Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa
File: 323830303a3333303a3a2f33322d3434203d3e203237363531.roa (raw, json)
Hash identifier: OazA2emWbxkwvZm5uZS5514LoN87nwRKxnX0DNPCBWg=
Subject key identifier: 03:4F:7E:17:1B:85:FC:CE:D3:8D:81:AF:3F:57:D3:33:36:70:A4:D4
Certificate issuer: /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial: 21E0CFA7FEBB9676E584F2A323A8513CD46EFFC2
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa
Signing time: Tue 04 Feb 2025 18:44:25 +0000
ROA not before: Tue 04 Feb 2025 18:39:25 +0000
ROA not after: Tue 03 Feb 2026 18:44:25 +0000
asID: 27651
IP address blocks: 2800:330::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e0:cf:a7:fe:bb:96:76:e5:84:f2:a3:23:a8:51:3c:d4:6e:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
Validity
Not Before: Feb 4 18:39:25 2025 GMT
Not After : Feb 3 18:44:25 2026 GMT
Subject: CN=034F7E171B85FCCED38D81AF3F57D3333670A4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:c8:4b:0f:78:6b:72:5d:03:54:35:6c:6c:
0d:1d:10:0e:ad:c0:a6:cc:8e:78:c0:09:2b:d9:1f:
ad:ab:ba:9a:ed:b8:13:ff:82:28:48:36:b5:b2:17:
72:f6:a0:b0:ba:4d:12:b0:3f:1a:63:d3:c0:b5:a2:
12:1a:81:38:1f:80:b7:3b:99:72:a3:82:67:ea:fd:
9a:0e:30:02:1b:f7:4a:4a:86:ec:70:cc:ca:0b:d7:
8c:04:d1:8f:5b:ea:d7:ec:4c:a5:36:82:e4:16:9d:
de:13:c7:04:5f:e7:60:cf:ef:37:20:a2:21:61:1b:
d8:d5:91:80:3c:a0:e2:bb:cb:fc:56:24:07:cd:a3:
c5:ed:77:ab:8c:0b:06:b4:b4:c2:34:48:92:fe:70:
c0:85:ec:de:99:32:32:31:74:bf:59:5e:94:0f:93:
1b:d0:48:d4:10:c3:98:32:8b:5b:0b:df:70:8b:50:
66:ff:9d:fb:10:67:46:a3:b4:b9:f7:9c:3b:4e:63:
5a:bd:6b:20:59:c1:e5:a5:07:68:6d:a2:df:92:63:
1d:ce:ff:e0:4d:e2:bf:43:9f:5f:23:74:c1:6b:c0:
35:1b:11:84:26:24:fc:e5:4a:1d:8a:10:a4:9e:6e:
47:15:4e:1a:1f:d6:4e:e2:7c:98:02:ae:49:aa:64:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:7E:17:1B:85:FC:CE:D3:8D:81:AF:3F:57:D3:33:36:70:A4:D4
X509v3 Authority Key Identifier:
keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:330::/32
Signature Algorithm: sha256WithRSAEncryption
9f:11:1b:0a:18:c3:1a:cb:c3:db:0e:ec:4c:11:98:18:62:eb:
dc:a1:7a:da:83:db:27:e3:2f:4e:55:3e:35:b6:01:61:1d:ec:
58:d7:b4:9a:12:5d:23:a6:5a:91:22:3a:c5:e0:5b:90:d3:62:
d7:86:3e:5e:3c:be:76:5c:c7:95:9c:67:e0:e3:7c:b6:6c:8f:
32:60:a1:d6:f1:d1:c7:6e:09:88:3f:8a:78:d0:9a:17:e8:ef:
21:e3:9b:48:7f:70:b5:7d:f7:63:0f:8e:09:85:35:f9:8c:be:
c4:30:4e:ac:09:50:f0:8c:22:8b:62:a9:bf:d3:89:1a:56:03:
da:5e:00:a9:91:4d:2d:9c:60:d6:7d:a7:34:e9:24:0b:83:4c:
19:28:0b:82:51:10:da:ae:94:b5:c5:1f:67:54:46:05:d6:25:
f2:76:68:8d:06:7a:ef:4e:0e:dc:3f:4d:7f:ed:05:41:ea:1d:
97:12:a5:71:7f:40:3a:a6:e7:66:b0:bf:f2:5e:26:ff:50:94:
05:2c:94:41:c0:7f:d7:51:df:27:dd:3d:f8:12:a8:9a:c1:c8:
e0:92:5a:4b:c7:cc:d3:19:47:de:39:bf:f6:36:b5:82:4a:c0:
2c:72:e4:a6:2b:46:51:79:9f:09:06:c2:db:81:9c:35:19:24:
16:a6:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:32 2025 by rpki-client