Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa
File: 323830333a643438303a3a2f33322d3438203d3e2038303533.roa (raw, json)
Hash identifier: ZN33/DKBcob7ip4NPfYo8k39EVdnLgI9b6XahKa7I8M=
Subject key identifier: 46:E9:40:D5:D5:1A:D4:16:89:05:92:A3:95:A7:8E:CF:35:DC:2D:CB
Certificate issuer: /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial: 6F28D6486A96B39026B1F9A028EE6F3D1E0C4220
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa
Signing time: Tue 04 Feb 2025 18:46:26 +0000
ROA not before: Tue 04 Feb 2025 18:41:26 +0000
ROA not after: Tue 03 Feb 2026 18:46:26 +0000
asID: 8053
IP address blocks: 2803:d480::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:28:d6:48:6a:96:b3:90:26:b1:f9:a0:28:ee:6f:3d:1e:0c:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Validity
Not Before: Feb 4 18:41:26 2025 GMT
Not After : Feb 3 18:46:26 2026 GMT
Subject: CN=46E940D5D51AD416890592A395A78ECF35DC2DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:89:71:e8:03:66:6d:f0:ca:3c:96:c1:d6:
ec:a0:26:bc:fe:54:a9:34:e2:e2:f4:41:1d:f6:d3:
fd:f3:16:4e:d1:ff:5f:03:c4:04:6e:92:95:4a:11:
9d:fb:06:86:c6:d2:bd:53:b9:43:e7:16:97:fc:6c:
29:b7:fb:da:7d:81:38:3d:a0:b6:74:ee:94:61:a0:
eb:8c:4d:8f:f2:06:bf:ad:36:61:95:86:58:56:d9:
ad:99:29:9b:81:e9:86:dd:7f:d7:ae:fa:20:cb:a5:
0c:9d:1a:0b:12:d3:47:3b:44:ae:e5:70:5b:0e:ba:
0e:fc:43:71:69:56:8e:76:18:bd:19:70:99:73:19:
18:9a:f8:55:d0:3a:f2:fe:30:e8:80:b7:f5:cc:c8:
c8:23:91:1f:6d:62:3c:30:07:f2:36:0c:03:82:7a:
bb:49:d8:05:c3:ad:8a:06:4d:20:98:2e:2a:4c:97:
fc:ba:fb:4a:37:44:a6:f2:f4:88:f2:d0:2b:d4:c1:
bb:f3:6d:ed:6d:9e:d9:6d:ae:a1:54:b0:d8:60:16:
34:04:b2:43:76:a4:b4:44:2c:1c:e5:c7:7a:34:97:
5c:af:e2:dd:42:c6:d6:09:e2:7e:ed:42:ef:2e:39:
5f:16:96:67:56:28:ab:c3:99:04:a7:2d:a0:0a:07:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E9:40:D5:D5:1A:D4:16:89:05:92:A3:95:A7:8E:CF:35:DC:2D:CB
X509v3 Authority Key Identifier:
keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/323830333a643438303a3a2f33322d3438203d3e2038303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d480::/32
Signature Algorithm: sha256WithRSAEncryption
77:e1:7b:4c:7d:41:7e:ec:80:ab:f7:68:c5:69:f2:f4:25:e6:
d2:3d:2d:1b:d7:66:ba:10:95:67:e2:68:74:2b:2b:b1:f1:15:
19:d8:ac:e2:7c:c8:99:f5:ae:40:2f:cf:cc:09:29:dc:13:8f:
38:20:40:3c:ec:8a:f4:18:cd:3c:90:2f:35:01:cf:0d:83:ff:
88:fb:a5:6f:7f:fd:f5:2a:43:b4:21:e8:4c:dc:72:fa:f9:3a:
78:dc:6b:d0:57:42:fa:c7:30:c4:9e:29:0d:dc:84:a4:f9:cb:
c0:d4:02:e9:fd:98:59:6a:eb:d2:9e:68:50:cb:46:dc:8e:27:
c7:21:d0:37:6b:26:65:42:47:2b:4e:a4:09:78:36:2d:a5:b2:
27:6e:ae:16:1e:a2:cb:91:b7:21:8e:9a:3d:e4:b0:7c:33:8a:
56:c4:c1:60:56:a0:b0:70:96:4e:25:2c:df:86:92:2d:98:76:
cc:62:43:5c:f6:5a:90:3a:6f:c4:f1:75:7e:68:d2:7b:dd:e5:
c3:29:3b:48:b5:63:07:03:6e:fc:29:fb:9c:88:11:60:c1:d1:
b2:bb:11:d2:2c:27:dc:15:76:56:ee:5a:45:71:3b:ad:fb:6e:
ef:e6:f9:08:95:e4:d7:91:8b:cb:65:79:8e:15:b8:e7:c0:68:
3f:cf:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:55 2025 by rpki-client