Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
File: 323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier: LKWJVpyoRFRVggaDT3JwK5MbBhAODTEAP8uIWW8CLpE=
Subject key identifier: A1:4E:78:B4:B1:11:B2:A6:3E:AD:30:D4:EC:EC:BC:68:05:1B:48:08
Certificate issuer: /CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
Certificate serial: 416125544DDB81FB5B1B671598F4AE268069201C
Authority key identifier: D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
Signing time: Tue 04 Feb 2025 18:51:11 +0000
ROA not before: Tue 04 Feb 2025 18:46:11 +0000
ROA not after: Tue 03 Feb 2026 18:51:11 +0000
asID: 19429
IP address blocks: 2801:1f:3800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:61:25:54:4d:db:81:fb:5b:1b:67:15:98:f4:ae:26:80:69:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
Validity
Not Before: Feb 4 18:46:11 2025 GMT
Not After : Feb 3 18:51:11 2026 GMT
Subject: CN=A14E78B4B111B2A63EAD30D4ECECBC68051B4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:1e:9b:5f:d1:42:32:d5:69:e3:ad:57:b7:
39:c2:d0:fe:22:01:86:ce:40:e0:59:77:65:06:d8:
57:c5:49:de:79:be:b8:6a:2d:29:7b:a6:32:a0:09:
71:16:3d:0f:1f:88:60:29:4e:c2:b1:7b:f6:18:b2:
2a:c5:3d:02:f1:5a:67:d6:36:a7:ff:93:cf:c5:1f:
1f:ef:cd:d9:35:09:19:fc:85:ef:5a:6b:9c:aa:bf:
a2:36:7d:56:2c:06:a3:2e:75:62:95:67:2c:be:0d:
4d:63:d1:b0:95:97:8b:ad:1e:eb:9b:7e:a1:9f:4d:
62:4d:22:89:6a:3c:c5:82:ef:e6:5d:f1:3c:93:90:
a2:ae:4a:0f:f0:c4:97:00:35:e9:0c:db:c9:4e:d2:
51:e8:ba:17:0b:e5:ce:36:4b:41:02:7e:f5:ea:3a:
b7:ec:2d:58:1f:70:30:cd:ee:9f:fa:8f:60:3a:8d:
1a:67:24:b5:96:26:00:67:40:b4:c2:52:92:43:19:
c7:70:7c:bb:59:35:39:a2:a8:3d:f1:e1:bb:c2:fb:
bf:a6:a9:15:39:0b:27:89:cb:e8:d8:93:b4:a1:89:
a0:ba:d2:b6:38:15:f6:1d:a4:39:d8:50:57:88:a0:
ea:4b:91:6d:b3:99:f9:e7:be:db:f5:b6:c9:b7:4c:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:78:B4:B1:11:B2:A6:3E:AD:30:D4:EC:EC:BC:68:05:1B:48:08
X509v3 Authority Key Identifier:
keyid:D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f:3800::/48
Signature Algorithm: sha256WithRSAEncryption
64:d8:b6:5f:fe:c7:e7:82:14:8b:c0:e5:37:20:4b:38:ef:96:
e3:5a:42:25:85:40:12:0c:2f:9b:7f:45:03:e9:30:9a:ed:13:
b6:6f:a5:1d:3a:c3:e2:63:28:56:9b:02:6b:2a:7f:8f:27:9e:
52:62:7f:56:45:0f:d0:3c:a7:c2:a6:a5:1c:bd:dd:ac:83:13:
65:99:14:d9:d1:a2:94:73:62:23:e9:81:d3:7d:79:b2:91:78:
ac:6f:d4:34:09:4a:62:49:ed:0b:ab:ba:7e:e8:f5:0d:6a:f9:
ea:f0:6b:13:0c:22:ee:81:00:51:4e:ab:60:b5:a8:f7:ee:0c:
11:e1:9a:49:36:3f:a7:fd:93:5a:6c:86:ac:d0:6e:e3:25:53:
60:26:16:01:dd:8e:ce:77:09:2f:e1:a6:51:93:55:dd:0f:fe:
b1:ac:1b:df:9a:82:e5:12:44:9f:70:9a:ba:91:d1:a9:e5:de:
5c:9b:24:9f:1a:4d:43:da:ba:56:29:6c:11:30:13:fb:22:47:
d9:9a:4b:ee:2b:46:dd:f8:17:c9:32:50:b3:42:3a:ad:20:00:
ee:3e:2a:e4:00:d5:ef:94:d1:6f:00:e9:c1:ab:c9:89:e5:f5:
2f:85:24:73:4b:68:c3:17:6d:1f:55:b9:4d:6d:2f:1a:12:0e:
cf:3d:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:13 2025 by rpki-client