Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
File: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (raw, json)
Hash identifier: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=
Subject key identifier: 3A:D8:40:AD:D3:12:BE:FE:32:28:BC:47:D4:7F:DA:53:6E:47:11:01
Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Certificate serial: 05B3D2266AFE85EF09EF73A316E556034FE154BD
Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
Signing time: Tue 04 Feb 2025 18:40:13 +0000
ROA not before: Tue 04 Feb 2025 18:35:13 +0000
ROA not after: Tue 03 Feb 2026 18:40:13 +0000
asID: 267705
IP address blocks: 2803:f1a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b3:d2:26:6a:fe:85:ef:09:ef:73:a3:16:e5:56:03:4f:e1:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Validity
Not Before: Feb 4 18:35:13 2025 GMT
Not After : Feb 3 18:40:13 2026 GMT
Subject: CN=3AD840ADD312BEFE3228BC47D47FDA536E471101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:94:cd:6d:e5:aa:93:b6:f6:01:42:04:7f:
c6:6d:1f:51:8f:62:6f:f9:9b:5e:c0:8d:10:5d:c1:
9e:df:71:b4:be:57:02:e5:fd:5f:34:7a:c6:c7:c2:
b0:c4:3d:fa:b1:9e:54:1d:ff:ff:87:1a:de:67:d9:
2a:54:44:8d:78:91:f5:bf:8b:3a:03:f2:c8:46:8a:
7d:25:13:16:92:f9:f0:0c:5f:3c:b1:20:ba:4e:c2:
a4:ab:09:e5:72:fe:c2:97:2b:10:ad:0e:ef:79:71:
33:12:b0:b8:f3:16:b8:ae:6a:30:61:98:fe:ea:e5:
a9:f3:fb:6d:74:54:00:54:c0:e3:74:8c:91:93:36:
c1:a8:d7:fd:e1:88:3f:2f:fa:d2:75:3a:1e:01:b6:
b6:5f:ad:40:48:17:dd:54:17:20:6a:2c:d0:19:a3:
b8:ba:82:06:10:dd:7f:8d:e9:7a:35:4f:7f:c0:b4:
e2:6a:fe:6a:38:ea:70:8b:47:5f:73:6a:68:57:6c:
9f:0b:1b:34:98:09:b2:ab:90:18:94:d3:3c:c1:d2:
61:39:da:da:5b:6c:d4:87:4b:7c:5a:28:e9:97:6a:
d0:f8:c6:d6:ed:42:35:a5:97:8d:be:87:4d:e2:57:
f0:1e:f9:b1:bd:49:42:a3:5c:bc:fa:27:59:76:7d:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D8:40:AD:D3:12:BE:FE:32:28:BC:47:D4:7F:DA:53:6E:47:11:01
X509v3 Authority Key Identifier:
keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f1a0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:dc:c0:43:b9:0b:52:e3:f9:d3:b6:aa:bc:bf:46:8e:7d:a3:
a7:93:f1:9a:3b:dc:ae:de:af:14:d4:e3:df:0a:1a:41:31:d7:
0f:c5:80:7c:d2:80:8d:9b:cf:e9:33:fb:b8:cc:e2:b4:16:c1:
41:40:62:d0:3e:65:bd:4c:ef:2f:5d:8e:8a:b0:28:cd:8e:f2:
1e:da:a0:70:5a:8c:0d:91:d7:24:d2:15:72:fe:d6:09:5b:bc:
15:c3:08:84:55:34:92:a4:d6:40:32:3b:f2:26:b6:99:d3:a5:
bb:6f:8b:ea:1a:13:47:32:0b:d7:09:7f:e5:a7:39:3a:fb:a8:
c5:bd:48:e8:83:48:e2:8c:0d:da:23:ce:1a:d1:5e:52:b4:58:
8e:01:61:1b:b9:ea:87:e9:65:0d:1a:28:e8:a7:b0:44:24:7e:
8d:1e:44:1f:0e:bd:7e:47:97:00:51:6f:6b:9f:e6:55:c6:d3:
5d:23:7b:9e:47:c1:8d:73:7d:2d:68:c6:a0:6f:03:26:6a:71:
11:a8:92:24:e4:c0:07:20:cf:52:b9:16:f2:a7:18:36:c2:dd:
c4:3d:2f:5e:d9:17:23:52:45:ae:0c:5f:7e:dd:0b:5a:be:bf:
49:0e:2c:9d:cc:cd:46:9b:24:76:e5:57:df:27:6b:90:99:7c:
31:c6:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:08 2025 by rpki-client