Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/323830333a663136303a3a2f33322d3430203d3e20323639373334.roa
File: 323830333a663136303a3a2f33322d3430203d3e20323639373334.roa (raw, json)
Hash identifier: iMvrpggq8UiQt7ADdRj686XadoO0DG31iZuNoCBJDkM=
Subject key identifier: 28:49:C4:F9:EB:9F:9E:94:A5:6A:60:49:B0:7B:F4:BD:2E:D3:8D:8F
Certificate issuer: /CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Certificate serial: 32442858246E551BD83B2F3DBF8471F4ECBF7216
Authority key identifier: 8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/323830333a663136303a3a2f33322d3430203d3e20323639373334.roa
Signing time: Tue 04 Feb 2025 18:38:10 +0000
ROA not before: Tue 04 Feb 2025 18:33:10 +0000
ROA not after: Tue 03 Feb 2026 18:38:10 +0000
asID: 269734
IP address blocks: 2803:f160::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:44:28:58:24:6e:55:1b:d8:3b:2f:3d:bf:84:71:f4:ec:bf:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Validity
Not Before: Feb 4 18:33:10 2025 GMT
Not After : Feb 3 18:38:10 2026 GMT
Subject: CN=2849C4F9EB9F9E94A56A6049B07BF4BD2ED38D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:13:1e:b4:37:4f:9b:da:bc:39:9a:d2:2d:
09:b7:a5:af:57:17:5d:b3:79:ec:22:55:67:ac:19:
91:e1:52:9c:08:e5:f9:e9:96:ef:17:71:b6:0d:79:
a6:8d:1e:b3:7a:9c:68:92:78:45:47:9a:9a:62:8a:
5f:f4:2b:ff:b8:e1:aa:b3:f1:1a:17:ba:b6:cc:e2:
99:e0:1e:b8:33:50:bc:3b:7c:ac:a4:20:19:3e:7d:
79:3f:50:de:6b:66:c4:28:0d:18:9c:7b:6d:7a:22:
58:8a:e2:61:7b:42:14:7f:a9:2d:0c:ab:d7:a7:de:
c4:09:fa:8c:b5:15:91:a8:3c:f8:bc:c0:ce:a2:95:
18:8c:f1:4d:87:1b:11:c3:bb:45:cb:9e:0f:52:8a:
1c:fd:ae:57:58:f9:de:31:c3:50:30:96:73:ed:c8:
91:db:59:05:5d:ab:91:4b:b3:4e:0a:a1:14:c4:56:
78:27:96:a3:09:9d:41:cb:3e:40:7d:d5:bb:74:d6:
fe:00:eb:76:2c:3b:9c:4d:fa:3e:c3:c0:0c:34:3a:
b5:1b:13:85:ce:2a:af:74:5a:7f:f6:b6:d2:47:1e:
6e:eb:d8:d9:36:3d:78:8d:9b:23:e5:8b:41:8f:87:
5c:ff:99:0f:bc:a7:9f:10:65:8d:99:f4:8d:fc:b5:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:C4:F9:EB:9F:9E:94:A5:6A:60:49:B0:7B:F4:BD:2E:D3:8D:8F
X509v3 Authority Key Identifier:
keyid:8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/323830333a663136303a3a2f33322d3430203d3e20323639373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f160::/32
Signature Algorithm: sha256WithRSAEncryption
c2:cb:73:77:b7:2f:c0:dc:91:41:f9:3e:51:16:85:79:f8:98:
ff:fb:a1:6b:84:ec:8f:46:b2:c6:99:bb:e1:91:61:60:ad:72:
66:ca:6b:ce:e7:6c:70:85:c4:95:2d:8a:66:64:13:03:db:43:
52:9f:28:07:fe:23:46:4f:34:cd:89:5e:ae:f9:cd:63:61:c7:
96:09:bf:cc:29:19:76:a6:b6:86:c0:32:cb:7f:69:38:e8:2a:
04:63:0a:36:63:6a:6d:a9:be:87:24:98:eb:63:f4:d2:a7:ef:
25:e8:01:e2:a1:93:d9:27:31:52:69:bd:41:96:c4:db:6b:09:
fc:fa:15:34:8f:5a:8d:c6:2c:41:6b:93:07:c6:95:76:17:b9:
39:d5:3c:89:73:f4:5d:e6:5b:e8:dc:ad:23:7a:ee:f3:37:45:
02:0f:25:b4:e3:00:34:2f:09:a8:f1:18:86:71:3d:69:54:6a:
dc:d7:d7:3b:f7:c3:1a:c1:78:3d:a1:2d:b7:bc:17:46:18:4c:
8c:d4:86:d8:c1:cc:85:4a:90:e8:51:bf:49:4e:a6:9a:b4:69:
3e:ef:e8:5c:14:c6:f2:84:32:56:78:99:a2:11:1a:a3:79:12:
9a:f7:cf:03:23:81:ec:35:99:7c:c7:b0:82:8e:26:a2:3f:a6:
29:f0:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:38 2025 by rpki-client