Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa
File: 323830333a616430303a3a2f33322d3438203d3e203532333534.roa (raw, json)
Hash identifier: /kGFKtZwaseK71y77+DOxeSGuG2Vzu+4sB/lNvT+EdY=
Subject key identifier: 84:7C:1B:B5:13:17:A8:DC:FC:AA:D0:65:2E:98:08:80:24:72:1D:39
Certificate issuer: /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial: 526940E98B55404DCF66A07086B872FD529E3C83
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa
Signing time: Tue 04 Feb 2025 18:18:47 +0000
ROA not before: Tue 04 Feb 2025 18:13:47 +0000
ROA not after: Tue 03 Feb 2026 18:18:47 +0000
asID: 52354
IP address blocks: 2803:ad00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:69:40:e9:8b:55:40:4d:cf:66:a0:70:86:b8:72:fd:52:9e:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
Validity
Not Before: Feb 4 18:13:47 2025 GMT
Not After : Feb 3 18:18:47 2026 GMT
Subject: CN=847C1BB51317A8DCFCAAD0652E98088024721D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:45:9a:ac:76:45:94:fb:f2:73:7a:8f:63:
f0:47:a0:70:04:ba:2a:41:62:e5:aa:f7:71:ef:86:
19:69:7d:23:12:14:b7:56:c7:b2:bc:55:cf:44:fa:
0c:dd:8a:6b:75:10:57:0f:1c:1f:df:6f:61:35:ba:
ec:b0:19:32:fa:06:2e:38:df:72:72:ac:b1:62:2f:
bf:43:c8:b7:79:c5:4d:3d:8b:18:5a:c2:30:ce:0a:
94:a2:92:52:24:56:57:7b:30:7d:f1:d6:f0:ed:96:
90:04:8d:de:d2:6e:6f:5f:9e:21:17:86:e4:34:af:
2f:03:87:18:7d:2f:d9:49:58:fa:a8:85:f0:e8:0c:
7b:63:9d:0a:1f:77:76:0b:f8:6b:1e:d9:e5:23:bf:
14:e6:76:ea:54:e0:ef:a9:fd:65:dd:a4:75:9b:4d:
07:2c:fa:7a:47:47:95:b8:1d:ec:43:d7:fa:1a:b2:
f5:ac:8a:e0:3b:8f:08:49:a6:4f:2a:c5:7d:77:2e:
2a:4a:3b:68:d1:49:bb:8d:2c:ce:e2:63:fc:1c:b6:
74:e2:64:a8:f0:b2:67:bd:36:5d:f8:99:8a:9c:33:
05:70:37:ad:72:41:64:08:d5:30:25:3c:c2:65:eb:
c3:85:4e:0c:36:a9:cb:98:3a:d0:a3:7d:c3:51:70:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:1B:B5:13:17:A8:DC:FC:AA:D0:65:2E:98:08:80:24:72:1D:39
X509v3 Authority Key Identifier:
keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ad00::/32
Signature Algorithm: sha256WithRSAEncryption
99:08:33:be:a9:76:3f:15:0b:ae:25:4f:67:23:a5:0f:f4:1d:
c1:f4:92:0c:a8:ff:88:ed:5b:c4:3a:1c:18:b8:96:24:5d:c5:
03:65:dd:bc:06:a0:cd:3d:f8:df:29:17:bb:ff:ff:e5:2c:f9:
dd:42:5b:26:52:a2:dd:45:62:e5:15:7c:7e:47:0b:bf:c3:76:
25:36:0a:8a:b5:b3:11:8a:18:f9:1e:93:16:21:7e:3d:ab:50:
ef:d6:3b:94:4a:51:89:d8:15:5a:6f:63:0e:4c:f3:06:0f:bc:
91:b9:46:aa:46:79:f9:cc:2d:02:8f:33:42:39:d0:ad:c7:de:
07:7f:60:48:c3:98:49:1d:8e:0e:db:11:42:4c:4c:72:ce:12:
20:ee:4e:fa:f5:f4:bd:2a:7e:6a:18:81:8a:18:55:15:f3:ef:
4c:38:9f:af:d0:b7:c7:c3:b8:2b:75:1d:a1:b8:d4:79:c7:07:
e2:5c:37:3d:f2:55:83:ba:65:ba:ce:76:eb:c0:02:77:b9:c5:
50:c6:03:86:bc:ad:8b:c7:e7:76:b9:2f:cd:95:1d:f4:31:f5:
f5:cb:58:18:a7:9d:93:37:94:82:cb:1b:13:83:b2:db:47:73:
79:88:90:80:1b:06:34:76:ab:9d:35:00:65:9e:12:ce:20:2c:
ce:b5:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:52 2025 by rpki-client