Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa
File: 323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier: CYdjdK2uSgPXSjL8XSVVStG2mMKkRBGEwdG8v8xR9oE=
Subject key identifier: C0:AA:17:CD:ED:29:1F:7D:57:CC:63:20:E8:E3:32:A3:52:3B:1F:4A
Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial: 61845D614419E2989FA4D6FA0255565A2B86D76A
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa
Signing time: Tue 04 Feb 2025 19:57:35 +0000
ROA not before: Tue 04 Feb 2025 19:52:35 +0000
ROA not after: Tue 03 Feb 2026 19:57:35 +0000
asID: 273072
IP address blocks: 2803:cf90:4e00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:84:5d:61:44:19:e2:98:9f:a4:d6:fa:02:55:56:5a:2b:86:d7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Validity
Not Before: Feb 4 19:52:35 2025 GMT
Not After : Feb 3 19:57:35 2026 GMT
Subject: CN=C0AA17CDED291F7D57CC6320E8E332A3523B1F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:59:49:f9:ee:89:a4:8f:37:73:16:d6:06:
92:57:6e:92:10:4d:cc:7b:4b:53:34:1c:27:7c:dc:
7f:75:2e:a8:d1:de:a5:36:05:ce:01:94:8e:bd:6b:
45:53:5e:2e:e8:73:92:c0:2f:df:96:d0:b6:f2:1f:
7d:55:4c:ab:3e:a3:52:23:32:44:a4:0c:e7:dc:2c:
4c:ec:85:65:06:ef:3d:91:e2:03:2a:9d:1c:ba:4a:
b8:be:78:8a:d5:d5:75:d0:cb:25:a5:ed:bb:5d:1a:
28:e2:6b:27:94:8d:4c:82:0d:0c:23:3b:f5:0a:6c:
c1:a9:ac:b2:a2:f0:eb:8d:6f:44:a4:d4:eb:f6:54:
fb:0b:66:4b:f9:d0:89:01:53:81:2f:07:9f:31:63:
b9:c3:11:58:ae:64:79:39:bb:59:25:41:66:b9:e2:
28:c1:d8:1b:4d:43:00:42:94:6c:8d:02:fa:9d:c1:
06:9f:78:43:1a:71:e8:e4:5a:7a:ea:35:65:77:6e:
98:1e:86:e3:ab:30:d7:ad:dd:38:c2:d6:22:7b:63:
21:98:f6:cf:d8:d6:dd:f4:a2:55:43:a7:da:c7:ff:
86:38:1d:8f:5a:ff:f3:bc:8e:43:81:ab:d9:30:89:
b6:d3:e1:44:dd:8f:56:4e:de:bb:82:12:ef:ed:83:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:17:CD:ED:29:1F:7D:57:CC:63:20:E8:E3:32:A3:52:3B:1F:4A
X509v3 Authority Key Identifier:
keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cf90:4e00::/40
Signature Algorithm: sha256WithRSAEncryption
38:00:4e:a1:30:50:09:9e:1b:e3:b0:da:08:53:9b:14:9e:d2:
c3:14:45:2a:8a:15:70:68:83:48:7b:a2:82:de:78:94:6e:9d:
59:f6:92:1d:3e:2a:d4:28:3c:a3:49:4f:6f:51:7e:56:da:7e:
23:6a:f0:4a:19:6e:00:71:69:d4:2d:6c:4d:9b:b2:a5:33:1c:
0a:57:c3:40:bc:e8:e7:0e:05:c2:0f:8e:db:f3:c6:f3:62:54:
9c:44:0b:a2:6e:73:77:18:62:b5:d6:76:98:ac:36:c3:0c:7d:
41:5b:5a:af:5a:86:39:d8:ce:04:01:75:e5:f2:a7:e5:1b:fa:
f1:cb:8e:bc:6d:62:f6:4f:24:f6:cc:fe:f2:29:ea:f7:51:c4:
80:f6:a5:87:bc:be:b8:5d:e8:92:93:89:d7:8f:ac:76:35:a0:
33:5b:88:bd:85:7b:6f:68:66:00:d4:9e:05:e1:ea:08:a7:a1:
68:bc:c6:f9:f3:71:f9:d6:32:6e:83:fa:9e:b8:10:23:55:90:
9c:87:35:08:21:2a:2d:3a:64:cc:c0:93:7e:60:4b:73:70:24:
f7:b9:75:27:bd:aa:9d:b2:13:84:f1:40:41:ec:79:14:8d:5b:
45:fe:26:50:b8:f4:00:fb:35:70:f6:ff:fc:78:b9:fc:91:b2:
28:1d:b4:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:38 2025 by rpki-client