Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
File: 323830333a383463303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier: +lWf0cg47GakPRBzzLeXsjxrGSOzAdHglqrXjYfwO7k=
Subject key identifier: BF:B9:99:F1:E8:26:50:E2:4F:77:47:25:E6:60:EA:70:8A:A9:B2:BC
Certificate issuer: /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial: 64463093BC3B8ABD3515C26386D247E2AECFCFE2
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 18:27:44 +0000
ROA not before: Tue 04 Feb 2025 18:22:44 +0000
ROA not after: Tue 03 Feb 2026 18:27:44 +0000
asID: 262191
IP address blocks: 2803:84c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:46:30:93:bc:3b:8a:bd:35:15:c2:63:86:d2:47:e2:ae:cf:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Validity
Not Before: Feb 4 18:22:44 2025 GMT
Not After : Feb 3 18:27:44 2026 GMT
Subject: CN=BFB999F1E82650E24F774725E660EA708AA9B2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:a2:b1:31:a3:9b:74:19:13:aa:f0:0a:79:
bd:a1:fc:82:65:d9:9d:77:c6:4a:50:4a:a8:01:37:
4c:d8:75:55:06:6a:5b:2c:f9:8e:06:85:e4:98:37:
a9:01:cc:b7:e9:b5:9c:3c:ef:b6:c1:f7:d1:70:d5:
73:3a:0e:cd:78:33:6c:5a:71:09:3d:80:ea:cf:a4:
6c:99:21:70:f6:27:0b:ad:94:88:c8:fe:48:de:43:
70:4d:e3:ed:41:f2:5c:c4:d0:c8:b0:9f:ad:6e:33:
89:10:2e:f7:c1:6a:a1:85:fc:3b:67:70:cd:5e:81:
b4:af:30:e8:3f:03:f0:f0:7d:c2:23:c3:06:ea:b7:
2d:52:bc:fc:04:df:bd:bf:34:a3:51:c3:a6:fb:bb:
b1:00:02:b9:c1:54:d0:8b:39:6c:dc:fb:8e:04:b9:
6b:76:71:1d:2e:5d:9f:77:da:06:26:0b:17:bf:cd:
ec:e9:71:79:7b:f8:74:00:1b:3e:aa:b6:8d:06:cd:
1a:1a:3b:ed:d5:82:0e:c1:ce:31:bf:07:15:20:05:
9d:1a:84:75:32:a5:ae:46:7f:6a:cd:00:8f:ce:30:
50:78:38:17:af:5b:13:88:f8:a9:de:d9:67:6c:5f:
6b:d5:53:f1:a3:86:53:2f:93:f8:d6:4e:f6:11:13:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:99:F1:E8:26:50:E2:4F:77:47:25:E6:60:EA:70:8A:A9:B2:BC
X509v3 Authority Key Identifier:
keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ae:dd:6c:41:b3:9a:9e:cd:ca:ca:c9:d7:fa:05:69:d8:7a:
b5:1b:c1:08:31:06:e2:25:b1:18:2d:72:7a:69:d1:6a:44:62:
68:78:08:89:ca:f2:ac:ba:22:3a:59:e2:a6:29:8c:71:75:5d:
63:b7:fc:83:08:e9:77:d9:a7:a0:4c:e0:d1:8d:f8:18:26:4e:
ad:9d:c4:f5:0e:80:fd:31:dc:f8:b3:45:58:dc:80:04:ed:f8:
d6:be:4b:d3:af:1e:d3:29:15:33:f9:75:d4:4c:0a:6a:eb:48:
54:a2:f9:52:e5:9d:dd:6b:d0:ca:5c:48:fd:0b:11:11:5e:a5:
a8:51:0c:78:c2:8d:c1:f1:73:af:5a:fd:09:4f:4d:65:29:b0:
4e:e3:ca:0e:9a:83:81:2b:5a:3e:57:e5:4e:63:31:a0:5e:95:
d4:46:2e:e2:70:24:8f:6a:6c:75:c4:ac:b9:c7:8e:7c:ea:b6:
2a:4e:a6:1d:57:8c:94:6d:86:07:4d:33:f5:23:e9:a0:e1:02:
ba:ef:0c:42:1e:72:71:82:00:10:d5:38:fc:f7:f3:7a:2d:38:
a3:99:65:4f:ad:4d:99:38:9d:8a:f3:0f:d2:a4:21:25:8e:b6:
5a:52:99:a8:07:7a:62:5b:a5:c1:3b:e7:9e:4e:c5:9f:a1:0a:
cf:41:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client