Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa
File: 323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier: qBSFuf8KI90sb++ohHeWqPJIKA8Ag3oz5mwbv2ErseQ=
Subject key identifier: AE:63:F1:6F:7A:49:05:66:00:C4:39:46:41:7E:92:41:B9:49:C2:E1
Certificate issuer: /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial: 326A9953C4411C504A1E636727636D8B07336BE1
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa
Signing time: Tue 04 Feb 2025 18:36:16 +0000
ROA not before: Tue 04 Feb 2025 18:31:16 +0000
ROA not after: Tue 03 Feb 2026 18:36:16 +0000
asID: 272854
IP address blocks: 2803:c290:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6a:99:53:c4:41:1c:50:4a:1e:63:67:27:63:6d:8b:07:33:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Validity
Not Before: Feb 4 18:31:16 2025 GMT
Not After : Feb 3 18:36:16 2026 GMT
Subject: CN=AE63F16F7A49056600C43946417E9241B949C2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:f8:ac:1a:10:15:57:5b:be:84:1b:0d:ce:
93:49:cf:69:66:56:16:dc:71:9e:a5:a0:dd:8d:37:
b0:6c:7c:bb:73:3c:b9:b2:00:5b:5c:f3:0d:57:d3:
ca:b7:56:46:ef:87:1a:f4:3c:e0:24:bc:5e:95:3f:
80:30:7d:cf:86:ab:fd:84:0f:8e:42:fa:e2:d9:ec:
5b:30:e6:cf:a1:79:3d:0a:d7:7c:19:f5:5c:77:3c:
21:b8:da:ce:07:c1:77:21:b1:af:8e:10:5b:2b:92:
37:02:39:61:72:c1:a5:2c:15:26:e8:75:d8:67:cc:
d3:86:b7:92:f3:67:39:b5:4b:2e:5d:c2:fb:81:e8:
05:75:b3:b1:28:f5:dd:41:87:e3:1a:07:e5:61:68:
4b:3d:3d:9d:57:1c:ed:48:14:71:4e:c5:a5:ed:cc:
0d:a2:97:6e:74:91:5b:68:3d:cd:d3:7e:86:35:7c:
e6:d5:f7:d0:17:b6:33:98:df:be:e1:f1:1d:56:6b:
b1:ce:69:d8:a5:e2:1c:8c:b5:31:fb:ec:ff:2f:e7:
3b:61:61:73:e2:ca:bd:7f:32:11:76:31:d3:c1:de:
c8:65:8f:05:bd:d9:13:7b:28:69:3f:8d:d9:37:92:
2c:4a:12:ec:fa:2f:42:3a:ac:6e:b2:48:84:e2:54:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:F1:6F:7A:49:05:66:00:C4:39:46:41:7E:92:41:B9:49:C2:E1
X509v3 Authority Key Identifier:
keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c290:200::/40
Signature Algorithm: sha256WithRSAEncryption
18:92:2a:ab:7d:c6:2f:b7:bc:1d:e8:72:df:c9:96:5e:19:21:
b4:dc:58:66:57:22:23:85:56:1a:9c:e9:78:c5:61:a1:c1:8d:
19:32:d6:c9:f0:91:d3:46:90:81:f9:3b:43:4c:ee:22:36:03:
4d:d2:bc:62:ec:6b:c3:89:3c:12:53:f4:73:7f:86:4d:44:28:
45:7b:0e:49:d7:a7:34:c3:2a:67:95:d6:aa:12:0f:77:65:27:
d8:38:2f:c9:22:a2:e9:13:7e:16:8c:b3:43:0c:68:ed:14:44:
4c:57:2d:89:30:d4:44:47:b6:11:ab:2c:c7:78:ef:ec:f1:28:
35:33:33:53:b1:68:36:7c:32:42:95:13:42:ae:e2:4e:cf:89:
78:37:f6:c7:66:e8:99:ae:36:f4:d0:95:43:c7:db:d9:f7:aa:
66:6d:d2:9d:c4:e7:fa:1f:a4:7f:b6:85:b3:eb:9e:44:e0:cc:
0d:f7:10:39:d4:4c:39:36:ea:da:d6:8f:ce:a2:9f:af:85:94:
ae:a5:2f:8a:1a:3b:b9:17:e6:ae:bf:13:69:2b:f2:d5:90:b5:
f9:e9:f1:d9:3d:c7:74:88:dd:b9:c3:c7:fc:68:2c:56:bd:91:
4c:c4:19:4d:15:ac:e5:b2:41:0f:34:5c:88:87:ab:3e:e1:59:
16:23:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:51 2025 by rpki-client