Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa
File: 323830313a3161643a3a2f34302d3438203d3e203134303830.roa (raw, json)
Hash identifier: 1Ks5O06fO+SSzT8lIn4nMq/hjfNmFN8OZNS3JOy1Ac0=
Subject key identifier: 2A:CD:8B:D4:9E:C4:87:CB:A2:67:11:5F:23:D5:F2:93:43:BE:8B:EC
Certificate issuer: /CN=B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7
Certificate serial: 093ABD1C28D733CFCDBFDEFF1FA9896185FB4B0F
Authority key identifier: B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa
Signing time: Fri 25 Apr 2025 02:50:00 +0000
ROA not before: Fri 25 Apr 2025 02:45:00 +0000
ROA not after: Fri 24 Apr 2026 02:50:00 +0000
asID: 14080
IP address blocks: 2801:1ad::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3a:bd:1c:28:d7:33:cf:cd:bf:de:ff:1f:a9:89:61:85:fb:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7
Validity
Not Before: Apr 25 02:45:00 2025 GMT
Not After : Apr 24 02:50:00 2026 GMT
Subject: CN=2ACD8BD49EC487CBA267115F23D5F29343BE8BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:87:16:7b:38:b4:d4:6c:07:5a:d4:d1:cb:
47:95:6a:a2:27:a3:f8:5c:32:40:aa:ac:5b:f0:6e:
3b:f1:d8:15:a6:52:5e:ec:a9:23:d9:63:fa:87:c5:
43:f9:8c:56:94:80:b7:1f:44:25:11:6d:ae:d3:36:
c8:6d:0d:e6:c0:a2:48:b4:73:d0:a8:3a:21:f9:13:
84:57:bc:bd:8c:87:e2:e2:97:5d:f1:73:8d:1b:45:
24:c6:8b:11:b6:df:1f:2e:da:9f:fc:41:da:bb:35:
c1:56:45:eb:80:2b:6d:df:72:b0:8e:51:ac:1e:ac:
02:6d:32:14:60:5f:e4:9b:62:4f:66:40:93:f9:22:
b8:84:4d:7e:41:00:eb:50:61:94:45:0f:52:39:eb:
f4:36:6d:98:fe:a6:3d:c6:04:68:b3:fe:b0:63:c8:
30:9c:09:6f:b4:d3:5a:9e:23:e0:94:b6:b5:2f:e3:
17:3c:fb:7c:bd:6e:35:a3:e2:7b:10:6f:2a:d0:ec:
64:ab:03:25:40:97:2a:21:2f:e0:3c:1f:c2:77:f0:
27:ed:db:19:e1:24:9e:1f:26:7e:b0:ca:6d:8d:34:
9e:d0:43:cb:16:ec:9a:2d:c5:b3:0b:86:c6:32:9f:
b2:98:f9:1e:88:dd:1c:51:5f:d2:4f:10:64:b7:b5:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:8B:D4:9E:C4:87:CB:A2:67:11:5F:23:D5:F2:93:43:BE:8B:EC
X509v3 Authority Key Identifier:
keyid:B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1ad::/40
Signature Algorithm: sha256WithRSAEncryption
50:58:55:42:b4:87:60:c3:f6:cd:7f:9e:bd:91:ce:ca:8a:70:
09:54:82:43:da:eb:54:d1:27:1c:f2:5d:9a:00:17:81:2e:6b:
e3:f2:4d:71:5e:21:86:f4:1f:0f:33:9d:6e:b3:46:88:1f:6d:
f8:75:3c:48:e2:1c:53:19:c3:0d:73:da:65:52:fa:b0:44:4d:
26:e7:ed:49:3c:75:e1:f9:03:22:85:0a:33:8d:f7:22:b7:74:
bf:c8:a1:74:a3:51:21:72:6a:fd:c1:94:3b:69:6f:d5:43:bf:
d1:7b:f4:a8:03:67:fa:78:ad:1b:0f:ca:fa:96:51:d2:44:4f:
7a:6f:58:68:87:6b:5e:1d:75:d2:e4:81:a6:85:de:87:81:8a:
8f:6e:bd:2b:ff:0a:98:13:94:a0:bd:a6:e4:05:c4:c7:5e:66:
79:17:94:92:40:ae:cb:fe:04:b9:cb:76:0f:e7:7f:a6:26:a0:
f2:8b:9b:d2:19:47:02:2d:2f:82:a2:41:af:80:fb:20:31:fc:
9a:3a:95:ed:de:18:b8:da:e1:58:52:87:95:24:db:00:2b:48:
84:90:a6:b1:4d:5a:00:00:ed:6d:93:b4:bd:3c:f3:45:4b:8c:
0d:53:93:89:3f:5a:ea:02:a7:f1:dc:62:85:8d:75:33:2d:d4:
fc:c4:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:07 2025 by rpki-client