Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa
File: 323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier: PGlxOnzf361yUK7CQ1qQjuPs7OufDrKnhmTKXbFZAS4=
Subject key identifier: C9:A5:86:59:77:FB:B1:3C:3F:35:34:8A:64:ED:8A:D4:CE:47:35:AA
Certificate issuer: /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial: 5257A969227C474351BFCE22D0C12A428E743141
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa
Signing time: Mon 10 Feb 2025 20:09:29 +0000
ROA not before: Mon 10 Feb 2025 20:04:29 +0000
ROA not after: Mon 09 Feb 2026 20:09:29 +0000
asID: 262182
IP address blocks: 2803:f00:64b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:57:a9:69:22:7c:47:43:51:bf:ce:22:d0:c1:2a:42:8e:74:31:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Validity
Not Before: Feb 10 20:04:29 2025 GMT
Not After : Feb 9 20:09:29 2026 GMT
Subject: CN=C9A5865977FBB13C3F35348A64ED8AD4CE4735AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:13:64:8e:5a:51:0b:a4:9b:cf:f4:23:09:
b3:c1:c2:ef:9d:ae:b5:c0:de:b4:c9:0b:9f:d9:0c:
1f:04:bc:9f:aa:fc:4d:34:f8:b9:71:84:69:c3:0b:
93:d1:56:65:19:ff:fe:a4:87:89:bf:3c:69:69:a1:
f4:5a:75:58:dc:02:ab:80:20:4e:1f:ac:3f:a8:cd:
a6:0c:ff:46:32:20:38:e2:a5:9c:01:a8:0d:fe:41:
20:6c:24:e5:c9:7a:32:39:08:97:bc:b0:c9:12:95:
e8:a4:8b:a6:34:e5:11:42:8b:51:75:d0:5c:04:5f:
1e:e8:2b:53:cf:0d:b5:34:c1:a8:66:7e:29:71:eb:
51:0e:11:90:b6:1c:64:b1:72:c5:b8:96:30:cd:57:
a3:71:c8:78:5f:3f:2d:e6:d1:d0:51:eb:c1:bd:3e:
59:80:31:90:e8:10:dd:6b:31:fa:c6:97:85:6f:0a:
d5:f4:b9:e8:7f:67:04:58:55:60:89:80:6d:6c:3f:
87:0e:eb:69:1a:51:bc:09:ea:db:10:c8:1a:99:2d:
26:81:23:3f:3c:39:0c:42:20:67:1b:c7:54:90:70:
2f:25:ee:f7:83:1d:d2:4b:fd:05:e4:5c:52:ed:30:
01:9f:04:7f:e2:f1:4f:b5:77:2d:a6:17:95:96:b6:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:86:59:77:FB:B1:3C:3F:35:34:8A:64:ED:8A:D4:CE:47:35:AA
X509v3 Authority Key Identifier:
keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f00:64b::/48
Signature Algorithm: sha256WithRSAEncryption
a7:24:c6:c7:b4:5e:5f:da:9c:dd:45:25:68:69:f2:46:0d:ad:
53:ab:3a:23:4a:b6:a1:f7:62:10:54:4a:1a:dc:11:c0:53:dd:
1d:6e:12:9e:7f:25:ab:80:61:e7:40:a6:85:4f:e9:e9:36:91:
3d:48:4d:8f:9d:fa:fc:51:6c:13:c7:26:0b:c5:9e:22:2d:0d:
77:ad:cb:03:87:14:73:26:1b:ea:95:f8:16:dc:fb:97:2b:0a:
03:e0:ab:07:d3:40:bf:e5:1b:38:84:b9:7f:5d:8c:f7:81:53:
94:d8:d1:56:c8:65:59:91:f6:26:dd:e5:df:e4:52:cb:50:dd:
60:8f:e2:3e:1a:1c:9e:4e:95:5c:9a:f2:ca:23:77:57:f1:c7:
2d:e1:db:85:bc:3f:9f:df:af:19:ce:04:50:bf:ba:97:3e:3a:
6f:d7:48:ec:70:21:db:44:d3:22:29:7f:ed:44:51:77:0e:19:
d8:fb:83:7b:62:08:03:d5:4b:68:da:8f:c8:b3:da:48:f5:12:
e6:d8:f9:59:54:3c:20:5e:4a:af:47:da:80:cb:b8:d3:b1:9a:
f1:27:ac:70:d9:31:ff:cc:46:23:df:b1:a2:c4:c3:1f:fe:4d:
0e:40:ce:11:d1:e6:f1:f6:ec:6b:44:01:c4:38:98:07:eb:27:
90:66:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:22:25 2025 by rpki-client