Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/2d6a4542e4893e224b68b82e12ce36374786b7ac.roa
File: 2d6a4542e4893e224b68b82e12ce36374786b7ac.roa (raw, json)
Hash identifier: ymZgllPMXOUFsronIQX6ZfxeDzxeJcoMr9buhc92BmI=
Subject key identifier: BC:22:A8:CB:DA:9E:10:4B:3A:20:F4:DA:4F:AB:C2:4E:B1:0F:5A:7C
Certificate issuer: /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Certificate serial: 035293
Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/2d6a4542e4893e224b68b82e12ce36374786b7ac.roa
Signing time: Tue 19 Dec 2023 09:23:51 +0000
ROA not before: Mon 18 Dec 2023 02:00:00 +0000
ROA not after: Thu 18 Dec 2025 02:00:00 +0000
asID: 273114
IP address blocks: 2803:790::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217747 (0x35293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Validity
Not Before: Dec 18 02:00:00 2023 GMT
Not After : Dec 18 02:00:00 2025 GMT
Subject: CN=2d6a4542e4893e224b68b82e12ce36374786b7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:fd:27:cf:94:bb:10:b1:24:68:94:93:52:
67:c8:1e:c5:f7:3c:9d:82:3e:10:01:cd:2b:a9:06:
85:be:ac:de:2f:05:95:3c:83:9a:15:2c:ab:6a:dc:
64:a2:cb:3e:89:88:08:81:f9:40:03:13:1e:2c:af:
d3:5d:0e:d5:ac:d7:e6:21:8d:62:fe:32:2f:20:1b:
7e:27:9b:88:a0:a7:c3:69:96:a8:9a:22:8e:fc:d2:
55:a2:e4:29:eb:df:f4:33:91:35:25:ce:17:6a:b7:
b2:5a:33:b2:0e:ab:9c:f5:6d:b3:c3:cc:58:38:ee:
80:8b:ed:ca:06:1a:22:f4:5f:75:78:c4:9a:82:31:
40:40:bb:43:bd:27:8a:90:d0:d2:4e:81:5b:d6:8d:
e8:00:d1:53:3e:c3:ef:7a:5c:54:84:8a:6b:dd:26:
c7:40:03:9f:36:90:14:2a:d6:85:76:b5:81:be:b4:
f2:0d:50:85:26:6b:cb:22:3f:6b:c3:3c:37:4b:de:
b0:8a:25:68:93:82:5d:6d:05:f6:ce:f8:d6:8b:c2:
22:c8:4b:5d:f9:0d:35:73:21:56:1e:59:8c:d9:65:
24:7d:b3:9d:57:62:fa:d3:94:bc:fc:24:ad:95:bd:
f7:37:72:a5:bb:e3:42:48:3b:d1:86:02:3b:3a:84:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:A8:CB:DA:9E:10:4B:3A:20:F4:DA:4F:AB:C2:4E:B1:0F:5A:7C
X509v3 Authority Key Identifier:
keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/2d6a4542e4893e224b68b82e12ce36374786b7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:790::/32
Signature Algorithm: sha256WithRSAEncryption
73:42:d7:78:90:97:72:41:56:f8:24:5a:a0:bb:4f:d2:c8:42:
d6:45:51:c1:9b:5e:a2:93:37:34:bb:d7:cc:a6:da:40:38:6f:
ca:fe:a5:9e:d0:62:e1:04:5b:01:10:99:0c:1b:82:40:60:5f:
3a:93:50:ec:fc:c4:70:ff:ca:71:0a:ab:64:99:1a:b4:a6:54:
61:fd:82:ff:3d:c9:67:0c:48:38:2a:d2:0b:29:ea:e1:1c:ad:
38:e2:16:15:45:ba:52:ed:0f:c7:36:40:3a:25:4d:a7:2d:b8:
02:14:23:b3:8a:27:2d:2f:2c:d4:f9:4e:c8:e3:6f:8b:c5:a3:
b2:97:b1:31:66:e0:9e:2a:d9:33:20:16:f6:b2:51:23:1a:8d:
a2:8d:9d:41:b7:4e:46:38:6a:06:67:dc:d3:ef:5c:96:62:2b:
5e:29:f8:a6:fe:3b:55:45:0d:c8:76:8f:8c:e0:b2:f2:69:68:
a0:93:10:e3:c6:a3:69:ed:29:e4:bc:32:5b:e1:e5:1f:96:14:
ff:8a:57:78:19:b7:d0:d8:5f:5e:81:72:46:38:bb:fe:21:68:
8b:de:c5:28:99:23:38:5c:7d:73:fa:67:af:ea:c2:4b:a0:0c:
cf:5b:b1:ce:db:27:74:66:a9:a3:ee:cb:2e:38:d6:b5:cc:ba:
1c:da:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:04:18 2025 by rpki-client