Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
File: 323830333a613138303a3a2f33322d3332203d3e203238313138.roa (raw, json)
Hash identifier: B5zpyN1URXnxl9wRwZ2Ru7HMA/rqzF2evybyx9QjjnM=
Subject key identifier: 46:03:BA:74:C9:6E:DB:46:79:74:E7:44:33:E3:24:9C:F2:5A:AF:A4
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 39B2B2D550FA0D2A94C4FF41284B6F68633907EA
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
Signing time: Tue 04 Feb 2025 18:46:59 +0000
ROA not before: Tue 04 Feb 2025 18:41:59 +0000
ROA not after: Tue 03 Feb 2026 18:46:59 +0000
asID: 28118
IP address blocks: 2803:a180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b2:b2:d5:50:fa:0d:2a:94:c4:ff:41:28:4b:6f:68:63:39:07:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Feb 4 18:41:59 2025 GMT
Not After : Feb 3 18:46:59 2026 GMT
Subject: CN=4603BA74C96EDB467974E74433E3249CF25AAFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:07:61:30:91:4e:2a:aa:69:95:99:8a:a9:
58:1e:ae:5e:05:79:bf:97:47:26:4e:e7:1d:fe:cc:
50:bc:fc:65:9b:7d:8f:f1:2c:e7:9f:6e:9c:79:25:
cb:50:d6:0f:64:41:fe:3e:e9:a7:af:c0:5e:3c:7b:
ca:28:68:bf:52:e8:ca:2c:eb:c9:40:f4:74:c9:32:
af:3a:a6:46:2f:73:cb:08:2e:c1:ad:2d:a9:be:59:
82:c3:19:e1:6f:a6:38:39:b4:74:5c:99:89:6a:9b:
16:51:0a:a2:b0:9d:37:ae:e7:04:ea:0c:cd:49:41:
ba:c4:bd:c1:fa:da:99:53:48:d9:68:29:ca:e3:cd:
68:79:d9:35:0e:6c:82:1e:53:81:ec:d2:4b:15:26:
26:f0:6e:8a:de:da:42:fe:51:63:ac:0e:54:f4:d2:
dc:11:c7:6a:87:01:92:6f:b9:f4:ba:bd:81:2b:f2:
61:2c:47:72:ae:3b:14:74:49:32:51:15:76:1c:69:
a5:d8:f1:f1:d6:09:02:82:63:da:bb:f5:01:e3:8b:
9c:29:e0:5c:ee:79:96:f3:35:5e:c7:7e:6e:53:b4:
a1:ae:eb:95:43:14:03:dc:d3:13:1e:8e:cd:f9:29:
0c:57:a9:8b:54:c5:46:29:ed:3c:58:82:5a:a4:2e:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:BA:74:C9:6E:DB:46:79:74:E7:44:33:E3:24:9C:F2:5A:AF:A4
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a180::/32
Signature Algorithm: sha256WithRSAEncryption
99:6d:63:11:55:21:26:22:64:3c:db:21:de:b4:05:e6:43:c2:
b6:36:03:03:f5:cc:b7:46:ad:29:5d:1a:e9:f5:a7:71:c3:d4:
98:63:26:10:69:e2:e3:14:a4:52:87:65:cd:44:67:5a:9a:9f:
de:dd:9d:22:e1:cf:ea:cc:f6:08:91:6f:a7:9a:a5:49:91:49:
2a:c4:6a:d0:cc:87:32:38:1b:46:96:82:65:39:c2:a8:fc:d9:
3d:a7:f3:ec:64:dc:f9:04:cc:03:de:2c:4d:5b:32:90:48:f8:
77:7f:36:db:ff:57:ea:09:23:2d:ba:bb:cb:b4:61:9e:e5:8e:
0e:8b:7d:67:97:f0:96:30:19:8b:6a:43:44:13:05:48:25:75:
c7:08:18:e3:e6:64:75:55:db:87:26:b8:00:0c:9a:5d:4f:7e:
a0:96:1a:23:81:b0:d3:cd:cf:b6:e3:01:f2:f1:f3:c7:df:eb:
25:ea:66:79:1d:ca:d8:98:e3:7b:54:af:7f:fc:90:56:5c:67:
5e:14:b2:41:bc:4c:ed:14:7f:f2:ad:c3:61:55:da:c2:39:cc:
f7:3d:0a:d0:07:fb:17:1e:6b:bd:c4:e9:d5:cc:45:1b:ef:26:
e2:26:87:ea:0a:26:df:0b:25:7c:52:f1:07:a4:d7:42:6c:c6:
99:cf:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client