Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa
File: 323830333a633239303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier: 6lb+Qbcfr2WCQoasm2uq1qbIEkgO7GtxVGYF2M9VqbM=
Subject key identifier: 85:68:41:5B:F8:F0:B7:0E:54:B9:DF:BC:F1:80:D2:6E:9B:BB:7F:EA
Certificate issuer: /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial: 35666298A357FB27C9B40B574E4C7E9CEF46803A
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa
Signing time: Tue 04 Feb 2025 18:36:17 +0000
ROA not before: Tue 04 Feb 2025 18:31:17 +0000
ROA not after: Tue 03 Feb 2026 18:36:17 +0000
asID: 272854
IP address blocks: 2803:c290::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:66:62:98:a3:57:fb:27:c9:b4:0b:57:4e:4c:7e:9c:ef:46:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Validity
Not Before: Feb 4 18:31:17 2025 GMT
Not After : Feb 3 18:36:17 2026 GMT
Subject: CN=8568415BF8F0B70E54B9DFBCF180D26E9BBB7FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:bc:23:08:10:1b:48:c6:a8:3d:12:a7:c1:
b9:52:3d:95:48:66:04:79:0d:09:c7:0d:05:b6:53:
56:94:d8:b8:cd:40:14:00:bb:39:70:2f:95:c5:2c:
d5:e4:b2:8a:fa:88:19:ef:c5:9b:6d:9b:79:22:d7:
9a:69:5e:ac:b9:95:87:ab:9c:a1:06:ca:e2:34:fb:
d8:db:2f:a6:3a:8d:b2:e7:a4:e3:f0:aa:0c:20:78:
ef:04:46:1a:b2:d9:e5:65:bb:e9:19:89:0d:b9:1d:
63:0f:a1:c7:66:80:ad:af:fc:96:6f:79:5f:95:07:
b3:b8:8e:60:66:c1:fe:eb:c7:1c:90:b0:4a:2e:ea:
7c:df:dd:d7:c8:72:0f:c8:ba:5d:9f:a8:c6:43:0c:
b7:d3:49:c2:19:3a:8d:8c:7e:a6:0a:c0:6a:a1:27:
3a:ee:fc:31:74:71:ee:42:c0:3b:d4:01:a3:20:1c:
fb:dd:f4:c8:0e:10:a2:ce:92:9a:6e:cf:99:86:29:
a8:10:2c:ba:f5:bc:4e:aa:9f:6c:93:a2:18:3a:34:
63:f6:57:c2:30:14:ed:6f:89:6d:3b:37:f4:9d:da:
a0:ea:15:24:f1:41:dc:f1:67:cd:44:85:5a:cd:d3:
f0:48:50:14:fd:35:ac:ac:88:fd:61:5b:8a:32:10:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:41:5B:F8:F0:B7:0E:54:B9:DF:BC:F1:80:D2:6E:9B:BB:7F:EA
X509v3 Authority Key Identifier:
keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c290::/40
Signature Algorithm: sha256WithRSAEncryption
53:4f:0e:b6:2f:97:2e:d2:dc:b6:f7:02:1e:ee:ee:c8:e6:d0:
87:25:dc:85:f0:f9:54:00:34:10:4d:dc:8a:a9:f0:7d:66:14:
1f:d6:a2:7f:ee:3a:c0:8d:cf:74:42:6e:49:f0:c0:dc:e0:87:
b0:6a:44:0e:f6:36:e1:11:36:30:b5:21:6b:bc:e2:c6:d3:4f:
fc:24:99:5b:3f:fb:8e:40:16:4d:3d:7c:7b:be:26:8d:dd:98:
b0:2f:2b:eb:9e:1f:1b:b0:03:84:b0:ce:92:80:db:28:64:d5:
ee:37:78:93:1b:8d:03:cf:ac:49:ae:86:d1:de:7e:9b:bf:0b:
ec:00:2a:79:69:c4:e2:ea:eb:06:73:aa:9e:0f:cf:27:a3:9a:
5e:65:87:5d:97:23:7d:b8:12:d8:31:8b:4f:e9:d0:47:31:d0:
7a:c6:c4:f3:60:1e:04:73:fc:64:23:21:af:19:08:75:99:9c:
8b:d4:39:ae:2c:17:e2:49:d9:51:bc:4d:8a:cd:b4:28:4b:3e:
df:bb:c0:2a:97:83:8b:28:d7:3a:88:fc:11:18:4d:2a:31:b8:
ea:ad:47:3d:b6:55:cb:1d:3a:70:08:17:ef:40:a6:25:0d:08:
27:eb:d3:3a:5a:d8:0a:95:a9:0b:9f:d9:88:ab:6b:b9:e2:78:
15:d3:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:01 2025 by rpki-client