Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/323830333a356163303a3a2f33322d3438203d3e20323635363333.roa
File: 323830333a356163303a3a2f33322d3438203d3e20323635363333.roa (raw, json)
Hash identifier: 8yhKXeIHbOBBIAzMIby9oxv2mSP/1lK9mPk2cInNpx0=
Subject key identifier: 4E:27:66:EB:50:95:23:1C:B9:9E:D7:7B:44:FB:4C:11:9D:28:2B:0D
Certificate issuer: /CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
Certificate serial: 2128428D276579024E5F1ADE0E22615E30F49F67
Authority key identifier: 64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/323830333a356163303a3a2f33322d3438203d3e20323635363333.roa
Signing time: Tue 04 Feb 2025 20:00:31 +0000
ROA not before: Tue 04 Feb 2025 19:55:31 +0000
ROA not after: Tue 03 Feb 2026 20:00:31 +0000
asID: 265633
IP address blocks: 2803:5ac0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:28:42:8d:27:65:79:02:4e:5f:1a:de:0e:22:61:5e:30:f4:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
Validity
Not Before: Feb 4 19:55:31 2025 GMT
Not After : Feb 3 20:00:31 2026 GMT
Subject: CN=4E2766EB5095231CB99ED77B44FB4C119D282B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:f3:f0:50:3d:55:03:28:8a:7d:ce:67:b4:
8c:89:66:55:25:69:fb:b6:27:d0:c1:51:ec:4a:60:
be:86:5d:57:eb:ea:8b:18:4e:ec:c1:09:25:61:5c:
53:9d:3c:42:65:e6:09:fb:5d:37:74:04:3f:6d:ea:
0b:49:b7:6d:df:9a:73:9d:27:f0:03:fd:f8:11:66:
d1:db:f2:84:75:20:4c:23:a5:5a:5c:29:42:6f:4b:
7c:d0:3c:c8:19:86:f4:6e:34:86:fd:36:d6:26:ef:
10:bb:0d:cd:52:c0:59:40:25:03:f5:c9:8a:17:18:
02:6e:76:b3:0a:86:72:15:d8:77:28:d6:38:43:ba:
12:3e:c2:a5:54:92:2a:fd:47:2e:04:3e:55:1c:ed:
22:7f:b3:66:1c:8e:a5:c3:00:a0:38:1e:4e:d3:d4:
f7:8a:79:fa:e7:83:5e:64:91:d4:fb:15:42:33:ff:
c7:f6:88:84:80:3c:b3:0b:ca:4c:ff:9d:79:b6:7c:
7b:ed:d7:77:24:45:92:80:d0:dc:be:45:b5:01:28:
04:86:4d:29:5f:d6:3b:2c:bc:2d:5c:bd:5c:1c:61:
c7:48:24:7a:6b:d3:a8:8c:d7:7b:84:40:cf:cf:23:
f5:34:47:57:27:ba:dd:d9:1c:9b:c5:f7:32:49:84:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:66:EB:50:95:23:1C:B9:9E:D7:7B:44:FB:4C:11:9D:28:2B:0D
X509v3 Authority Key Identifier:
keyid:64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/323830333a356163303a3a2f33322d3438203d3e20323635363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:3b:e5:97:40:fc:89:25:89:6b:9f:f4:7d:b8:38:e4:c7:f9:
72:a1:2b:ca:e2:14:28:95:84:a8:74:79:c3:33:77:ff:92:33:
ee:c7:d0:29:fc:5b:1c:31:93:06:75:ad:35:14:a5:ba:51:16:
a7:73:1f:35:8d:68:04:a4:de:b8:42:0c:72:84:5f:a1:17:8f:
60:01:9d:0a:66:5a:24:49:69:e0:3c:4d:7f:ba:e2:bc:1a:3d:
19:32:7c:c3:d4:07:1d:be:b6:e1:4b:15:b5:c6:e5:15:8b:6c:
a2:d1:5c:eb:f5:cc:1d:f2:d5:02:6a:c7:4b:c9:4c:91:86:44:
76:de:ff:43:2a:f7:fc:40:0d:e0:be:6c:bf:df:56:af:6f:df:
af:7c:76:a5:f8:cf:72:05:23:af:77:16:cc:5b:fd:ef:05:bc:
4a:cf:c9:45:71:ce:a8:aa:77:03:47:58:80:cf:08:87:08:60:
18:8f:43:e2:b8:f5:18:b8:d2:1f:c9:1e:6d:dc:b1:9e:84:76:
e8:70:2d:8e:41:27:be:b4:63:20:48:b4:36:7c:5f:4a:67:fd:
7a:ba:13:1e:52:f4:a0:d7:cb:9a:b7:ff:d2:2d:c1:42:17:46:
fc:db:de:0b:04:25:99:26:ed:8f:c7:af:f7:6a:6e:fd:f9:30:
3a:68:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:56:02 2025 by rpki-client