Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa
File: 323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa (raw, json)
Hash identifier: zteXEW8iKB+TKiGgITTsTNwV9dAN9IHbYGyUgCc6HHk=
Subject key identifier: 67:D4:A3:85:73:91:AB:65:21:F5:B9:FA:67:3B:22:C0:AB:D1:43:6C
Certificate issuer: /CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
Certificate serial: 12727CFEA52DC730AB00555035E26B827C71E2A6
Authority key identifier: CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa
Signing time: Tue 04 Feb 2025 18:54:36 +0000
ROA not before: Tue 04 Feb 2025 18:49:36 +0000
ROA not after: Tue 03 Feb 2026 18:54:36 +0000
asID: 61476
IP address blocks: 2801:18:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:72:7c:fe:a5:2d:c7:30:ab:00:55:50:35:e2:6b:82:7c:71:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
Validity
Not Before: Feb 4 18:49:36 2025 GMT
Not After : Feb 3 18:54:36 2026 GMT
Subject: CN=67D4A3857391AB6521F5B9FA673B22C0ABD1436C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:c1:d0:75:d5:99:26:80:d3:87:fb:0b:4d:
82:03:08:a0:62:0e:df:e7:b6:34:98:8c:a6:9c:f6:
61:77:91:6f:da:fc:43:3a:4c:2c:0c:ca:04:4c:9a:
2a:e5:16:27:80:ed:41:ab:6d:b4:75:40:8d:3d:fa:
7a:9e:6c:fb:f1:21:5f:bf:af:18:26:cb:a1:8e:73:
af:7a:c3:14:59:5e:f9:6e:aa:83:47:0c:1c:c6:31:
4e:09:4c:44:9e:02:61:4f:cc:1e:2a:36:93:ba:ae:
d7:53:94:19:e9:55:63:55:81:88:02:c0:1a:72:0d:
28:34:18:24:6c:59:db:f3:b8:23:d7:7f:51:bb:c2:
d4:76:fe:61:7c:37:d5:26:15:30:aa:aa:72:9b:4f:
23:f5:93:be:dd:c2:9a:38:5e:82:d0:bd:d4:73:05:
de:33:12:3f:1e:c2:98:0f:87:1c:16:8c:75:be:2f:
40:80:3d:c8:89:45:51:77:bb:5d:54:52:d9:2d:2f:
10:c4:14:ef:23:1e:46:62:51:f1:e3:c7:a9:57:af:
bc:f1:86:fb:8b:0c:59:42:69:68:32:71:c6:fe:75:
a4:18:4c:6b:04:f7:59:4c:3f:95:57:3f:c4:d5:de:
28:d1:a2:08:ac:f3:7f:65:b0:fc:e0:f6:6d:52:c4:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:A3:85:73:91:AB:65:21:F5:B9:FA:67:3B:22:C0:AB:D1:43:6C
X509v3 Authority Key Identifier:
keyid:CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:18:8000::/48
Signature Algorithm: sha256WithRSAEncryption
50:9c:91:94:34:f3:8f:62:c0:8b:f5:75:41:94:ee:60:00:8d:
08:45:dc:84:54:77:a8:a5:05:fb:4d:e1:e9:58:a8:6f:96:2d:
c4:65:25:df:39:d5:a7:cc:ff:57:b5:98:b8:2f:13:a1:bd:87:
97:f3:fa:3c:80:96:2d:5a:cd:4a:bc:da:0f:98:d0:14:8b:0c:
cb:ce:44:5b:d3:a4:59:7d:10:fc:ba:12:64:4c:1c:2c:ac:e7:
ce:c0:48:12:91:91:80:2f:68:48:7a:3f:e1:3f:30:8c:14:1c:
a9:ce:88:0a:54:fd:07:ca:9f:c0:ff:30:30:fc:a8:59:57:54:
79:aa:d9:b9:d0:56:de:ec:af:f6:38:97:09:09:12:cf:b2:92:
fd:c0:21:3f:64:45:2e:6b:ad:53:25:08:b7:d4:98:7d:01:81:
e2:96:ab:9c:db:0b:1f:00:a4:7c:1b:b1:8a:2b:2a:39:26:fc:
c7:e1:01:16:f2:36:63:f8:8f:4b:da:ba:e1:d7:33:77:41:2f:
72:50:2f:69:a1:6e:c5:f1:09:0d:57:82:c8:1a:9c:70:c2:34:
36:a9:9d:c3:06:88:3e:5a:fa:0e:6e:03:02:30:3c:70:38:e5:
28:1d:33:21:7e:09:fc:f9:fd:9d:68:fb:49:00:9c:ae:b8:e6:
64:3c:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:53 2025 by rpki-client