Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386230303a3a2f34302d3430203d3e203631343631.roa
File: 323830333a643730303a386230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier: dwG3VxBkV423uwLRilh9OcoElLkaZH052zxhCHiGtuU=
Subject key identifier: C8:84:55:52:B8:45:FE:8E:47:F5:9F:1F:B9:3A:AC:C6:6C:F9:08:84
Certificate issuer: /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial: 2945A7FEA53C424F2257E138D802B2718F29A34F
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386230303a3a2f34302d3430203d3e203631343631.roa
Signing time: Tue 04 Feb 2025 18:14:43 +0000
ROA not before: Tue 04 Feb 2025 18:09:43 +0000
ROA not after: Tue 03 Feb 2026 18:14:43 +0000
asID: 61461
IP address blocks: 2803:d700:8b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:45:a7:fe:a5:3c:42:4f:22:57:e1:38:d8:02:b2:71:8f:29:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
Validity
Not Before: Feb 4 18:09:43 2025 GMT
Not After : Feb 3 18:14:43 2026 GMT
Subject: CN=C8845552B845FE8E47F59F1FB93AACC66CF90884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:46:82:66:8c:33:9c:ba:1e:c3:e6:c7:5c:
80:88:bb:ba:90:ff:ca:21:0b:61:85:d3:61:6c:47:
6f:74:19:73:56:9f:43:75:c0:52:0f:1d:a4:8a:ee:
06:81:c3:07:65:79:3e:b4:36:76:18:76:0c:23:75:
34:ef:be:ac:20:4e:3a:b8:aa:b3:82:97:a5:31:d8:
c5:24:f7:3a:71:94:10:c9:b1:90:e3:a3:bf:a2:39:
ac:34:75:89:b1:26:73:f8:c6:11:51:c1:e7:14:b5:
a7:0c:33:c4:e9:d4:9c:ab:bd:b2:66:64:8c:d5:6a:
26:bb:c3:bf:e0:78:ab:89:3d:28:9b:4f:8a:b9:b5:
69:35:f6:4a:39:01:49:56:c2:3c:42:69:ea:f6:3e:
a3:47:7c:37:f4:6b:c0:bd:cf:c4:50:47:8c:15:de:
0c:af:a0:f1:ba:a7:d9:77:03:73:0c:a4:69:18:7b:
b1:0a:fb:e9:88:2a:d3:76:fb:3a:e6:97:75:56:a7:
3b:fa:5c:0b:bd:3b:17:26:62:44:e9:33:35:e8:3f:
98:0d:76:93:49:8a:64:c9:30:b3:e0:f7:d1:dc:ee:
57:4f:ef:d2:b6:92:55:70:0b:46:87:a4:5e:8c:b5:
15:38:34:7b:89:8b:cf:fa:48:d6:67:b8:27:c5:88:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:84:55:52:B8:45:FE:8E:47:F5:9F:1F:B9:3A:AC:C6:6C:F9:08:84
X509v3 Authority Key Identifier:
keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386230303a3a2f34302d3430203d3e203631343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d700:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
d0:07:b6:07:5c:b3:58:bf:a6:17:60:e9:d4:5f:c8:40:8e:5d:
f1:aa:8c:37:e7:ab:ea:89:99:bd:61:fd:87:b8:68:d4:d7:f9:
fa:20:c4:05:8b:ab:a2:3d:49:f8:5f:14:b8:0c:d2:5e:18:c3:
1d:9e:ac:91:93:a0:d6:11:3a:dd:34:ae:78:88:59:e8:ed:76:
ea:61:48:9f:03:94:49:7d:23:b2:e1:d4:c3:01:7b:45:04:54:
d0:54:0e:45:d5:5d:71:2f:c0:ac:b3:67:92:0f:3d:8f:6f:83:
93:b0:ff:15:e2:d7:c8:43:39:8e:dd:14:d1:97:76:0b:ad:0d:
c7:c2:22:e5:bc:33:78:32:f2:ba:7a:e1:b0:62:95:c1:2c:71:
bc:8f:e3:d4:1e:12:a9:80:a1:38:48:ef:bc:09:ef:1c:18:ce:
d2:30:02:55:61:76:7c:98:58:50:25:95:10:fd:57:cc:2f:29:
17:b7:e3:2d:c6:79:f1:a1:54:94:78:36:45:b6:77:c4:87:b5:
3e:0f:63:0a:b0:45:b8:b9:f3:4a:2d:87:0b:77:d9:64:d1:c0:
cb:4f:56:c6:65:fc:6f:51:c3:b3:fe:55:ba:65:bd:b2:b2:8b:
0b:d1:a0:06:78:e9:9a:6e:2f:52:cb:c5:f2:4d:75:86:ed:bc:
29:eb:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:34 2025 by rpki-client