Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa
File: 323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa (raw, json)
Hash identifier: inpGcr0uJZDkPiBY/PuN1YOPoIUuXPvKsgJvJ7twkTs=
Subject key identifier: BD:F3:AA:2F:F1:91:E0:A8:C3:7B:31:D2:9B:E7:ED:D5:CB:3D:5E:FA
Certificate issuer: /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Certificate serial: 3A63692C3F522772EA0DA15027376463F43744F6
Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa
Signing time: Tue 04 Feb 2025 20:08:20 +0000
ROA not before: Tue 04 Feb 2025 20:03:20 +0000
ROA not after: Tue 03 Feb 2026 20:08:20 +0000
asID: 272146
IP address blocks: 2803:d090:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:63:69:2c:3f:52:27:72:ea:0d:a1:50:27:37:64:63:f4:37:44:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Validity
Not Before: Feb 4 20:03:20 2025 GMT
Not After : Feb 3 20:08:20 2026 GMT
Subject: CN=BDF3AA2FF191E0A8C37B31D29BE7EDD5CB3D5EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:48:d6:5f:0a:96:ce:d0:74:44:0c:5d:52:
7f:89:6c:68:4c:1a:3c:7b:49:f1:8a:70:67:d3:ad:
24:01:a7:1c:8f:87:39:5e:50:4c:9b:46:af:38:1d:
a5:1d:69:a3:32:53:0f:6b:91:cb:d7:e8:a0:ca:a7:
5b:0e:19:8d:64:a4:87:98:b5:79:24:ef:9e:aa:41:
ee:9f:b8:48:ea:52:4e:fd:e8:f7:05:b7:f1:86:ab:
52:b2:05:f0:df:fa:3e:21:ab:46:90:55:e8:65:60:
fc:e3:56:a5:af:03:e3:24:80:7a:73:e7:9b:e4:4b:
da:52:2b:82:cc:ab:e9:86:e2:c6:5b:f4:45:3e:7b:
6c:64:06:f8:ca:05:19:cf:49:58:a4:4c:fe:d2:6a:
0a:11:11:fb:ce:99:f4:c4:d0:65:33:4e:96:82:40:
ba:18:d9:92:fa:4d:9d:5a:a1:56:8d:93:36:6c:75:
91:2f:9e:8e:0c:85:e6:ac:8e:62:0e:d6:fd:88:42:
ea:70:24:79:be:c2:ab:46:ba:c8:8d:1a:db:90:d0:
62:e7:3d:8d:40:8b:cd:84:f6:2c:dd:f4:d4:1a:6b:
32:c6:b3:0e:43:e3:c7:d9:1f:9f:df:21:db:eb:19:
ff:d0:aa:b4:c7:94:3a:2b:9d:93:86:58:e2:64:19:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:AA:2F:F1:91:E0:A8:C3:7B:31:D2:9B:E7:ED:D5:CB:3D:5E:FA
X509v3 Authority Key Identifier:
keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d090:4000::/36
Signature Algorithm: sha256WithRSAEncryption
74:cc:20:50:87:8f:95:fc:3a:9b:dc:06:a4:f7:b2:6a:5b:dc:
ea:a2:7a:d9:0f:88:dc:00:96:45:04:a8:f6:d9:f0:fd:8b:ab:
eb:04:aa:57:5a:f6:55:e6:6d:df:bd:de:a1:16:11:b8:cc:f4:
0c:80:38:26:00:09:42:e0:fa:09:b3:cb:37:19:72:d9:bc:ac:
4c:ea:18:9a:e5:84:e1:23:a6:9b:a4:d7:7b:85:22:2c:c7:47:
11:6e:90:75:96:28:28:ec:32:f9:7f:a1:a8:15:f3:fb:5b:87:
1e:4f:36:1a:8f:1b:50:28:99:c0:80:96:ff:71:9a:3f:dc:8e:
25:24:99:9f:f6:21:25:86:69:bf:17:e7:87:df:e2:64:02:8a:
5c:53:df:42:2f:55:5c:ef:a6:3b:32:08:0d:c1:03:2c:53:e9:
ac:3b:8a:f5:61:14:5f:ad:eb:42:06:eb:4e:9a:7d:eb:65:05:
ec:f3:d7:8d:85:b8:03:48:dc:4f:dc:41:9f:f3:b8:6e:0f:7b:
4f:4d:68:ad:26:78:9c:a3:86:c1:ef:4b:e7:64:80:15:9b:22:
9f:d2:50:3f:53:75:d5:4b:00:5e:3a:a3:bd:d9:b8:8f:f7:24:
a3:69:cd:0c:ff:b0:c6:b4:e3:ee:17:5c:ec:4c:91:31:a7:41:
d3:f4:1a:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:23:57 2025 by rpki-client