Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/323830333a636361303a3a2f33322d3332203d3e20323636383335.roa
File: 323830333a636361303a3a2f33322d3332203d3e20323636383335.roa (raw, json)
Hash identifier: v3jxoOVx83TwVxWjlR6Z78kY9Z1R0wpyD5plL3505xw=
Subject key identifier: E6:3A:5F:7E:A4:C5:DA:3D:38:79:70:8C:7A:85:32:61:7A:1D:7F:4A
Certificate issuer: /CN=8ED988BB4594C0931D8088BB90E5E46825FF2801
Certificate serial: 4DDDE671AF56A8EE21C130F3635204825904506D
Authority key identifier: 8E:D9:88:BB:45:94:C0:93:1D:80:88:BB:90:E5:E4:68:25:FF:28:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/323830333a636361303a3a2f33322d3332203d3e20323636383335.roa
Signing time: Tue 04 Feb 2025 18:22:41 +0000
ROA not before: Tue 04 Feb 2025 18:17:41 +0000
ROA not after: Tue 03 Feb 2026 18:22:41 +0000
asID: 266835
IP address blocks: 2803:cca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:dd:e6:71:af:56:a8:ee:21:c1:30:f3:63:52:04:82:59:04:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ED988BB4594C0931D8088BB90E5E46825FF2801
Validity
Not Before: Feb 4 18:17:41 2025 GMT
Not After : Feb 3 18:22:41 2026 GMT
Subject: CN=E63A5F7EA4C5DA3D3879708C7A8532617A1D7F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:ed:76:45:8e:eb:fe:5f:85:7b:b6:e2:b0:
f4:a7:0d:64:54:0d:f2:d9:77:4f:f0:3d:9d:5f:fb:
10:89:aa:fb:01:7c:ce:a3:c9:b1:e2:43:f6:c9:41:
7b:f4:a0:74:29:8c:c8:82:2e:d1:b2:55:19:22:74:
da:d7:2b:4d:e7:dd:12:8b:20:c2:d2:4a:1c:3e:cc:
79:b8:bd:62:2e:7f:d1:8e:fd:89:cc:5d:e9:46:cc:
03:a5:19:99:e9:02:be:ab:bd:ff:f9:8d:b1:cc:53:
50:29:d6:09:47:ec:ee:34:5e:9e:c5:41:72:74:ca:
e4:ab:83:be:75:5d:e6:d5:d6:ed:da:72:52:6e:44:
52:c8:ee:f5:c6:0e:7f:26:9e:5d:9c:a1:1d:be:66:
c3:e6:74:cd:0c:29:2d:ab:0b:a3:cc:cf:4c:26:7a:
ae:cd:f0:a9:f9:c1:b7:21:4d:f8:27:f0:56:5d:9d:
fd:65:3b:c5:f7:7a:85:19:21:42:52:d3:99:9d:6b:
a4:f5:ce:bd:3a:b1:c5:f3:d0:44:f9:1d:b1:2a:5c:
1e:b2:b3:08:ed:33:46:cb:d0:40:27:0f:ab:cd:fa:
d1:df:ae:99:c7:61:39:42:5e:f8:af:ca:0d:33:e3:
37:4d:95:24:84:30:97:f3:73:3d:9c:9c:7b:2a:e4:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:5F:7E:A4:C5:DA:3D:38:79:70:8C:7A:85:32:61:7A:1D:7F:4A
X509v3 Authority Key Identifier:
keyid:8E:D9:88:BB:45:94:C0:93:1D:80:88:BB:90:E5:E4:68:25:FF:28:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/323830333a636361303a3a2f33322d3332203d3e20323636383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cca0::/32
Signature Algorithm: sha256WithRSAEncryption
57:57:db:7b:42:28:94:98:b6:52:f3:d9:7d:41:fc:b5:d1:9c:
da:71:66:c2:91:b2:72:61:09:8b:0a:75:37:8f:b3:2c:cb:8e:
6e:6e:9a:f6:b1:e0:d8:29:0f:0c:52:eb:2c:ca:03:7c:5e:e3:
40:30:76:a6:24:08:8f:40:9a:97:61:f0:a8:aa:a0:79:aa:2c:
dd:bc:3c:ce:9c:85:6b:0a:15:25:a6:09:89:b2:e7:fb:fc:e7:
e7:88:d1:37:9d:0f:b5:ad:72:6c:4e:a6:c7:b2:b8:6d:cf:c6:
d7:32:b3:32:e1:ea:d6:6e:d6:8d:22:94:55:d4:ff:fb:84:8c:
29:f9:09:50:be:69:b1:c4:02:8b:b6:52:73:21:44:d0:2d:21:
80:9e:a4:d9:5d:48:74:b1:34:33:6e:bc:3f:cc:9a:e6:8f:3b:
84:db:0d:82:4c:d4:83:58:66:fd:07:86:ba:b7:12:95:8f:04:
56:d1:b7:4e:94:05:51:75:d6:10:8d:9d:df:a5:58:63:2c:a9:
62:13:0a:80:13:67:47:98:6f:50:d5:24:c9:7b:f0:77:dd:78:
31:88:49:28:33:b4:31:3a:8d:1a:65:41:31:c3:d2:c8:d9:31:
e4:ca:96:1d:ae:2d:de:7d:9f:2a:1c:91:9d:f4:8e:c4:13:2a:
f6:83:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client