Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa
File: 323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier: xd8pnbn8iu8AsTN3XISxaVV2MFWUHW4jqJG6EK8L+ZA=
Subject key identifier: 0B:C8:FD:A5:89:4B:3C:D6:35:A6:FB:C4:58:0C:B3:99:81:31:FA:FD
Certificate issuer: /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial: 4B89B508D07B4ABD5C85686898764D96D5BD8497
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa
Signing time: Tue 04 Feb 2025 19:58:32 +0000
ROA not before: Tue 04 Feb 2025 19:53:32 +0000
ROA not after: Tue 03 Feb 2026 19:58:32 +0000
asID: 264830
IP address blocks: 2803:2c0:f100::/41 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:89:b5:08:d0:7b:4a:bd:5c:85:68:68:98:76:4d:96:d5:bd:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Validity
Not Before: Feb 4 19:53:32 2025 GMT
Not After : Feb 3 19:58:32 2026 GMT
Subject: CN=0BC8FDA5894B3CD635A6FBC4580CB3998131FAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:04:11:62:0a:83:06:d8:e5:fa:2d:bf:f6:
ba:27:6e:94:ad:ba:54:7a:d9:a0:6b:5a:6a:8b:c6:
85:ac:69:9a:34:21:83:81:7a:c6:83:a4:a5:49:f8:
90:44:df:c2:d0:a0:ff:d0:72:5d:e6:7c:35:fa:ae:
bd:b8:f4:32:7f:3c:fa:1a:b5:6e:d5:d8:a0:6f:d4:
a3:79:2b:fc:ea:36:60:57:bc:32:e2:17:ca:39:8a:
73:61:a1:ca:8d:7b:d0:70:1f:5c:a6:5d:01:1b:62:
cb:a5:47:d8:9f:6a:3a:91:6e:ec:95:a4:3b:1f:c8:
5a:8c:37:99:d9:8b:e4:0b:4c:95:64:24:fa:e6:f8:
19:bd:b3:54:59:48:28:96:01:3e:de:7d:57:ff:c6:
ce:45:b0:f6:54:6c:0e:fd:b0:db:97:1f:c8:aa:fe:
51:4d:76:6b:30:b6:73:29:5f:e6:92:91:ce:95:e9:
9f:06:ca:2a:52:66:87:b4:fe:79:15:6a:ad:4f:d4:
23:1c:f0:75:60:23:ed:c1:5f:08:69:c8:60:ee:4f:
68:d9:7c:02:30:30:70:e5:46:58:8e:ea:de:58:47:
cf:f6:98:a4:f3:84:a1:c3:1d:21:c5:3d:0a:7c:5e:
06:8e:72:2e:5e:6a:8d:2a:d2:64:7b:3a:f2:d5:7f:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:FD:A5:89:4B:3C:D6:35:A6:FB:C4:58:0C:B3:99:81:31:FA:FD
X509v3 Authority Key Identifier:
keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663130303a3a2f34312d3432203d3e20323634383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2c0:f100::/41
Signature Algorithm: sha256WithRSAEncryption
8b:66:cb:9c:bc:1b:61:b2:a8:6a:91:8c:39:cc:b3:70:e9:c4:
ad:e9:09:82:3f:61:15:25:5f:61:2a:d9:28:f4:53:98:af:f7:
83:42:4a:82:0f:f6:36:66:44:78:30:7b:05:73:b7:ee:f0:a9:
2b:f9:f9:aa:f0:a1:5b:1e:ae:b9:6d:f7:aa:24:53:66:ca:49:
e6:ec:df:55:ff:da:ba:1e:21:6a:65:4f:80:81:70:27:71:c6:
ba:18:da:c5:e6:9e:43:b0:ef:ae:4f:e0:7f:1d:79:a9:01:4e:
16:32:ed:83:f7:81:68:de:a2:9b:12:f7:e9:23:81:cc:2b:2c:
f8:a6:bc:66:f4:c3:5c:65:04:2e:9b:68:3f:8b:f2:0c:9d:1f:
dc:e3:a1:8d:3b:bf:3a:5e:f1:87:d1:92:3a:21:08:b2:ef:66:
0a:1f:b7:05:03:30:0c:c9:42:b6:59:01:8c:f6:3d:e0:34:2b:
a1:bd:51:b5:ac:7e:06:38:4f:ce:2f:8e:2d:5f:3c:42:a0:26:
fd:d4:41:76:6f:40:f2:0f:77:83:18:63:87:69:5c:ea:97:bf:
a2:23:cf:f1:b0:6f:f3:22:19:08:4f:90:b1:c6:14:83:18:6d:
f3:5c:67:c8:c6:da:ac:eb:25:0a:8e:ae:cc:51:48:5b:24:bf:
9e:1e:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client