Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31303a3a2f36342d3634203d3e203532343538.roa
File: 323830333a3438303a31303a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier: hi+Dc8ifb04hlgk0B0PQanttKdcqgjnadhakPxljk8o=
Subject key identifier: 3F:B5:D7:A4:0C:79:E5:B9:B8:B9:60:85:5D:D3:ED:B5:84:46:98:A2
Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial: 219FA844C211D2852C4830997F43A00FD92D82F2
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31303a3a2f36342d3634203d3e203532343538.roa
Signing time: Tue 04 Feb 2025 18:24:22 +0000
ROA not before: Tue 04 Feb 2025 18:19:22 +0000
ROA not after: Tue 03 Feb 2026 18:24:22 +0000
asID: 52458
IP address blocks: 2803:480:10::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9f:a8:44:c2:11:d2:85:2c:48:30:99:7f:43:a0:0f:d9:2d:82:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Validity
Not Before: Feb 4 18:19:22 2025 GMT
Not After : Feb 3 18:24:22 2026 GMT
Subject: CN=3FB5D7A40C79E5B9B8B960855DD3EDB5844698A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:9c:26:36:25:26:5a:63:c7:0c:6f:7a:00:
2a:91:ea:18:f2:f8:00:f3:d3:7f:0e:72:6b:2e:3a:
65:45:5a:40:d8:30:b1:2e:01:94:aa:82:41:33:25:
e1:4d:74:9a:81:99:14:ab:39:7c:56:b1:86:d5:77:
62:6a:68:c4:24:e1:9f:e6:55:be:8f:83:f2:41:43:
d1:c5:28:d6:5a:59:fc:ff:39:6e:ef:02:cd:de:ef:
6e:e7:f6:1f:d2:72:9a:00:f7:7b:06:10:60:9c:ee:
3a:19:72:02:ea:6c:89:07:c5:49:3b:51:97:1f:37:
61:9e:ed:ec:ec:73:d9:a1:a2:6d:14:32:2f:12:56:
4d:e0:c3:ca:04:be:08:11:39:c6:53:f4:fb:ad:66:
32:dc:56:5e:2b:b1:9f:49:64:34:28:43:56:43:50:
94:bf:2a:ba:ab:39:ec:cb:27:1f:eb:0a:aa:ce:9c:
01:15:47:52:3e:7a:17:68:91:af:00:e3:fb:56:64:
f8:a8:95:32:d8:cf:bb:ea:1e:6e:eb:9d:de:84:24:
cc:ae:64:29:49:bb:d1:51:ad:e5:29:60:98:77:74:
32:31:3b:aa:38:fa:a1:68:71:27:63:02:e7:64:15:
2a:92:70:36:14:ea:bc:6d:a2:75:5d:e4:62:ee:14:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:D7:A4:0C:79:E5:B9:B8:B9:60:85:5D:D3:ED:B5:84:46:98:A2
X509v3 Authority Key Identifier:
keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31303a3a2f36342d3634203d3e203532343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:480:10::/64
Signature Algorithm: sha256WithRSAEncryption
2e:2a:43:96:f4:95:e6:8c:1f:2a:4a:83:40:df:03:03:cd:a6:
92:05:3c:69:4c:ba:f3:44:1f:94:54:68:4b:85:59:c6:5a:58:
aa:39:35:85:c4:bc:ce:44:0c:28:54:7e:ab:82:7b:e5:18:5b:
a0:d9:a2:96:2e:76:68:db:9c:f4:3d:17:be:f5:e3:a8:0c:27:
74:99:42:4c:88:1c:ef:63:97:a4:8a:9c:81:c6:28:52:45:5a:
c6:3f:b3:8c:4c:f0:0e:cd:8a:99:aa:06:11:24:1a:b3:bd:94:
4b:cf:50:b9:bf:24:8b:6d:43:2e:b2:82:a3:db:96:93:da:da:
f8:f2:22:dd:7e:d0:a7:18:5c:ff:bc:28:47:42:c1:02:43:2e:
17:7b:54:dd:fd:05:3c:b8:0c:b5:61:8f:02:02:b0:a7:94:19:
4c:5f:41:64:5e:01:85:7f:e3:51:a3:0d:92:1f:12:ad:50:2d:
13:fa:8c:45:ed:05:33:62:ee:93:d4:27:b1:8a:5c:a4:eb:ab:
69:e9:0c:16:ee:44:d2:7e:4d:d2:ef:6b:86:a2:51:a8:21:29:
d3:1e:a8:5f:6a:be:4f:e4:37:51:a9:30:7c:ec:18:f0:dc:5d:
e0:b2:1e:bf:ff:d1:4c:00:e9:ae:b9:d3:8e:61:b7:ab:8e:5f:
7b:63:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:25 2025 by rpki-client