Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa
File: 323830333a313932303a3a2f33322d3332203d3e20323636363731.roa (raw, json)
Hash identifier: EkMAlrlxco95nILzCoqfQyuVS6+juCMN4EI8i5HGmH0=
Subject key identifier: 4C:1C:AD:DB:56:9A:DF:E6:CB:57:15:F8:CF:5E:11:AB:DB:B8:4D:F8
Certificate issuer: /CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
Certificate serial: 16B6C830B71BCF5760067C0D279883186025E428
Authority key identifier: 49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa
Signing time: Tue 04 Feb 2025 18:30:52 +0000
ROA not before: Tue 04 Feb 2025 18:25:52 +0000
ROA not after: Tue 03 Feb 2026 18:30:52 +0000
asID: 266671
IP address blocks: 2803:1920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b6:c8:30:b7:1b:cf:57:60:06:7c:0d:27:98:83:18:60:25:e4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
Validity
Not Before: Feb 4 18:25:52 2025 GMT
Not After : Feb 3 18:30:52 2026 GMT
Subject: CN=4C1CADDB569ADFE6CB5715F8CF5E11ABDBB84DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ea:21:7c:79:b3:57:b2:30:8a:bb:5a:29:dd:
81:3f:db:50:5f:08:2a:f8:42:73:7e:a8:af:77:d0:
32:a4:9d:2b:b1:8f:33:c1:ba:9c:84:43:82:96:1f:
97:ea:c0:b3:e9:aa:f7:1d:cd:33:7f:64:51:81:41:
f1:49:2b:ae:c5:0b:cb:cf:46:6d:c0:9b:65:be:f9:
db:ac:74:27:4d:bc:71:78:73:aa:0d:82:c5:db:18:
a5:14:32:62:a8:36:85:12:65:ad:32:26:59:90:21:
44:ce:47:ce:86:3b:e8:39:5e:59:ca:a2:24:0a:d2:
86:99:4e:cf:a6:1a:27:89:bc:d6:c1:b0:5b:36:21:
29:d0:eb:96:f1:80:17:e7:c1:5f:27:2b:bc:e8:cd:
8a:3a:b3:8a:29:09:72:89:42:8a:ad:65:52:15:bd:
b6:d6:48:9d:bc:c1:23:a0:2f:75:9b:e1:d3:49:ed:
dc:6e:12:cf:59:05:63:88:15:06:84:e5:d5:5c:d4:
69:d0:63:4d:aa:1c:20:01:3f:13:38:d7:fa:37:62:
b9:fe:cd:a4:af:a6:9e:0d:9c:b4:92:6e:1c:a4:8a:
47:17:c7:61:62:e0:a2:4d:0f:3e:6e:fd:d1:53:76:
ea:5e:79:fb:5c:d1:6e:f5:c4:a1:ba:77:88:44:81:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:AD:DB:56:9A:DF:E6:CB:57:15:F8:CF:5E:11:AB:DB:B8:4D:F8
X509v3 Authority Key Identifier:
keyid:49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1920::/32
Signature Algorithm: sha256WithRSAEncryption
65:7c:3b:5f:fe:b7:51:1b:02:a0:d3:00:81:ed:47:33:8f:10:
ae:d0:4d:32:86:b7:dc:b8:61:5c:5f:53:27:98:71:5e:63:4f:
18:12:9f:8d:21:5c:d5:5f:52:03:3d:40:40:a1:fa:22:c9:a4:
0d:a4:0b:0a:80:7b:eb:68:e5:91:86:ca:05:f4:a3:e2:d1:8a:
65:ec:01:75:f6:39:1f:76:44:40:ad:cd:04:01:01:80:ad:dd:
ab:7c:49:b5:59:68:72:c3:11:cd:a2:69:bd:52:60:0f:72:ea:
d0:99:33:fb:fc:7b:65:f4:de:d5:a3:19:46:c2:6c:b0:3d:f4:
b1:c8:f8:a7:90:11:81:e1:df:96:97:76:29:87:f0:a4:01:2c:
39:72:af:6b:72:3b:cb:8b:db:64:ee:22:81:9e:b1:16:62:c8:
b9:c6:8c:ce:6e:3e:bd:9a:8a:99:16:17:23:d8:bb:65:be:a8:
ab:3f:29:3a:68:26:5a:d1:41:df:40:19:11:f3:d7:65:85:c3:
ab:8a:77:bb:d4:55:87:4e:6d:85:fe:48:02:d9:32:b3:d4:de:
1f:96:bf:26:56:5b:be:f7:86:17:9d:7c:e6:df:e8:c3:b1:5b:
0b:99:85:4f:cc:3a:d7:81:67:55:49:b5:88:66:1e:6f:61:4d:
47:9e:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:33 2025 by rpki-client