Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa
File: 323830333a373836303a3a2f33322d3334203d3e20323637383239.roa (raw, json)
Hash identifier: WC+1dNS4U116pKTbLodvuz1C28EZ9bE626w0ZbbAyUI=
Subject key identifier: ED:BF:51:FB:A7:EF:D2:E0:03:B6:30:44:E9:67:AA:72:B6:E4:06:90
Certificate issuer: /CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
Certificate serial: 785D091D077CD9EB9417D6A6FE42E19825B74411
Authority key identifier: 38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa
Signing time: Tue 04 Feb 2025 18:36:51 +0000
ROA not before: Tue 04 Feb 2025 18:31:51 +0000
ROA not after: Tue 03 Feb 2026 18:36:51 +0000
asID: 267829
IP address blocks: 2803:7860::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5d:09:1d:07:7c:d9:eb:94:17:d6:a6:fe:42:e1:98:25:b7:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
Validity
Not Before: Feb 4 18:31:51 2025 GMT
Not After : Feb 3 18:36:51 2026 GMT
Subject: CN=EDBF51FBA7EFD2E003B63044E967AA72B6E40690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:44:eb:48:7d:ec:52:f5:93:d7:d6:51:4a:
c0:a0:d9:d2:f2:f3:01:42:8b:f0:69:67:2c:c8:98:
9a:24:86:d1:ff:8c:23:4e:6e:2a:e6:d4:5c:06:54:
9c:12:11:b4:6c:d5:75:e7:92:3c:28:c1:86:ea:54:
a8:93:0e:de:e3:8b:38:b0:76:32:26:61:98:63:30:
41:15:b6:45:ae:d1:82:33:23:a3:e9:9a:35:ab:da:
21:bf:b9:be:6a:55:f1:b4:31:2d:f8:ee:e9:96:6d:
90:d2:5d:70:79:44:24:5c:d9:c8:49:47:9d:32:ed:
be:a5:93:39:b2:b3:9b:77:74:5e:79:53:13:89:a0:
27:65:23:6b:12:1a:c4:76:79:f8:26:e7:91:2b:81:
e3:af:34:bf:0c:ed:48:92:f2:9e:ab:ce:00:04:53:
e6:bf:b6:32:e8:ee:27:d5:b5:e1:a9:89:6a:0a:c3:
b8:eb:83:aa:b3:d1:08:9d:c3:7c:0e:24:12:9e:92:
3b:f5:ec:21:2e:c6:68:80:4a:f7:a2:6b:57:aa:39:
b7:ae:30:a0:e7:e4:d9:42:52:83:50:ef:34:1f:c1:
f1:5c:2f:3d:ae:35:dc:d4:45:3b:84:11:4f:c0:64:
32:2a:96:e4:40:1f:d3:06:69:9f:62:2c:77:aa:40:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:51:FB:A7:EF:D2:E0:03:B6:30:44:E9:67:AA:72:B6:E4:06:90
X509v3 Authority Key Identifier:
keyid:38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/323830333a373836303a3a2f33322d3334203d3e20323637383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7860::/32
Signature Algorithm: sha256WithRSAEncryption
96:17:aa:83:ef:18:dc:59:1d:5a:b3:53:aa:74:72:1c:1b:bf:
c7:7e:42:19:76:6d:f6:19:df:d7:3a:b4:4a:cd:17:a4:e7:9b:
0c:29:b9:97:48:d2:86:4a:5b:5a:56:0d:f7:9f:14:b5:05:a9:
21:21:40:a1:cf:ab:8f:52:db:f9:94:a7:34:bb:c3:ec:81:1b:
88:3c:82:0e:a8:eb:08:92:a3:b5:71:ec:31:f3:3b:31:e1:04:
47:2b:fb:6b:d9:ae:ee:d9:85:b1:06:b1:75:87:65:15:4e:cc:
31:cc:b6:88:a4:64:85:e1:d8:dd:52:6e:7e:4b:a7:7e:38:a9:
1b:76:99:a4:1b:90:c4:58:7a:f5:1e:49:15:1d:22:c9:df:8f:
6a:07:e2:6b:d2:28:b0:fe:b4:5e:b6:16:1a:0e:a6:31:c7:aa:
12:e7:72:94:7b:5a:69:ec:d1:db:db:53:c8:3a:00:ee:2a:4d:
56:13:36:1c:34:79:ac:f5:34:e4:03:12:ca:89:b3:90:a3:55:
0a:68:11:8e:f7:59:be:bb:a3:ef:d7:83:74:dd:66:e3:1b:82:
7d:de:fb:e4:b6:f1:d8:de:af:fc:62:03:5e:1a:ed:cb:2f:6c:
01:99:a8:57:06:d6:bb:96:52:67:2d:aa:29:6a:e2:9e:3e:be:
e2:37:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:12 2025 by rpki-client