Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa
File: 323830333a313132303a3a2f33322d3438203d3e203532333238.roa (raw, json)
Hash identifier: NqHbjTVVwqcrLWWJ578V6F6DTu1wgM29wFX2uFnFqrg=
Subject key identifier: 4C:E6:A8:1F:E4:1A:6D:F0:89:62:1F:70:67:60:11:97:49:1C:C9:82
Certificate issuer: /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial: 4832280583AC03966433B87CAB8C1DF3EA049850
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa
Signing time: Tue 04 Feb 2025 18:08:04 +0000
ROA not before: Tue 04 Feb 2025 18:03:04 +0000
ROA not after: Tue 03 Feb 2026 18:08:04 +0000
asID: 52328
IP address blocks: 2803:1120::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:32:28:05:83:ac:03:96:64:33:b8:7c:ab:8c:1d:f3:ea:04:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Validity
Not Before: Feb 4 18:03:04 2025 GMT
Not After : Feb 3 18:08:04 2026 GMT
Subject: CN=4CE6A81FE41A6DF089621F7067601197491CC982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:b6:9b:d9:4f:e7:5f:b5:be:d4:41:e3:09:
b1:2b:7a:61:2c:f7:59:27:7d:20:e2:67:9f:26:59:
a8:28:15:ef:79:f3:9b:ff:f1:20:fd:52:ef:bd:6e:
01:40:4f:8f:c5:bd:10:23:87:1a:0c:34:67:a4:13:
fb:98:1e:18:c5:87:29:a6:db:1c:26:40:33:e8:ac:
c3:ea:69:a6:2d:6e:2b:7a:61:23:7d:66:65:82:d9:
0f:3a:09:51:be:a4:87:8c:59:d6:65:fd:f2:63:70:
0e:09:05:16:c9:8a:81:05:bc:59:4d:f2:28:02:02:
0e:7a:73:b1:8a:6f:1e:15:3c:c4:59:95:d1:7e:33:
e2:d1:6e:ae:cd:a2:9e:cc:51:09:1e:ad:d7:29:f8:
ed:fa:d3:39:91:8e:cd:4d:eb:f8:33:3a:25:23:da:
08:14:c7:7f:1d:aa:31:38:8e:bd:39:69:77:a2:c8:
9b:c1:28:e7:5f:1d:8f:cc:9b:86:0b:3a:64:20:47:
d5:1d:ea:70:23:a9:2a:c9:36:eb:23:2c:e4:a6:48:
e4:7b:69:94:e4:77:4e:b5:6f:4a:f2:05:1c:fe:00:
23:4e:77:de:db:a7:42:9a:e5:11:cd:0f:17:02:c4:
9f:e4:2f:33:d2:35:c0:ef:32:cf:c9:e4:96:19:86:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E6:A8:1F:E4:1A:6D:F0:89:62:1F:70:67:60:11:97:49:1C:C9:82
X509v3 Authority Key Identifier:
keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1120::/32
Signature Algorithm: sha256WithRSAEncryption
a9:03:dd:ca:9a:05:75:4c:75:1d:0f:bd:b2:fd:38:ad:9b:a8:
0e:52:c4:fc:02:76:08:55:9d:c5:ba:0d:95:cb:93:7a:b3:3b:
6e:3b:ea:34:9f:a6:b5:20:7b:74:a8:22:ca:04:5b:36:e0:c2:
3e:88:4b:1f:7f:5c:2b:51:ac:fe:9f:86:c8:5c:71:fe:a2:a6:
c5:42:36:2e:f3:02:67:b9:3e:90:ed:34:0f:07:1c:9a:78:df:
7c:0d:3b:51:a8:7c:5c:fe:0a:a9:cf:c2:9d:66:43:29:17:55:
62:60:a6:d0:e4:66:41:8b:99:57:af:b8:9e:7a:74:a9:5e:b4:
8d:57:09:f3:14:ed:ca:d3:2c:07:1c:f0:51:3a:1a:75:e5:7e:
05:ba:bb:f2:7c:4f:bf:88:e1:26:d1:ba:7a:b5:9d:04:f6:f6:
1a:27:26:7f:e1:c1:54:a0:cb:4e:3b:36:6e:86:31:18:14:ad:
dc:25:df:6e:f8:1b:4c:6a:6e:e5:7b:8c:76:3b:49:dc:98:e7:
ca:a0:7a:12:ce:e9:b6:43:13:ca:d9:fb:df:33:e9:ca:16:c7:
fe:8a:b6:e9:b6:8b:90:2d:df:45:94:9e:f2:ed:1b:a0:7a:2f:
75:74:0e:fe:74:55:eb:99:e0:19:cf:f2:df:d9:5b:5f:6d:17:
d8:5e:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:10 2025 by rpki-client