Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
File: 323830333a6439303a3a2f33322d3430203d3e20323732393837.roa (raw, json)
Hash identifier: +zKPSI0LrgdffO8kGcW33hCjThaS/Y2dNtheg1SyVlA=
Subject key identifier: 9C:37:D2:08:F8:17:D7:94:43:F7:D9:7E:40:AA:85:27:2F:93:71:DA
Certificate issuer: /CN=D746D75B817C987CF5174C6C1F75102E45E1979E
Certificate serial: 3BD251E5656968649AD5C72280E3D656E55D72
Authority key identifier: D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
Signing time: Tue 04 Feb 2025 18:51:19 +0000
ROA not before: Tue 04 Feb 2025 18:46:19 +0000
ROA not after: Tue 03 Feb 2026 18:51:19 +0000
asID: 272987
IP address blocks: 2803:d90::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d2:51:e5:65:69:68:64:9a:d5:c7:22:80:e3:d6:56:e5:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D746D75B817C987CF5174C6C1F75102E45E1979E
Validity
Not Before: Feb 4 18:46:19 2025 GMT
Not After : Feb 3 18:51:19 2026 GMT
Subject: CN=9C37D208F817D79443F7D97E40AA85272F9371DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:c4:fd:0d:e1:49:2b:c5:8e:ad:aa:b0:ce:
44:c2:c9:2f:ec:4f:69:13:35:de:d6:6b:25:26:aa:
9a:08:65:80:e6:41:28:3f:42:ba:13:d1:ac:0e:48:
b9:d2:a9:e7:1b:73:71:04:91:fe:d3:aa:9c:e6:57:
e8:fd:c6:ff:09:e6:ec:e9:81:34:e9:41:f5:48:d8:
f4:70:af:f0:54:09:36:8a:d8:eb:9e:c9:2a:ac:93:
c7:d7:b9:5e:62:20:ed:9a:3a:ea:9c:48:04:50:66:
5a:31:d8:b7:c1:0c:18:40:e0:eb:4f:61:83:72:9b:
8f:2d:a3:25:8c:c2:9a:a1:01:bc:5f:f8:84:4d:89:
89:38:b5:74:72:6a:17:5e:49:7c:82:03:b5:90:73:
b2:38:b5:f1:06:7b:63:0f:aa:a7:dd:c7:82:1b:a8:
db:40:73:64:ce:2f:62:01:1f:44:ad:d6:0b:53:3f:
ad:4a:d3:38:3d:f3:8b:75:a9:87:83:5b:ca:b6:66:
5d:aa:3b:53:52:b6:a2:2d:55:bb:ee:a2:f8:ff:5f:
75:72:b8:b6:13:6f:ef:28:0d:2c:de:2f:bd:2f:ea:
89:70:9c:a8:05:4a:24:73:2e:4d:b6:ee:a0:44:76:
22:84:0e:20:9c:f5:f8:22:78:18:7c:72:c2:7e:87:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:D2:08:F8:17:D7:94:43:F7:D9:7E:40:AA:85:27:2F:93:71:DA
X509v3 Authority Key Identifier:
keyid:D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d90::/32
Signature Algorithm: sha256WithRSAEncryption
87:0e:64:c4:a3:1c:af:f0:37:27:06:f5:5a:dc:bc:4c:97:9e:
fb:bd:e5:02:93:eb:06:b6:1c:57:bd:e9:9b:59:bc:0f:9f:53:
21:6e:56:fa:51:47:95:e2:1e:93:ed:5c:7e:f0:58:d6:40:c8:
1a:3e:6d:1e:7e:ec:fd:a6:65:01:6b:61:9d:a3:9f:7d:19:e5:
5e:5f:53:df:14:84:8d:a5:d5:7f:c4:ea:83:6a:aa:ac:01:a5:
26:ce:bb:48:25:fd:2d:a3:c8:f7:98:89:05:cf:de:a5:fc:99:
b4:a2:23:37:44:a7:82:f0:0c:d2:bb:5a:48:6c:30:a2:a8:48:
a4:2b:64:1a:84:c5:74:18:9f:b6:2f:e5:8b:f4:76:89:b1:7b:
e3:e0:ac:27:69:cc:ba:be:97:8b:7c:ba:5c:d2:87:e8:55:dd:
60:6f:01:56:d9:e8:47:14:f2:23:59:74:4b:93:9c:c7:8b:d5:
66:ba:d4:a9:40:91:c5:03:1e:cc:80:c5:5d:a7:fc:14:a1:be:
2a:fe:ad:eb:e8:23:c2:cd:ed:7a:29:2a:5a:e2:32:71:3e:0d:
29:a3:51:6d:a4:7d:87:73:f0:18:19:3a:55:26:b9:c6:8c:ab:
e3:ce:fc:7c:e1:24:9a:32:cc:84:65:57:3a:56:8c:23:64:04:
ad:b0:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:59 2025 by rpki-client