Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
File: 323830333a346434303a3a2f33322d3332203d3e20323634363733.roa (raw, json)
Hash identifier: 0C73wL6kWIKpxabCEaZN8iQVfhnznIrGsucM3D+y7LY=
Subject key identifier: 69:DF:A8:D4:97:CD:6B:C8:9D:9C:31:46:72:45:D5:CB:0C:82:95:4B
Certificate issuer: /CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Certificate serial: 6376AC0346BA5F0FAA404F14AAECA5204BAFCDC4
Authority key identifier: 39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
Signing time: Tue 04 Feb 2025 18:39:27 +0000
ROA not before: Tue 04 Feb 2025 18:34:27 +0000
ROA not after: Tue 03 Feb 2026 18:39:27 +0000
asID: 264673
IP address blocks: 2803:4d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:76:ac:03:46:ba:5f:0f:aa:40:4f:14:aa:ec:a5:20:4b:af:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Validity
Not Before: Feb 4 18:34:27 2025 GMT
Not After : Feb 3 18:39:27 2026 GMT
Subject: CN=69DFA8D497CD6BC89D9C31467245D5CB0C82954B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:9e:ce:06:57:01:7c:c0:66:8f:62:38:2b:
f4:22:67:1c:a4:92:68:8d:cc:53:1d:a9:2e:ec:f3:
f0:77:7b:52:cf:20:f2:b9:e1:c0:c0:b1:ef:e7:96:
17:aa:cc:8a:7a:e9:65:b4:13:81:56:dd:fa:ba:10:
73:1a:e0:31:9c:e7:ce:a8:37:5d:3b:df:eb:40:e2:
25:24:bf:39:49:1c:9d:c4:94:07:fa:9f:2a:3b:4d:
f5:1a:51:c0:f4:b8:8d:0d:9f:18:86:55:d9:f9:af:
29:5a:0a:ff:39:f7:57:ee:3c:42:03:60:56:10:ff:
9f:40:14:16:9d:39:b1:6a:02:f3:ae:79:33:56:86:
db:59:e1:81:66:a9:68:31:31:f6:70:da:39:17:a2:
e5:a5:66:51:83:75:c8:95:35:72:a8:f6:83:ef:6f:
48:6e:57:d6:2a:1a:a1:43:72:da:53:41:c6:fc:55:
77:e4:77:9c:19:37:9e:cd:ce:d3:82:a9:10:8e:c4:
41:72:b1:5a:0a:bd:09:1d:29:ff:f7:77:ef:f4:b9:
96:4d:8e:44:32:22:2d:ff:2e:d5:ac:be:8c:d6:68:
f4:aa:fe:84:20:bc:06:8e:35:f3:4f:cb:e7:34:a6:
8b:53:1e:2e:1e:0c:db:23:66:a4:17:65:3d:26:47:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:A8:D4:97:CD:6B:C8:9D:9C:31:46:72:45:D5:CB:0C:82:95:4B
X509v3 Authority Key Identifier:
keyid:39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
46:01:0c:4a:09:30:ec:45:d3:b1:41:f3:20:62:1e:64:a5:b9:
0b:c9:db:63:e1:ce:4e:4a:e5:15:67:6f:37:95:a0:d4:21:60:
33:d5:2a:18:71:7b:28:01:e3:8d:1e:a2:a0:1c:82:bb:14:76:
99:bb:00:d6:60:6f:d7:21:1c:43:d9:3b:51:0d:64:14:5c:31:
a3:57:38:3c:f4:22:3e:e5:eb:e9:6c:77:cb:85:3b:71:c2:1d:
b9:50:f4:df:ad:87:31:39:37:81:d5:35:03:fc:2c:df:01:fd:
78:50:a9:1f:b5:2c:24:00:e1:cb:7a:2a:a3:0c:94:da:e5:6a:
f5:dd:45:9a:a6:6d:9f:bd:ea:a7:36:92:43:8d:ba:03:bb:55:
1f:e9:4f:3e:ab:53:a1:28:85:74:d0:ed:7d:18:6a:02:ba:77:
52:cb:f4:fa:db:f2:75:a2:21:2c:6d:9c:e1:93:71:33:54:73:
fc:1e:02:98:4f:c9:ef:cc:1d:c9:5c:a7:fe:0a:ab:7c:5c:82:
02:54:6f:91:10:a8:7c:42:e5:b8:2f:fd:df:8e:84:7e:f5:9d:
bc:9e:12:7f:08:54:b4:6e:e5:48:9c:86:4f:74:7b:9a:58:48:
db:b0:6b:7c:83:20:0f:82:06:b2:f2:b5:cb:2b:c2:1c:fe:fc:
d5:c7:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:37 2025 by rpki-client