Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/323830333a383732303a3a2f33322d3332203d3e20323636373535.roa
File: 323830333a383732303a3a2f33322d3332203d3e20323636373535.roa (raw, json)
Hash identifier: VsUc3UIasIz+vZe/06EWSPl1aBRGi6h4bZL6SRdyNUs=
Subject key identifier: 34:2A:91:35:E1:DF:E7:92:9D:53:F6:CD:3F:D8:8E:EB:9C:1D:21:4F
Certificate issuer: /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial: 08D5586995D6ACE0BCE02535DFBFBCAA8C695779
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/323830333a383732303a3a2f33322d3332203d3e20323636373535.roa
Signing time: Tue 04 Feb 2025 18:52:40 +0000
ROA not before: Tue 04 Feb 2025 18:47:40 +0000
ROA not after: Tue 03 Feb 2026 18:52:40 +0000
asID: 266755
IP address blocks: 2803:8720::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d5:58:69:95:d6:ac:e0:bc:e0:25:35:df:bf:bc:aa:8c:69:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Validity
Not Before: Feb 4 18:47:40 2025 GMT
Not After : Feb 3 18:52:40 2026 GMT
Subject: CN=342A9135E1DFE7929D53F6CD3FD88EEB9C1D214F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:c3:c9:29:bc:9e:d3:dd:7b:6e:e6:d4:60:
a0:ee:e2:1a:65:d4:c7:af:92:7d:70:07:6a:16:4c:
9d:c5:de:86:d7:ef:af:16:8b:0a:93:92:d0:35:ee:
24:ce:ab:31:22:d6:39:bf:44:9c:72:a9:3f:a1:8a:
87:80:37:9a:09:82:aa:ca:39:90:fb:23:c7:51:29:
f0:6f:e9:23:cc:db:90:06:cd:c9:ca:6a:99:3d:9f:
f4:ce:e7:79:ce:68:34:7a:af:2d:4e:8b:39:52:89:
50:41:02:cb:81:6a:e0:a1:39:61:ae:83:48:a2:f5:
ef:3f:1e:73:7c:85:6e:95:01:49:e3:9c:28:7c:9f:
f1:21:ff:e8:35:08:8b:c2:29:4c:05:67:6d:e9:8b:
bf:9a:a0:2f:de:a3:82:c2:28:de:ea:3f:98:fe:e4:
31:b5:32:13:dd:82:26:71:ee:ea:0e:e3:90:1d:06:
4a:03:1b:27:d3:fa:58:9d:97:1f:40:49:ec:2b:37:
d4:ca:7c:83:81:45:3f:0e:53:d9:e6:56:bd:ba:19:
85:d3:e1:7c:1e:37:5f:8b:a4:0f:7b:86:b6:37:f9:
31:82:0c:2f:64:2a:07:2d:15:c2:82:8f:6e:39:c7:
78:50:7f:36:88:b1:92:d0:e2:c0:88:b4:00:cb:20:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:91:35:E1:DF:E7:92:9D:53:F6:CD:3F:D8:8E:EB:9C:1D:21:4F
X509v3 Authority Key Identifier:
keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/323830333a383732303a3a2f33322d3332203d3e20323636373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8720::/32
Signature Algorithm: sha256WithRSAEncryption
94:be:07:48:79:6a:bc:60:f0:c9:65:58:39:ad:47:e1:44:93:
01:2c:ac:39:87:23:61:21:ac:70:5f:e6:ee:80:cc:91:06:b8:
6e:ad:97:1f:34:2a:02:15:d3:8f:d7:6c:0a:fb:84:ba:c9:9d:
aa:d8:24:8d:40:85:cd:a1:1d:38:0d:ff:df:fb:be:f0:da:04:
c7:26:f3:45:dd:98:30:28:d4:cd:90:1b:83:9c:71:93:51:60:
0b:cc:15:3d:ea:32:12:f7:a2:ba:a8:93:49:1c:28:39:fb:57:
18:b9:76:44:71:32:61:96:4c:ff:86:27:ab:b9:f6:f0:5c:6a:
79:ff:59:c7:a5:42:1e:f4:f6:d7:3f:af:a2:18:04:46:6d:56:
8c:e4:e3:d0:31:08:b8:7e:14:43:13:2a:b4:8a:26:e0:37:b0:
49:10:28:0c:89:12:24:91:ad:59:b9:d2:e3:4b:9e:89:e6:5e:
9b:73:01:a5:6f:22:7a:33:e7:d9:eb:57:ce:cd:17:d6:51:65:
09:54:e9:24:92:16:57:1c:61:18:a1:7b:4b:67:ef:83:6a:1d:
42:08:a6:aa:84:c4:76:b5:3a:ef:b2:d9:dc:95:b0:c0:e6:e0:
be:ef:49:f2:1e:7f:2a:ba:c5:ab:8f:4c:46:23:bc:b3:33:a1:
65:61:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:13 2025 by rpki-client