Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: Aq19bHGezD8Uw7TFu4tX5et4obxnS6jNdf+zmERjlBI=
Subject key identifier: A1:0A:8D:65:6D:7B:F6:C3:5F:3F:68:CE:12:76:76:5C:06:1C:B5:C3
Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Certificate serial: 7C0DCB93B170C7BBE7EF8F00BF4C14B7C7389F2D
Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 04 Feb 2025 18:36:45 +0000
ROA not before: Tue 04 Feb 2025 18:31:45 +0000
ROA not after: Tue 03 Feb 2026 18:36:45 +0000
asID: 14080
IP address blocks: 2801:19:1800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0d:cb:93:b1:70:c7:bb:e7:ef:8f:00:bf:4c:14:b7:c7:38:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Validity
Not Before: Feb 4 18:31:45 2025 GMT
Not After : Feb 3 18:36:45 2026 GMT
Subject: CN=A10A8D656D7BF6C35F3F68CE1276765C061CB5C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:d0:dc:02:0a:52:fa:b2:43:3a:e6:77:34:
bd:1e:50:f6:2f:57:8b:2d:5d:e8:67:d0:4a:cb:bd:
5a:51:91:79:fa:d5:db:4f:c1:34:43:41:b5:b3:a6:
25:ac:63:3d:76:61:71:27:7a:e9:65:0c:d8:c1:93:
bf:2f:56:e7:bd:d0:1f:be:d0:5d:42:03:6b:84:a3:
66:ed:c1:ac:46:aa:b0:ce:5f:a2:d0:86:d1:ff:f5:
39:22:fc:e0:c9:83:b4:3b:02:a7:87:b3:e4:d8:fc:
b6:ff:0a:7e:c8:db:ec:38:ee:b3:29:30:a5:52:80:
d5:8e:b1:0b:d0:71:49:ac:16:68:24:e1:b3:68:4c:
06:f3:36:bb:b2:3e:03:93:a4:87:45:d6:7c:bc:f9:
75:31:8d:da:b5:e9:13:b8:95:f6:df:7b:8e:ed:96:
06:fc:9c:b5:62:25:25:46:3a:d5:6a:ec:90:77:f5:
c2:25:f2:db:36:e9:cc:b8:c3:c2:3e:60:06:d4:be:
6a:64:bb:37:b2:97:06:c3:eb:3d:0b:91:5d:a6:75:
c0:00:b3:58:11:36:51:52:e3:ea:99:13:c3:29:d6:
3f:91:6e:8d:19:ab:f7:9a:65:0f:e1:86:22:d7:13:
81:2b:0b:fd:4f:86:f0:e8:00:f8:cc:94:5f:e7:ba:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:8D:65:6D:7B:F6:C3:5F:3F:68:CE:12:76:76:5C:06:1C:B5:C3
X509v3 Authority Key Identifier:
keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:19:1800::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b4:b6:66:a4:bb:e7:4b:9e:5f:c0:02:82:4e:61:79:34:9f:
6b:26:5f:2a:34:30:63:20:67:c5:db:b0:4d:39:34:d9:4d:0b:
2f:49:1b:36:f5:5a:02:4a:de:95:da:f0:22:aa:e7:84:f2:0a:
09:ec:a0:b6:0e:04:a5:d9:bd:94:78:b6:c2:83:d9:0e:c7:ae:
f6:9f:4a:2c:34:97:cb:3c:cb:55:a1:ae:14:e9:fd:cb:27:82:
5c:31:89:16:23:c0:53:c7:d0:97:82:b5:d6:d1:c6:03:1b:af:
11:8a:d8:bb:a1:d4:60:39:f5:e1:0f:98:19:56:09:c2:71:9f:
c8:00:4a:db:c7:70:01:4e:f3:4f:72:c7:a4:99:b0:e0:40:c1:
b6:70:20:e0:5a:c0:23:44:39:ba:42:41:66:a1:b6:69:57:cc:
43:14:a9:29:4b:3e:9d:c3:5d:ba:22:96:37:d3:89:dd:a1:fc:
9f:ca:cb:ff:1b:2e:d1:25:f0:63:88:71:9c:71:46:d6:58:85:
6b:b9:07:9a:ae:03:8c:3a:2f:33:f3:ed:9e:e5:95:27:4e:0f:
bc:1f:c3:cc:d1:43:cd:0f:88:cf:c1:ba:fd:fd:a4:85:d5:8a:
54:f7:3d:42:f1:95:11:5e:2c:ee:0d:60:be:0c:c6:d6:6a:d4:
c7:57:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:26 2025 by rpki-client