Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030653a3a2f34382d3438203d3e203532333734.roa
File: 323030313a313363373a363030653a3a2f34382d3438203d3e203532333734.roa (raw, json)
Hash identifier: Pc6Xtm+NBcTKEmkOFAH8ubnsjDW/ElrvV1AKwLc2JEs=
Subject key identifier: EF:33:DB:FD:78:9B:BD:56:80:27:6C:5C:B7:FF:90:1D:0E:B2:66:1A
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 20C1D292C38D37EAD741583633427373DDA68A39
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030653a3a2f34382d3438203d3e203532333734.roa
Signing time: Tue 04 Feb 2025 18:35:05 +0000
ROA not before: Tue 04 Feb 2025 18:30:05 +0000
ROA not after: Tue 03 Feb 2026 18:35:05 +0000
asID: 52374
IP address blocks: 2001:13c7:600e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c1:d2:92:c3:8d:37:ea:d7:41:58:36:33:42:73:73:dd:a6:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Feb 4 18:30:05 2025 GMT
Not After : Feb 3 18:35:05 2026 GMT
Subject: CN=EF33DBFD789BBD5680276C5CB7FF901D0EB2661A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:6e:c9:45:90:05:62:20:18:d5:dd:33:19:
22:47:a0:8d:60:9a:e5:f1:e3:ec:4f:f1:3f:95:d1:
f7:42:6f:b0:6c:ea:2a:6d:66:1d:4f:1c:04:6f:72:
5d:79:df:c5:0c:f2:cb:f0:77:89:c3:7f:02:c8:57:
62:8c:75:7f:f6:ea:1d:60:90:54:33:01:46:32:da:
b4:12:ce:63:6e:1a:4f:04:34:6b:eb:77:20:e4:71:
cf:9a:70:f1:84:ea:53:e0:e6:9d:29:97:24:ee:92:
e3:3e:21:51:f7:9f:ad:1a:c9:1c:70:5e:50:2d:2e:
a8:bf:ff:95:a3:cf:85:dd:26:28:45:7e:10:ef:04:
7c:88:4a:42:9e:e3:36:14:3d:a2:aa:0f:39:5b:b0:
52:54:fb:64:2e:ce:47:e0:b6:f6:a6:cb:b5:b7:02:
2c:b0:33:bc:b9:7b:76:43:8e:bc:01:28:3e:29:00:
18:d5:72:76:bb:77:18:96:cf:44:b2:e7:5d:35:41:
02:ab:31:0e:9c:9c:17:35:0d:63:13:51:c0:7a:7a:
41:4a:22:1a:ec:64:8e:c9:6f:b8:e6:b3:74:83:cc:
da:7c:bb:1f:3a:c4:e2:35:fb:a0:6b:6d:48:9d:9a:
54:52:6d:69:88:96:78:dd:fd:02:05:33:91:5c:6b:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:DB:FD:78:9B:BD:56:80:27:6C:5C:B7:FF:90:1D:0E:B2:66:1A
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030653a3a2f34382d3438203d3e203532333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:13c7:600e::/48
Signature Algorithm: sha256WithRSAEncryption
c4:eb:63:2d:b5:e6:3a:17:99:10:93:db:cb:e8:05:97:e6:31:
bd:70:07:5c:53:dc:be:27:2e:9f:1a:9d:e6:4d:ce:cc:56:e3:
d9:1c:77:13:f0:0a:70:94:61:a4:e8:03:f6:1f:a8:41:4e:29:
61:d6:09:7f:cb:cc:b4:7a:c0:bc:a6:d7:10:c2:7b:57:64:88:
64:28:5a:94:45:f9:34:26:a5:e0:11:42:e7:da:24:73:60:c3:
44:5c:c4:36:3a:a4:b8:e7:f4:b4:ea:ae:66:26:0b:2a:3f:11:
3f:e5:af:52:d2:e8:1b:65:11:8a:d8:23:ee:fc:41:c2:b3:04:
81:55:0f:e0:ef:ee:98:0d:ee:db:b0:d7:b2:cc:4b:2e:44:fc:
37:bd:31:84:9c:b8:d7:85:9f:2a:3b:5a:77:68:4a:96:ca:ed:
e0:6e:e6:45:2c:e0:da:aa:20:03:91:93:ab:bd:b1:a1:00:d6:
bd:01:74:33:b9:95:55:b6:f7:6b:d9:fd:40:77:af:98:bb:6c:
63:2e:4a:f4:e9:55:41:28:67:5f:2c:3b:6b:ed:32:ac:31:50:
ea:8c:fb:39:65:88:2b:f3:f1:05:ff:ae:e1:eb:24:70:26:b5:
6c:59:9d:45:26:1f:48:1b:2b:3b:36:9f:a4:53:eb:75:87:e2:
77:d8:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:39 2025 by rpki-client