Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
File: 323830303a643330303a3a2f32392d3438203d3e2033333536.roa (raw, json)
Hash identifier: Mi0WfmptnhD1xHHJHeAU1779R5Tew4l2X33jZ0dCdrM=
Subject key identifier: D3:39:79:68:76:21:C3:22:1C:41:79:69:F1:FA:FF:E8:FE:68:E1:34
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 3E9E31E382DDB790192BDC4BE883153FABC2DE18
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
Signing time: Tue 04 Feb 2025 18:36:30 +0000
ROA not before: Tue 04 Feb 2025 18:31:30 +0000
ROA not after: Tue 03 Feb 2026 18:36:30 +0000
asID: 3356
IP address blocks: 2800:d300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:9e:31:e3:82:dd:b7:90:19:2b:dc:4b:e8:83:15:3f:ab:c2:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:30 2025 GMT
Not After : Feb 3 18:36:30 2026 GMT
Subject: CN=D33979687621C3221C417969F1FAFFE8FE68E134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:cb:84:0b:4f:cf:e9:e1:eb:24:0a:c9:b2:
2f:e9:f1:ff:d4:36:0d:f1:1d:59:4d:98:af:93:41:
9b:67:d2:57:14:26:0b:19:90:55:5c:78:55:8c:1f:
ba:33:be:a3:72:50:b0:6a:3f:ca:df:5d:34:f3:11:
11:89:80:b4:dc:b5:12:d6:fa:39:db:82:dc:87:2b:
40:fd:26:e3:c1:b4:d3:53:96:a9:58:a3:eb:22:76:
36:89:b5:dd:20:78:65:58:cf:1d:a2:67:66:db:31:
90:23:c1:e4:85:55:3b:2b:cf:2b:21:28:c5:9e:88:
08:b4:4b:30:c3:e0:27:c9:1d:09:d2:32:49:df:fc:
92:a7:82:e8:6c:ad:52:9d:a1:ba:fe:ec:99:63:e2:
3b:a6:70:1c:d1:a0:87:cd:9c:89:57:d4:91:fc:da:
fa:4c:82:7d:65:1b:4d:df:cd:ed:b3:e4:74:73:43:
bb:fa:18:97:40:69:f6:b3:8c:ef:2a:52:30:5e:d9:
89:23:a1:2d:1f:0e:e0:e5:80:6b:42:20:09:24:f7:
e9:b9:2c:bd:68:40:9e:09:7b:43:ae:43:1c:76:ab:
0e:6b:b1:b4:77:d8:20:96:16:37:e2:d1:a3:8d:5c:
d2:78:ad:75:cb:77:db:65:81:3d:a5:71:7a:69:9d:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:79:68:76:21:C3:22:1C:41:79:69:F1:FA:FF:E8:FE:68:E1:34
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:d300::/29
Signature Algorithm: sha256WithRSAEncryption
19:0a:95:0c:59:ba:5e:9a:1f:ba:e8:6a:b3:77:3f:bd:32:72:
8c:42:eb:4a:1d:95:21:b2:84:f0:2b:13:99:ae:ef:23:c2:05:
94:6f:93:35:cd:78:0a:bf:78:e8:5e:29:9c:42:4b:64:c2:fc:
a5:c8:a6:98:6f:b8:1d:91:01:55:c3:05:ea:2e:fe:15:bb:7e:
86:d4:a1:16:0e:23:2e:6f:5f:6b:56:0a:d1:8f:5f:c0:29:6a:
f8:0a:7c:b5:92:90:87:7a:71:67:49:7a:06:18:d6:34:16:39:
f6:74:31:db:ee:52:23:ff:67:83:fd:c9:d5:a3:79:67:5a:9e:
66:09:41:f7:f4:14:bc:c0:be:5e:24:e7:c4:c2:02:08:b5:cc:
63:91:59:25:24:80:ed:f7:1b:9d:bd:1d:9d:e1:52:91:fd:f1:
8a:96:d5:57:96:63:7b:a0:fd:ee:6c:9f:d2:38:22:cb:19:9c:
e4:39:58:a4:da:e3:bc:f4:70:b7:4b:60:3b:61:f7:24:bb:2e:
1d:67:fd:74:04:2a:39:cd:67:e4:9f:8f:62:70:5c:0e:19:3d:
af:ef:ea:11:60:20:e8:ce:2e:a3:e1:7d:78:64:3a:1e:ae:ae:
fa:17:40:d4:48:bb:64:95:5c:5b:5c:c4:09:58:cb:19:a0:ec:
0d:e8:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client