3c:68:2f:2c:dc:32:8a:4d:69:b9:59:24:
06:9e:57:72:44:ca:ae:b1:a8:05:0c:fc:f9:50:0a:
f3:00:ff:fd:4a:6e:42:98:43:f2:60:64:ca:7c:e0:
f2:33:1f:35:8f:d7:34:4c:99:db:a5:57:4d:b8:37:
f5:6e:2f:e8:85:e0:01:1b:e8:03:5e:e6:0f:81:62:
35:c1:7e:97:0b:aa:d3:33:85:70:cd:55:d0:24:56:
3f:df:98:cb:98:f3:bb:8a:57:d5:a0:3b:d8:65:51:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:A1:C0:A1:7F:C4:DF:A1:3D:8F:0A:5A:C6:D5:28:9F:9B:FE:D9
X509v3 Authority Key Identifier:
keyid:CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ad80::/32
Signature Algorithm: sha256WithRSAEncryption
27:ef:5b:47:86:67:5a:9c:a6:ff:67:8f:ec:af:c4:c3:6c:11:
fb:18:41:e6:d5:92:a0:d3:b9:87:c5:20:02:7b:a8:97:ff:df:
e6:2d:81:c1:94:8f:35:be:80:8f:17:40:d8:89:17:b4:49:df:
1c:6d:8a:14:71:f4:39:0f:08:1d:3f:ea:fe:d7:dc:48:40:8f:
09:11:40:21:39:14:c9:d4:05:f6:58:e7:e1:04:9a:96:4e:d2:
6a:0e:f5:4e:5f:70:90:c5:c9:af:90:5e:c5:b5:7b:b2:cc:90:
02:0d:2c:16:ea:ea:86:09:24:a9:68:a0:e8:8a:2b:2c:cc:5e:
4f:f7:6c:74:56:cf:2e:bb:58:3d:69:5d:73:cf:d6:a4:e5:7e:
5b:69:e1:75:c9:00:eb:4d:ff:f5:b3:d6:f2:09:98:c1:5b:ac:
54:4d:90:2a:49:0a:1c:6c:84:91:2c:87:fe:79:c2:e5:09:e8:
05:f7:d8:d1:ed:cb:fd:b1:da:f2:c2:c7:09:8b:43:50:ae:64:
76:a3:05:67:65:a5:7f:bb:1a:6e:f1:5a:c6:d9:77:24:49:cc:
b4:c0:6f:24:b2:20:c3:b9:ec:a2:f8:8f:51:c6:4d:ba:27:04:
c0:07:45:fc:62:b0:c9:cd:56:b3:9b:23:27:fc:71:4f:58:6b:
4a:76:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:42 2025 by rpki-client