Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa
File: 323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier: 41etRlYpUozz3rs45zhoGLngoy66UVLL5t8tmwHyHLs=
Subject key identifier: 30:1D:C2:A4:75:FF:92:F5:40:72:41:E2:6C:50:E1:4A:0E:B9:58:07
Certificate issuer: /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial: 0D9FF8738BB210334A53AEB16336590A8FA69E4B
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa
Signing time: Tue 04 Feb 2025 18:29:18 +0000
ROA not before: Tue 04 Feb 2025 18:24:18 +0000
ROA not after: Tue 03 Feb 2026 18:29:18 +0000
asID: 273113
IP address blocks: 2803:6850:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9f:f8:73:8b:b2:10:33:4a:53:ae:b1:63:36:59:0a:8f:a6:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Validity
Not Before: Feb 4 18:24:18 2025 GMT
Not After : Feb 3 18:29:18 2026 GMT
Subject: CN=301DC2A475FF92F5407241E26C50E14A0EB95807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:ae:e3:0f:6e:a3:1c:36:88:46:2e:d2:29:
96:f7:21:da:56:fe:a6:6d:c6:66:e5:f1:89:ae:28:
9e:14:6e:a0:23:e2:b8:b2:95:57:30:2e:4f:2b:80:
92:8d:48:cd:0f:b1:3d:97:27:74:51:a1:20:38:b6:
07:ca:2c:20:6f:55:cd:a5:d8:10:8d:15:7c:19:cf:
f0:51:ac:4b:f7:0c:c6:79:46:e8:40:b5:04:ad:25:
c0:b5:81:1a:bd:31:66:f6:a5:cc:67:a8:d9:d4:a4:
24:cb:20:0c:18:38:b2:c9:54:64:cc:cb:d1:b9:4d:
c3:9d:aa:84:4a:fc:83:49:73:0f:87:e6:f9:4c:ac:
3f:d6:0f:3a:ac:c6:a2:19:20:e6:8a:09:02:d4:45:
b8:74:a6:2b:cd:77:2a:dd:13:2a:cc:c5:cd:06:c6:
87:6b:2d:55:33:c5:2b:30:9a:e2:0d:4d:94:49:52:
0e:fe:f6:fd:e2:0e:f6:8a:39:57:18:8e:8d:3b:3c:
c8:76:e6:77:a4:1c:f5:43:a6:80:1f:03:c2:ba:1a:
b8:6f:d4:05:61:d3:20:4f:71:3b:d5:8d:66:1b:5d:
4c:4a:64:4f:e9:50:82:d0:79:b8:99:33:5c:e9:47:
e3:44:59:3b:fd:c6:49:f0:6a:d9:ad:72:5d:2f:e3:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:C2:A4:75:FF:92:F5:40:72:41:E2:6C:50:E1:4A:0E:B9:58:07
X509v3 Authority Key Identifier:
keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6850:4::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ae:72:2e:91:06:13:57:49:48:68:80:41:24:6e:b5:31:64:
3e:b0:87:98:2e:a6:a6:8a:02:40:0f:13:33:83:2b:2b:a7:e3:
3f:84:8a:e9:92:d3:f1:40:6c:32:58:df:28:ce:c7:17:42:98:
53:87:ef:3a:30:e1:ff:a8:81:14:24:e5:a1:26:96:c8:32:48:
e6:c4:27:3c:cc:9b:70:ec:a2:ab:9f:d3:f9:80:49:df:2f:8d:
dc:03:64:c1:b1:5c:60:af:64:5d:92:38:e3:8b:3e:83:bc:39:
a2:6d:77:86:a1:df:70:4a:68:3f:00:f4:c5:98:af:ad:f2:c8:
ec:06:2a:7e:31:1b:e1:03:21:02:5f:1c:69:84:10:31:c9:6c:
7b:a9:f9:70:e4:c3:04:d9:05:d6:b6:49:6f:be:76:11:78:c6:
31:47:dc:91:29:ee:ad:5d:25:a3:28:2a:49:da:66:35:b9:7f:
f6:cb:fd:d4:75:94:bc:eb:ec:f0:4a:a0:82:f3:5f:37:36:53:
3d:d1:36:e0:12:af:fa:c6:0d:d0:51:c9:e6:a6:bb:62:e7:f0:
bc:59:48:21:7c:69:b5:90:aa:07:56:35:b6:75:ba:64:df:37:
e5:c1:cc:b7:cc:3e:8a:55:41:35:84:f1:1f:bb:6e:ec:36:f4:
81:6e:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:09:36 2025 by rpki-client