Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa
File: 323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa (raw, json)
Hash identifier: o5BJbdUazQlWAX8JPM9SQ8/cPHlxsazg+dTYzZmmY5I=
Subject key identifier: 83:BA:A6:39:CD:C7:1F:46:04:07:CD:16:22:C2:DB:00:50:F2:15:3B
Certificate issuer: /CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
Certificate serial: 6EFBA73535E546C2643B982B8919ED9A31355455
Authority key identifier: A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa
Signing time: Tue 04 Feb 2025 20:08:18 +0000
ROA not before: Tue 04 Feb 2025 20:03:18 +0000
ROA not after: Tue 03 Feb 2026 20:08:18 +0000
asID: 271901
IP address blocks: 2801:1de:4::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fb:a7:35:35:e5:46:c2:64:3b:98:2b:89:19:ed:9a:31:35:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
Validity
Not Before: Feb 4 20:03:18 2025 GMT
Not After : Feb 3 20:08:18 2026 GMT
Subject: CN=83BAA639CDC71F460407CD1622C2DB0050F2153B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:eb:38:7a:38:9b:29:ac:46:29:c3:a4:bc:
50:a9:e4:74:40:2d:b4:63:a2:1f:9a:fe:d5:b7:a1:
ef:79:c8:20:39:9b:c4:f2:81:7f:2e:37:ad:e8:3f:
f0:b1:88:d0:6b:f8:89:ed:6b:6b:70:78:ef:7e:f5:
e9:d3:f8:4f:00:7c:e9:5f:30:61:09:f0:bc:81:8e:
32:23:53:87:3e:12:5a:61:47:27:fe:3f:a3:b7:ee:
e2:77:3f:69:f3:6e:47:d0:85:13:c0:56:40:9a:87:
ef:38:12:db:1f:a3:93:8b:c9:66:8b:cb:52:f4:a6:
dc:31:65:84:53:07:27:cd:00:4a:2b:a1:cf:b8:07:
1e:84:b5:f7:74:47:a2:91:1a:eb:88:81:a5:8d:ea:
19:67:5c:12:89:8c:ed:99:83:34:1d:94:e9:a8:fb:
66:c5:4f:fa:cf:e5:6b:48:55:8d:74:0d:bc:1c:b1:
10:9c:08:cf:f1:9b:2e:5b:0d:c7:ef:22:3d:c8:65:
a9:9c:05:e5:cb:28:70:82:1b:f5:4c:8d:c0:aa:a9:
37:d3:b4:c9:79:37:86:fd:9f:9c:56:cc:6a:0a:5d:
f5:40:f3:90:97:e3:27:5c:c1:5c:79:b5:3e:21:68:
89:39:a4:dd:5e:89:ec:ab:6e:e6:dd:4b:81:1d:1e:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:A6:39:CD:C7:1F:46:04:07:CD:16:22:C2:DB:00:50:F2:15:3B
X509v3 Authority Key Identifier:
keyid:A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1de:4::/46
Signature Algorithm: sha256WithRSAEncryption
3d:12:0e:69:ee:2e:29:8e:8c:fc:37:ee:ab:37:01:3d:12:05:
68:49:fc:c2:ea:9a:45:b6:e4:d0:f1:9f:76:cc:25:f6:ea:11:
20:d1:66:23:62:6d:b4:66:44:d5:7a:06:4d:50:94:84:8b:cb:
5f:de:78:fe:32:e3:64:62:89:47:8f:40:97:5b:e1:e2:1f:c1:
1f:fe:ed:31:20:8a:47:25:c0:93:71:15:75:83:ad:88:08:75:
b8:fa:32:ea:f5:5f:43:c7:2a:88:07:51:60:74:ee:71:b5:d8:
71:0f:a8:ef:7f:20:6b:9b:18:b4:76:de:71:b4:5e:2e:9c:52:
cb:6c:4a:f5:65:8c:b4:d3:dd:d6:9e:e5:c5:cd:c0:af:dd:df:
b7:3d:a2:9e:17:50:62:07:ed:b3:09:b7:34:07:f0:f4:ae:25:
ac:e8:b6:c4:d2:a3:05:15:5d:7e:38:68:28:d4:46:2f:ce:9f:
21:58:5b:d8:ab:fd:83:b5:3e:2a:ab:9a:6f:e7:6b:5b:b0:ea:
d6:ae:07:5f:19:be:a0:d5:ed:df:52:86:93:69:50:d4:89:95:
ee:3a:91:8a:a3:91:90:77:e9:4a:0f:ef:51:53:7f:bd:8d:d8:
5d:74:63:0c:c9:cd:80:26:47:21:d0:b2:5e:36:5f:1f:e1:19:
07:9b:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:36 2025 by rpki-client