Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa
File: 323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa (raw, json)
Hash identifier: fBQz6fEfV4iAn4LqFVnTepTzn+FQhotOMq7gg4snCcU=
Subject key identifier: 5F:70:42:EC:3D:78:04:71:9A:94:A6:DE:CC:F3:33:87:AA:B1:13:27
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 03ECF437FD35FE2DD41A3E03CA79C13BA540527E
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa
Signing time: Tue 04 Feb 2025 18:25:04 +0000
ROA not before: Tue 04 Feb 2025 18:20:04 +0000
ROA not after: Tue 03 Feb 2026 18:25:04 +0000
asID: 27818
IP address blocks: 2803:3380:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ec:f4:37:fd:35:fe:2d:d4:1a:3e:03:ca:79:c1:3b:a5:40:52:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Feb 4 18:20:04 2025 GMT
Not After : Feb 3 18:25:04 2026 GMT
Subject: CN=5F7042EC3D7804719A94A6DECCF33387AAB11327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:a9:6f:85:13:bd:a9:3c:2b:65:c5:b4:09:
de:69:13:d3:a4:60:7f:9c:18:7d:48:78:45:d9:a5:
1f:8e:41:30:cc:0d:83:41:95:0b:bd:18:9b:d7:7f:
6f:c3:db:60:a9:4f:7c:b7:9a:f3:b8:de:b4:73:3b:
48:fc:4b:d0:a2:6f:4a:95:20:db:0e:0b:0e:75:15:
bb:67:5d:b4:75:fe:19:23:91:85:9c:44:ff:1b:c5:
4c:cd:29:a1:00:e6:ec:0d:91:c8:fb:2a:f0:cc:e5:
b5:21:cd:2c:b5:8d:bc:56:04:99:b8:ec:d8:d1:25:
22:c3:1a:87:dc:93:dd:8e:ee:0e:26:0d:45:ec:0a:
17:25:cf:fd:19:f2:60:18:c1:49:9a:08:d4:81:66:
b1:bf:24:d2:9f:73:5e:ee:ab:05:d2:bc:7f:9a:24:
ce:46:d3:7b:11:2f:68:fb:ba:e4:27:ec:c0:65:54:
84:81:ce:2d:bf:81:b6:ac:d2:64:80:aa:06:ea:c4:
de:ad:3c:f3:79:a6:f5:f5:1a:63:ba:86:41:58:c6:
58:8e:cf:e5:0f:b8:b9:be:8f:07:66:c4:61:3f:cc:
8a:fe:57:8c:33:a3:bc:04:ad:2b:41:5a:61:39:7a:
71:d9:e1:db:01:0a:89:20:69:e0:15:db:0d:3c:3a:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:42:EC:3D:78:04:71:9A:94:A6:DE:CC:F3:33:87:AA:B1:13:27
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:1200::/40
Signature Algorithm: sha256WithRSAEncryption
31:5f:a8:2e:5f:1b:25:33:c1:1d:75:71:35:9b:38:00:60:4d:
7f:be:73:cc:1e:72:93:81:c6:96:07:6a:ac:51:49:db:ea:36:
82:92:15:31:56:ef:12:4f:da:e9:4e:75:cb:a3:cb:97:90:a8:
8f:a4:56:14:5c:a4:da:1b:d5:2b:c8:1b:03:35:8f:3c:1c:f9:
a0:ca:86:99:a9:80:a7:be:bd:a6:d6:d4:32:e1:64:9b:ae:df:
90:4b:59:21:b2:4e:c8:3f:34:af:6b:c4:c6:4a:08:a9:e6:68:
58:05:2d:30:2b:50:55:cb:ad:88:65:74:93:24:80:4d:b5:8b:
53:4f:07:37:b3:a5:c3:e7:42:53:1e:85:84:8c:ab:95:22:28:
87:70:ae:c9:fa:12:e5:04:2c:6f:92:4e:65:59:3f:87:45:26:
69:e8:2a:f3:fe:a0:59:19:b6:28:2d:90:5f:e3:aa:d0:b2:5c:
d6:97:27:20:c3:d4:88:0a:fa:61:ab:b6:d8:dd:73:e9:4b:ed:
ff:ea:c8:df:13:02:40:36:95:7e:bd:6c:87:8a:12:2d:f6:71:
04:97:ef:75:fe:fb:92:c5:b3:c7:d2:0a:34:72:d4:ff:60:00:
d7:a7:a3:85:36:7d:4b:6a:4b:5f:66:b9:cb:b2:06:1d:3f:b5:
53:a4:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:37 2025 by rpki-client