Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e20323634363638.roa
File: 323830333a656332303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier: H4+LPjJFnszBOdj+JpZwyNjQ0iyGHnbxCgdcQWt3Fdo=
Subject key identifier: 75:E3:05:76:EE:EE:53:4B:24:BD:2B:D2:B1:68:DF:18:1E:38:9B:9A
Certificate issuer: /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial: 30DA0BA0A8E00629259C4312CB17BC41B2938B18
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:16:50 +0000
ROA not before: Tue 04 Feb 2025 18:11:50 +0000
ROA not after: Tue 03 Feb 2026 18:16:50 +0000
asID: 264668
IP address blocks: 2803:ec20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:da:0b:a0:a8:e0:06:29:25:9c:43:12:cb:17:bc:41:b2:93:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Validity
Not Before: Feb 4 18:11:50 2025 GMT
Not After : Feb 3 18:16:50 2026 GMT
Subject: CN=75E30576EEEE534B24BD2BD2B168DF181E389B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:41:43:2b:46:27:ed:76:ad:ec:ae:39:fc:
05:3b:32:ef:4d:5d:af:72:10:77:d0:04:38:3b:dd:
ed:ad:91:51:2a:3d:b1:c4:db:8c:e7:39:79:60:f4:
68:b6:3a:09:08:7d:87:8e:9e:cf:4b:e7:1c:74:18:
2d:f3:07:f9:4b:48:ee:ad:cf:a1:8b:a3:aa:31:a5:
ec:49:3f:a1:31:59:d3:14:45:ab:49:af:80:02:36:
9c:8b:97:fa:e4:b0:1d:cc:6b:98:ec:c4:c2:e4:95:
d0:cf:9c:c8:c3:53:d4:34:d5:99:51:03:c1:d9:e5:
d3:a6:f5:f0:dd:7f:7b:b3:86:4a:dd:d0:35:60:b2:
a7:1d:f3:0b:66:5f:be:1c:b7:5b:27:77:7b:2f:30:
5e:50:c1:dc:d4:93:fc:74:fa:e4:89:53:bf:be:6e:
ba:34:4f:bc:e6:fa:d7:cb:19:3b:ec:09:7c:75:15:
0b:ff:52:a1:ac:27:3c:95:08:0f:1a:99:13:18:8e:
fb:11:6b:3d:ae:c9:a1:f8:67:17:33:35:81:af:16:
a3:69:a9:f7:a7:58:bd:81:65:ca:03:fd:11:cc:f0:
20:58:d9:40:fd:c0:18:28:7c:ac:63:47:f2:ab:e3:
4b:8b:71:1f:2c:45:84:7a:03:3e:ac:69:5c:79:b9:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:05:76:EE:EE:53:4B:24:BD:2B:D2:B1:68:DF:18:1E:38:9B:9A
X509v3 Authority Key Identifier:
keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ec20::/32
Signature Algorithm: sha256WithRSAEncryption
49:08:f7:e9:f5:4b:cc:ac:25:5f:7b:4a:3a:9e:ef:b3:8c:03:
af:f3:75:dd:e5:bb:63:c6:55:ee:f9:dd:07:b4:d9:70:6a:f1:
dd:dd:95:77:eb:6f:2c:0f:8e:21:96:6d:aa:f6:61:5d:6d:3e:
8d:5f:d3:5d:94:ea:cc:39:f5:13:ef:ac:0d:5c:dc:0b:af:58:
c6:d2:74:3a:1c:89:76:18:6a:47:b5:34:a2:9c:d7:3e:11:4c:
a2:bb:b3:db:5c:77:9a:7d:ce:13:c4:49:99:5a:60:8d:a4:dc:
45:92:7a:6f:ee:02:ba:89:6a:a3:54:df:86:ea:8b:04:dc:5b:
85:d4:90:c5:40:30:e9:9a:86:36:de:a5:39:84:8a:55:af:17:
cb:4e:8c:bd:56:b0:e0:4e:6d:7a:5a:17:57:a1:6a:1e:75:9e:
b2:28:fe:e3:a4:cc:d9:41:74:fd:2e:e6:25:bf:06:7a:4e:d1:
62:7b:fa:b7:96:e0:dd:d1:bf:60:85:f1:32:ee:d3:bd:65:5d:
9d:cb:bd:b5:0b:a7:6f:45:50:8c:19:fb:4a:18:ce:1d:b9:a4:
79:1f:91:fd:3c:71:f0:66:df:7f:f4:c6:f8:a7:95:89:a0:33:
ef:c5:64:b3:bf:57:17:f6:42:8f:4e:72:e3:af:d2:51:46:e9:
a3:a2:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:34 2025 by rpki-client