Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
File: 323830363a3361643a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier: /PwiWesvrLc9PGv0ietFeW+Vt4aGnEtvGScwFDLaSCQ=
Subject key identifier: 3F:CE:CA:DD:60:3C:A6:0F:9B:59:4B:BD:F4:CF:6F:A7:C3:77:79:28
Certificate issuer: /CN=0064A500360F990C57B314989FD548943A9832EF
Certificate serial: 12B48AA5255C0F9D9C916C028D5F8B2831479F62
Authority key identifier: 00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
Signing time: Tue 05 Mar 2024 18:13:29 +0000
ROA not before: Tue 05 Mar 2024 18:08:29 +0000
ROA not after: Tue 04 Mar 2025 18:13:29 +0000
asID: 265586
IP address blocks: 2806:3ad::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b4:8a:a5:25:5c:0f:9d:9c:91:6c:02:8d:5f:8b:28:31:47:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0064A500360F990C57B314989FD548943A9832EF
Validity
Not Before: Mar 5 18:08:29 2024 GMT
Not After : Mar 4 18:13:29 2025 GMT
Subject: CN=3FCECADD603CA60F9B594BBDF4CF6FA7C3777928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:00:c1:bc:99:a4:17:be:b6:ab:d9:f0:bd:
d5:75:cf:6c:f3:df:be:80:6e:09:a0:cc:2c:ba:be:
f5:3c:71:e3:f8:38:72:f7:48:32:39:0f:17:3e:b5:
a7:88:ea:c8:c6:5f:fa:ba:61:6d:3b:b1:b6:ab:62:
51:fd:ee:21:3c:34:ed:11:e4:06:e3:5c:69:e1:ad:
51:f5:e5:05:bf:b3:86:3d:78:eb:e7:24:4e:2e:8a:
e9:3a:38:3f:c9:d0:56:20:19:31:2e:66:28:50:8a:
aa:e9:e9:aa:b3:ba:bc:38:ae:cc:6c:37:15:cf:9a:
67:9a:a0:5c:6a:a8:81:a1:90:03:65:88:0c:f0:9f:
4a:1c:ea:31:8d:98:5a:c2:e7:7f:de:17:fb:94:dd:
30:a5:3d:26:b7:8c:01:c1:19:a0:95:94:d7:24:82:
72:92:ed:3f:d3:b2:92:70:19:bd:c5:39:1a:51:33:
66:78:7d:5b:6f:1b:c6:88:09:f0:9b:20:27:fd:da:
df:59:b2:70:c4:56:ad:41:ee:b1:1f:f8:c1:f2:56:
4d:d1:8e:a0:9b:ee:2a:72:98:65:70:8b:b4:9d:30:
f1:35:c2:85:47:e7:31:26:bc:38:27:6f:59:b9:82:
82:5e:df:34:3d:82:f8:a2:3e:14:23:b9:3a:63:26:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:CA:DD:60:3C:A6:0F:9B:59:4B:BD:F4:CF:6F:A7:C3:77:79:28
X509v3 Authority Key Identifier:
keyid:00:64:A5:00:36:0F:99:0C:57:B3:14:98:9F:D5:48:94:3A:98:32:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/0064A500360F990C57B314989FD548943A9832EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0064A500360F990C57B314989FD548943A9832EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87FE387C82ABC39DF252AEFED0A773FA1890B500E925654018BC8EE5E911845F/0/323830363a3361643a3a2f33322d3438203d3e20323635353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3ad::/32
Signature Algorithm: sha256WithRSAEncryption
8e:00:ba:6a:26:41:95:3b:43:ee:89:67:8b:b7:88:36:95:bb:
cc:25:b0:c0:d7:f4:fd:d5:46:c0:fc:92:29:06:7d:ca:a6:49:
49:24:54:27:18:0c:3d:ac:e7:76:de:cb:4b:ec:16:eb:a6:55:
00:f9:06:64:24:d8:b5:6d:e9:fd:35:d6:dd:2b:2a:18:29:a7:
50:8b:3a:73:13:1a:60:b1:30:fd:45:21:1e:f5:cc:39:8c:5f:
ce:94:86:08:f8:0c:6c:6e:f9:49:c9:bb:74:f7:71:bd:01:44:
18:27:05:b7:41:e3:0a:ff:1f:61:5d:17:c8:cf:a6:93:b8:68:
51:38:0f:ca:f1:40:84:12:e6:0c:c4:5e:6d:ea:02:0e:d0:fd:
aa:f8:06:e2:0f:40:29:34:75:55:44:d8:80:04:9c:f9:f4:1d:
59:88:2b:93:6c:15:a0:09:04:2a:34:2d:ee:34:31:82:8a:48:
5e:73:89:fe:92:b3:3b:8d:34:cc:94:6d:0c:65:2b:ab:8e:77:
d8:53:63:78:00:f4:39:d3:b5:20:f5:6f:7b:bc:38:e8:be:b9:
e4:04:70:46:78:e0:e3:5e:91:c7:52:ce:ee:a6:33:da:20:7d:
3a:3f:65:e8:72:6c:61:cd:cc:5a:a5:2c:21:86:76:46:ab:f9:
a0:cb:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:47:17 2025 by rpki-client