Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa
File: 323830363a3238653a3a2f33322d3332203d3e20323635353330.roa (raw, json)
Hash identifier: M4lYfMwxi3LRDhmunYDA0TtGyJI5WZl72NNAQMExhuk=
Subject key identifier: CF:B6:9D:54:7F:9F:42:87:B0:04:7A:1F:7E:15:80:08:2F:F9:A8:45
Certificate issuer: /CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Certificate serial: 53AF75B9A9849C20CC8B870573E5C0495D43DE77
Authority key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa
Signing time: Tue 04 Feb 2025 20:00:18 +0000
ROA not before: Tue 04 Feb 2025 19:55:18 +0000
ROA not after: Tue 03 Feb 2026 20:00:18 +0000
asID: 265530
IP address blocks: 2806:28e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:af:75:b9:a9:84:9c:20:cc:8b:87:05:73:e5:c0:49:5d:43:de:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Validity
Not Before: Feb 4 19:55:18 2025 GMT
Not After : Feb 3 20:00:18 2026 GMT
Subject: CN=CFB69D547F9F4287B0047A1F7E1580082FF9A845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:4d:fb:5e:4c:b9:ed:6a:72:d4:e4:a8:8c:
f8:7d:40:a5:eb:39:d6:f8:91:1b:76:0a:cb:65:e3:
a2:a6:12:4d:8b:76:f0:ca:6a:76:96:b8:70:5b:42:
d0:bf:b9:76:5b:c6:be:c4:d0:3c:18:0e:8a:74:93:
53:59:42:47:32:14:96:0c:f6:1a:b5:07:c2:84:81:
5f:ca:26:69:16:c2:fd:62:21:33:b0:2d:fa:f6:c9:
51:0d:4e:02:31:df:af:5d:72:e9:09:b3:15:97:7d:
c2:4a:db:b1:4e:a2:68:a3:53:36:dd:25:4d:61:d6:
bf:a6:b0:4b:6d:0d:ef:32:af:99:5b:5c:05:f0:29:
c1:59:28:db:7a:5c:20:56:b9:4c:a4:bf:7d:94:d1:
e2:e8:29:e5:1b:00:cf:82:64:7a:74:fc:83:2d:67:
1b:d7:7c:7b:a9:42:59:34:b9:46:79:10:b5:d8:03:
80:bf:42:b9:de:15:13:56:89:e8:62:43:c1:a3:86:
ec:5a:3d:7c:2f:eb:d1:fe:c5:c0:74:af:cf:ae:04:
03:cd:d8:3f:57:49:bb:0d:ac:ac:3c:16:a7:ed:02:
eb:b7:a8:0a:5b:7a:9d:2b:0b:24:4e:48:29:42:db:
d7:01:f5:c4:fb:4b:91:d9:90:23:29:de:14:ba:65:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:9D:54:7F:9F:42:87:B0:04:7A:1F:7E:15:80:08:2F:F9:A8:45
X509v3 Authority Key Identifier:
keyid:00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:28e::/32
Signature Algorithm: sha256WithRSAEncryption
46:4b:2c:e7:91:a3:5a:51:c2:fc:e7:53:4c:85:61:e1:50:5c:
5d:f1:c9:c1:fa:bd:b8:b2:0e:67:bb:c9:b1:81:57:c4:05:f2:
ec:62:e0:83:38:5c:ca:88:c0:9a:ee:62:fe:c3:99:b3:44:60:
b3:00:d7:f8:7c:40:86:b9:90:68:33:e1:d5:d2:4a:16:44:e7:
41:8f:1e:f8:4b:9b:c4:a2:43:a1:33:40:52:64:5d:73:77:19:
a7:3c:7c:7c:78:c4:e1:11:bc:5f:6d:69:89:84:45:38:8e:d9:
a8:fc:1c:25:a9:5a:2c:28:89:9c:de:c6:f2:49:29:f2:ee:b0:
d2:55:73:ae:4f:4d:dd:25:be:f9:c3:13:5a:a9:e5:87:4e:4f:
7b:38:dd:04:a3:af:f2:06:bb:75:a5:d6:10:c4:36:56:1f:d7:
1a:7e:5f:8d:d2:cb:85:e3:e9:a4:29:b1:c3:2b:d4:f6:a9:53:
39:fb:57:97:39:ec:87:b0:b5:7f:b9:16:ff:f8:7a:d4:8e:c0:
03:c6:40:2a:db:52:ad:99:75:20:74:1e:8f:08:81:f1:7d:6b:
eb:10:70:75:ec:5f:b1:7f:67:5e:2c:f3:0c:a8:2b:90:96:67:
37:e0:bb:86:c1:77:79:63:1d:fd:0d:e6:33:83:fb:6b:4c:9c:
ea:90:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client