Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa
File: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (raw, json)
Hash identifier: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=
Subject key identifier: 89:A3:65:6E:83:98:6C:4F:BC:B9:75:91:89:AA:F0:50:62:75:F1:EC
Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial: 56087A3253440683B3F3300645104C3A78BC8C72
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa
Signing time: Thu 06 Feb 2025 13:09:12 +0000
ROA not before: Thu 06 Feb 2025 13:04:12 +0000
ROA not after: Thu 05 Feb 2026 13:09:12 +0000
asID: 266710
IP address blocks: 2803:320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:08:7a:32:53:44:06:83:b3:f3:30:06:45:10:4c:3a:78:bc:8c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Validity
Not Before: Feb 6 13:04:12 2025 GMT
Not After : Feb 5 13:09:12 2026 GMT
Subject: CN=89A3656E83986C4FBCB9759189AAF0506275F1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:45:9e:60:b8:a6:0b:7c:1f:3f:8b:75:39:
79:af:4b:ef:0d:0e:e6:67:bc:24:fa:68:2c:6e:e3:
5b:11:9b:23:02:6d:dc:b9:82:7c:c1:18:c5:da:3a:
47:dd:47:60:f7:30:0b:21:38:eb:50:b8:6d:19:4f:
4f:91:b1:88:ef:44:88:95:e9:1f:25:22:3a:a5:52:
7e:85:dd:7a:78:71:3e:60:5f:e5:5c:39:1d:83:69:
40:c5:48:2c:8e:32:76:82:9d:78:9c:ae:a7:ba:8a:
5b:6d:56:82:93:69:9c:0b:06:8e:98:7a:69:f3:ca:
a6:b2:34:88:b0:3d:d4:e9:21:bc:5d:f7:13:bc:80:
11:d7:2d:be:6b:c8:be:77:c8:8e:94:9d:0f:f1:4c:
62:cf:eb:1a:09:46:90:df:ef:4d:c9:27:25:3c:99:
fa:55:70:d6:70:c3:bf:d2:ac:30:62:ab:a6:86:6b:
9b:7e:61:10:42:58:27:af:dc:32:2e:c8:cf:08:a9:
de:64:6a:b5:8a:72:a8:61:3f:3c:82:bb:37:7b:51:
e6:8e:0d:40:a8:36:9a:fe:1e:c6:ff:67:39:61:db:
db:b2:f3:89:b0:da:b9:6e:f2:79:71:f0:57:29:4a:
ea:13:69:0b:60:8d:1f:3a:b8:f8:a2:c3:72:61:51:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:65:6E:83:98:6C:4F:BC:B9:75:91:89:AA:F0:50:62:75:F1:EC
X509v3 Authority Key Identifier:
keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:320::/32
Signature Algorithm: sha256WithRSAEncryption
5b:c9:51:d5:06:7f:de:57:bb:92:82:4c:91:a2:b8:52:71:29:
60:83:c7:4e:a4:d9:42:f0:dd:fa:b2:ba:0e:e8:5f:9f:75:4e:
22:77:3a:25:53:03:52:59:38:73:c3:d7:3d:19:ba:b5:2b:7f:
41:a9:31:0a:7c:1b:91:00:64:b5:61:1c:42:7c:b2:9a:e0:c3:
9a:80:84:b9:1c:d6:bf:33:92:c6:72:42:4a:f9:d0:48:55:ca:
fd:e3:33:60:ac:cb:48:00:d2:ef:bf:69:39:9b:49:ed:d1:b6:
db:2c:bf:5d:50:b1:30:17:03:39:a4:b9:51:97:fd:6b:09:73:
a0:ed:21:9c:27:b2:2d:e5:64:86:0b:af:5c:1d:11:eb:fe:c0:
21:a9:e3:bf:41:e4:73:ef:26:9a:ec:74:55:3c:25:0f:b9:19:
bc:fb:99:80:9a:2d:e4:bd:de:31:76:fe:b6:4f:98:dd:ca:44:
4e:57:e8:0a:ec:be:74:5d:51:8f:0d:9c:03:3c:3e:0c:19:e8:
74:df:d1:1f:83:59:ff:f0:8c:ae:0d:66:73:48:b1:ca:57:8c:
7b:07:72:26:9a:b4:e5:27:98:90:82:84:1b:42:0b:5e:7d:a8:
bd:06:99:c9:b4:f4:2e:e1:41:c4:ea:2d:56:bd:7b:9a:bd:c6:
0f:5a:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:27 2025 by rpki-client