Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/323830333a643234303a3a2f33322d3438203d3e20323633383131.roa
File: 323830333a643234303a3a2f33322d3438203d3e20323633383131.roa (raw, json)
Hash identifier: x81vkwSG57QSoznsQ+v6aeXylTdDBZKiZSIyl+kcKgc=
Subject key identifier: CA:D7:F4:81:E2:FE:72:22:B3:B5:B0:05:82:26:78:BC:35:B0:BD:0E
Certificate issuer: /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Certificate serial: 3647BCBABB0B163CB93048B259457EA06067318F
Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/323830333a643234303a3a2f33322d3438203d3e20323633383131.roa
Signing time: Tue 04 Feb 2025 18:16:03 +0000
ROA not before: Tue 04 Feb 2025 18:11:03 +0000
ROA not after: Tue 03 Feb 2026 18:16:03 +0000
asID: 263811
IP address blocks: 2803:d240::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:47:bc:ba:bb:0b:16:3c:b9:30:48:b2:59:45:7e:a0:60:67:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Validity
Not Before: Feb 4 18:11:03 2025 GMT
Not After : Feb 3 18:16:03 2026 GMT
Subject: CN=CAD7F481E2FE7222B3B5B005822678BC35B0BD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:59:c9:6f:83:1b:ec:09:e1:66:05:40:62:
cf:ae:f8:42:db:f3:a3:9f:d7:80:98:85:20:4d:d6:
8b:88:d8:b6:06:95:f6:2b:e0:ac:81:1a:2b:ee:85:
97:83:20:bf:8d:14:22:c3:1c:16:ae:aa:ee:6f:46:
08:d6:19:e7:83:86:ce:4a:b8:c6:0d:b4:a6:4e:61:
23:b2:e7:6f:49:42:f3:87:58:0b:59:bf:a4:c1:23:
54:82:b2:3f:31:33:e3:68:d4:80:37:57:da:b9:d2:
9c:6f:a8:8d:5c:10:89:0b:00:71:58:d9:7f:b8:0d:
ff:1d:34:57:ab:15:ee:b8:d7:84:58:cb:39:db:e4:
a1:3f:45:3c:3d:8f:04:e6:6f:89:8c:a7:d7:e4:8d:
c2:b7:63:00:f2:82:46:98:b8:70:e3:af:32:df:f3:
b2:65:50:79:a5:60:ca:6d:80:c5:40:38:82:c1:98:
60:5c:e3:37:d2:56:7a:3c:f2:90:18:33:50:79:36:
e0:70:88:02:27:24:cf:5c:6b:e9:77:24:d1:7f:d5:
e0:8e:95:c4:09:1a:69:8b:00:ae:9a:d6:39:86:5b:
3e:ae:25:a6:78:26:17:b5:93:ff:04:27:0a:1f:c6:
b2:7e:79:e1:58:dc:e1:40:37:68:19:6b:b7:90:f7:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:F4:81:E2:FE:72:22:B3:B5:B0:05:82:26:78:BC:35:B0:BD:0E
X509v3 Authority Key Identifier:
keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/323830333a643234303a3a2f33322d3438203d3e20323633383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d240::/32
Signature Algorithm: sha256WithRSAEncryption
3a:22:42:76:fa:04:5c:52:91:ba:e2:d4:db:2e:da:c3:52:0f:
00:44:45:e5:fc:fc:35:87:38:c2:0a:24:e8:a9:64:5c:f7:be:
c6:f5:19:f6:24:0c:32:f3:db:53:7a:7a:4b:ed:cb:ed:94:90:
74:9c:84:d1:b5:e9:4a:91:75:d6:e6:69:21:32:23:13:1c:44:
82:1c:a6:50:98:6f:b6:5c:51:34:e8:d1:bf:29:b6:80:28:12:
fd:5a:7f:7a:43:c5:87:d4:7e:aa:18:33:3c:c5:b6:bb:0b:50:
fa:7e:c4:d8:ee:fe:ce:8d:82:7c:5a:4d:f2:30:29:c6:fa:05:
d4:48:2f:ba:93:6c:72:2a:76:0c:d8:62:a1:c7:d4:86:60:df:
cd:8b:76:14:79:7b:b4:de:14:47:34:b1:cc:3e:b8:c0:22:7d:
98:be:3a:e8:e9:18:b5:9c:7c:2d:10:23:6c:ed:f3:d0:90:a1:
2b:11:35:dc:a6:53:6d:76:f9:00:6f:73:d0:c4:7f:20:d2:77:
1a:5a:f2:02:65:0a:f0:ef:62:47:ba:89:10:7e:bf:0b:97:ce:
e7:d0:ca:4f:30:9b:cf:7b:0d:29:98:62:68:56:d8:74:8c:a1:
57:53:83:fe:b5:30:aa:55:ad:76:81:9f:b2:27:34:e2:d6:5e:
bb:bd:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:02 2025 by rpki-client