Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa
File: 323830333a343161303a3a2f33332d3335203d3e20323637363931.roa (raw, json)
Hash identifier: f4pF4yY+1+H9JWnBmoDbXCqPMs/2/vn0AdnK1I/JG9g=
Subject key identifier: 47:5D:0D:76:C2:4E:CD:DC:22:21:1B:57:0C:BC:C0:1C:AE:09:C9:63
Certificate issuer: /CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
Certificate serial: 12AD51BFBB7C5D39F4E0890E684EA0412B74F810
Authority key identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa
Signing time: Tue 04 Feb 2025 17:59:55 +0000
ROA not before: Tue 04 Feb 2025 17:54:55 +0000
ROA not after: Tue 03 Feb 2026 17:59:55 +0000
asID: 267691
IP address blocks: 2803:41a0::/33 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ad:51:bf:bb:7c:5d:39:f4:e0:89:0e:68:4e:a0:41:2b:74:f8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
Validity
Not Before: Feb 4 17:54:55 2025 GMT
Not After : Feb 3 17:59:55 2026 GMT
Subject: CN=475D0D76C24ECDDC22211B570CBCC01CAE09C963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:1b:65:66:77:21:2c:02:eb:26:bd:0f:8e:
fb:dc:28:96:c1:83:5d:27:64:e0:84:bd:13:a3:05:
63:7d:76:b0:67:36:28:5e:a4:1f:4b:d5:e3:10:31:
87:79:f0:9d:06:71:8d:80:15:f9:f1:52:91:fd:17:
52:a8:5e:0e:d2:38:e4:af:ab:db:39:2c:44:51:5d:
34:e2:4d:07:95:cf:87:d4:c3:cc:dd:09:27:dd:37:
6b:93:36:95:b0:3c:71:7a:ff:a3:7a:6b:ea:da:4b:
9a:28:37:55:04:93:e4:09:5c:79:54:d2:47:90:71:
e8:40:df:3b:61:06:0e:ad:d2:e6:dd:09:6d:d5:72:
8d:bd:74:85:0d:f4:b0:af:13:1d:95:e8:16:83:82:
be:86:ab:da:7b:0b:26:bf:4a:bd:e9:10:aa:28:28:
60:c6:e6:22:f6:2e:e5:ea:92:5a:46:56:9c:de:c9:
61:5b:b4:97:28:e1:67:ae:89:db:00:fc:c1:64:b4:
02:46:2e:e0:d2:58:ea:86:18:b2:37:d5:5c:e4:1f:
0a:7d:c4:23:d6:ff:17:e5:ac:a1:19:2a:05:c2:2c:
48:c6:ff:fe:ef:21:64:98:af:59:f1:f9:94:80:ef:
f6:31:ce:8d:1d:ba:89:4e:8f:16:3f:d3:d8:f7:d7:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:0D:76:C2:4E:CD:DC:22:21:1B:57:0C:BC:C0:1C:AE:09:C9:63
X509v3 Authority Key Identifier:
keyid:64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/323830333a343161303a3a2f33332d3335203d3e20323637363931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:41a0::/33
Signature Algorithm: sha256WithRSAEncryption
76:b9:f1:67:ca:b5:92:43:26:c2:cd:46:d9:e1:ae:70:5e:0e:
04:2d:3f:25:e9:73:65:fb:bf:38:75:83:5b:0c:e8:84:30:13:
59:98:46:46:91:7b:a0:3c:6b:6f:3e:b0:7d:40:01:b3:8c:fa:
a7:26:e9:63:d7:05:1a:d9:c7:06:59:4e:10:20:b7:8d:8a:cf:
7c:53:4a:83:8b:9a:f2:7c:85:77:db:a7:bd:0d:83:a2:30:e8:
c5:e7:6f:34:99:b0:2a:9b:bf:4e:64:4a:c9:b2:af:24:58:73:
2d:86:27:91:3d:b6:e1:41:32:9b:69:fa:12:ed:c3:a4:09:b7:
99:ab:5f:11:03:ab:70:97:63:99:5f:f7:6b:f5:91:11:19:d0:
9d:14:08:bd:33:5f:7c:c3:41:92:75:a2:61:5d:2b:47:68:b9:
68:48:82:a1:b5:d8:66:21:85:a5:14:be:c4:7b:34:51:47:d9:
7f:21:48:46:7c:4a:bd:48:86:6e:00:f6:e9:e6:f1:2c:b8:3b:
93:6a:9a:cb:2b:9a:46:ec:a6:6e:ed:b8:64:eb:89:8d:12:e2:
a5:48:ea:f2:2c:d9:91:67:dc:64:bb:01:84:8b:61:c6:4b:48:
b6:1c:5f:00:b0:03:36:89:94:ab:2f:38:e3:66:fb:36:bd:eb:
d0:a7:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:41 2025 by rpki-client