Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa
File: 323830333a333865303a3a2f33322d3332203d3e20323639383830.roa (raw, json)
Hash identifier: +YBIWzZDkt7U25KSw6MpVtLaXcoJ4cMEKXQROYzRlGE=
Subject key identifier: CF:A1:A0:70:43:CC:55:C3:CF:E9:A5:31:AB:79:E3:4F:AD:77:96:6F
Certificate issuer: /CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
Certificate serial: 5D9A658F8727AEA7B2EBAB6976A1BD50BD9335E6
Authority key identifier: AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa
Signing time: Tue 04 Feb 2025 18:36:15 +0000
ROA not before: Tue 04 Feb 2025 18:31:15 +0000
ROA not after: Tue 03 Feb 2026 18:36:15 +0000
asID: 269880
IP address blocks: 2803:38e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9a:65:8f:87:27:ae:a7:b2:eb:ab:69:76:a1:bd:50:bd:93:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
Validity
Not Before: Feb 4 18:31:15 2025 GMT
Not After : Feb 3 18:36:15 2026 GMT
Subject: CN=CFA1A07043CC55C3CFE9A531AB79E34FAD77966F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:dd:76:76:00:fe:e6:a5:ed:25:03:e2:56:
31:dc:dd:78:72:c0:b6:b1:66:ba:a7:f8:c7:35:d1:
b1:c4:0b:97:24:75:4f:b9:c1:8f:1d:75:37:d8:55:
cd:1f:e0:9e:83:ad:40:50:37:fb:8c:a1:0b:75:e4:
35:ac:90:97:42:b8:e0:90:61:3d:4e:f2:a7:9c:f3:
57:aa:ad:86:7b:d9:6b:a3:b2:23:e0:06:51:d3:cd:
a8:ad:22:db:a4:91:a6:46:f8:e7:dc:2f:cd:d5:f9:
eb:15:c2:a8:23:1b:09:a1:89:6d:78:94:5d:09:fa:
d4:33:49:42:e7:aa:3d:73:aa:84:22:d4:07:18:72:
9b:f8:9c:47:9e:ad:ef:46:f1:64:a4:00:99:2d:e7:
86:db:cd:4c:bb:4b:b2:5d:fb:9d:d7:0a:55:94:6e:
f6:e0:43:2f:21:5a:00:03:7e:06:c0:aa:b5:aa:b6:
56:8e:f6:6a:92:6d:e6:fc:04:82:08:ec:34:37:5e:
39:92:91:53:89:31:22:d1:91:c3:f1:f7:a6:40:b6:
c9:24:17:f3:2b:86:74:eb:6b:57:2a:20:2a:b9:2d:
b4:e4:22:65:b0:09:72:76:68:94:b3:7b:16:6d:2f:
7f:0c:fd:fe:c9:df:32:8b:d2:94:f5:15:a4:b3:2c:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:A0:70:43:CC:55:C3:CF:E9:A5:31:AB:79:E3:4F:AD:77:96:6F
X509v3 Authority Key Identifier:
keyid:AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:38e0::/32
Signature Algorithm: sha256WithRSAEncryption
19:c3:2a:7e:bb:45:87:d8:9f:ad:40:01:47:71:81:55:db:cc:
67:86:fb:a5:6e:33:73:4b:30:c4:ac:8f:0b:73:2c:3a:45:60:
54:5b:5c:f3:ba:a0:81:dc:66:19:5c:a1:73:d1:24:0f:e4:88:
87:ac:0c:84:7d:2a:8f:16:0c:83:62:c7:4f:ae:1b:c8:07:0a:
ca:c0:4c:a3:f9:c5:6f:fb:dc:79:5c:69:9c:e8:b9:26:fc:c6:
07:ab:70:1a:ab:9c:aa:57:0f:5c:f5:f0:b0:9c:48:a7:c9:42:
92:54:a3:8b:48:31:cf:1a:d7:1a:9d:6b:3a:17:b4:72:df:b6:
b2:9d:99:2a:ea:55:d9:e5:c6:c8:17:dc:e5:f9:53:62:b6:a2:
28:3c:b5:b8:6d:6e:11:6f:e2:a6:8c:62:3f:cb:37:63:78:75:
cc:b4:29:ae:b0:b4:a8:fa:f3:42:d9:f6:c5:8d:b9:5f:9f:7a:
eb:97:b5:6e:c8:d7:aa:8f:d9:58:b3:f8:a7:15:42:5b:f4:3b:
24:2b:37:8d:37:31:02:b3:bb:50:cc:f8:44:38:a6:0c:51:fb:
0b:00:d6:b5:64:b2:9c:60:05:ed:d8:29:d3:e6:a5:53:bf:37:
72:ff:22:2a:be:49:70:04:e9:45:10:a9:fb:41:cc:86:7e:e1:
8e:e9:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:51 2025 by rpki-client