Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa
File: 323830333a346436303a3a2f33322d3438203d3e20323639373638.roa (raw, json)
Hash identifier: xKmOhly2zuvyejd6Z1uVgRo2Cun6lcacqvjtnjgzEbA=
Subject key identifier: 49:14:A7:C4:5E:E2:A3:06:B6:05:AC:FB:2A:EC:B7:84:F1:57:DB:58
Certificate issuer: /CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
Certificate serial: 6F0B2940DE08B5A7AF33B7FDE3DB3CD87C66A466
Authority key identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa
Signing time: Tue 04 Feb 2025 18:02:28 +0000
ROA not before: Tue 04 Feb 2025 17:57:28 +0000
ROA not after: Tue 03 Feb 2026 18:02:28 +0000
asID: 269768
IP address blocks: 2803:4d60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:0b:29:40:de:08:b5:a7:af:33:b7:fd:e3:db:3c:d8:7c:66:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
Validity
Not Before: Feb 4 17:57:28 2025 GMT
Not After : Feb 3 18:02:28 2026 GMT
Subject: CN=4914A7C45EE2A306B605ACFB2AECB784F157DB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:bb:7a:17:ae:c4:f5:af:a3:6e:0b:93:8c:
1e:6c:d9:d5:7b:f6:0f:11:f7:0a:44:f7:7e:ce:b9:
d1:87:35:77:32:26:4f:9f:95:11:eb:bf:6b:a1:1b:
26:8a:0d:26:fd:58:79:7c:80:70:10:23:4f:ce:e8:
02:9e:00:ae:97:10:0a:15:e6:bf:c2:cc:47:38:3c:
4b:3f:90:ae:fd:b5:f4:63:d5:b1:45:a0:2b:6d:60:
33:fb:39:88:a7:85:5c:7c:68:4d:c5:a0:f2:be:ee:
bc:c0:ff:c5:f9:06:c6:f6:a1:88:db:7c:93:4d:b9:
aa:2a:d9:ac:6f:05:7a:b2:ba:65:b7:f9:f2:9f:fb:
f2:d8:d7:34:78:3e:74:af:f8:2a:68:ec:3e:65:dd:
13:d0:99:6b:89:26:2e:ed:d3:53:0f:d0:e9:79:2e:
2c:6a:aa:9b:19:d5:08:0b:0a:5c:50:78:3c:8b:71:
d0:30:7b:97:ce:4d:59:a5:11:10:e9:61:b6:d4:d6:
b6:9b:3e:2f:fe:78:ed:9f:48:35:b6:0e:8b:38:74:
40:98:fa:83:49:c0:d3:e9:a2:86:0f:d7:e1:0a:18:
01:00:a3:e8:98:83:76:f3:39:ee:26:77:0c:39:8b:
f0:8f:e8:31:05:7b:1e:ae:ec:75:21:86:be:4d:38:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:A7:C4:5E:E2:A3:06:B6:05:AC:FB:2A:EC:B7:84:F1:57:DB:58
X509v3 Authority Key Identifier:
keyid:B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4d60::/32
Signature Algorithm: sha256WithRSAEncryption
86:f6:20:ff:60:cf:22:c9:d8:63:97:51:57:fd:72:74:1f:49:
61:b0:be:1b:c0:64:a0:70:e3:fa:28:d3:72:5b:ba:79:f3:18:
0e:47:56:d6:2c:65:25:14:84:88:34:93:d8:4f:b1:0a:cc:a1:
9a:47:fc:2f:17:b5:28:7c:c8:59:d0:90:e0:0a:c8:40:dd:f6:
29:69:30:03:8d:ee:c1:e7:35:da:ae:4d:01:1a:49:0d:99:25:
f6:8e:8a:90:a1:e6:b6:14:c9:40:1e:ee:f7:b8:f5:98:33:a1:
f7:d0:76:04:71:22:e8:55:3a:f1:d5:27:be:21:48:24:33:e3:
54:5f:90:a6:70:2e:6a:91:dc:18:54:e6:dc:64:67:63:9a:8c:
fe:cd:41:1e:a6:d7:46:8b:45:fa:9f:5c:95:1c:2d:0b:e6:67:
bf:cc:0f:a8:9b:87:ca:1b:c5:73:0c:2a:2d:ea:3e:39:cc:75:
34:c6:97:86:c5:22:dc:96:a2:79:82:36:74:4a:d0:28:5b:a8:
3e:32:3a:65:34:ae:08:36:c3:11:e4:2d:e8:7d:b6:49:c6:6d:
a3:ed:e7:31:ff:37:17:46:04:5e:ae:5c:cd:7f:4f:53:1d:58:
1c:fb:e4:4e:5e:cd:ff:e3:d4:68:8e:c7:01:e8:a7:e6:24:9d:
4b:e6:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:12 2025 by rpki-client