Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a353030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a353030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: QP/fCJukSZtlbSwzYpOZ7Ohv7yBelFT+Q22EHx8rCpc=
Subject key identifier: 13:AF:CE:2F:84:A4:77:85:7C:FF:CB:0F:5C:AB:17:17:C8:D5:01:7E
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 6852D4E4579385F83BC836AC7E2FBE8EF7E4F2
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a353030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 04 Feb 2025 18:25:08 +0000
ROA not before: Tue 04 Feb 2025 18:20:08 +0000
ROA not after: Tue 03 Feb 2026 18:25:08 +0000
asID: 27818
IP address blocks: 2803:3380:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:52:d4:e4:57:93:85:f8:3b:c8:36:ac:7e:2f:be:8e:f7:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Feb 4 18:20:08 2025 GMT
Not After : Feb 3 18:25:08 2026 GMT
Subject: CN=13AFCE2F84A477857CFFCB0F5CAB1717C8D5017E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:6b:05:98:b0:9b:9e:43:a3:b5:9e:a9:04:
f0:c1:83:13:15:70:b4:10:a3:17:ed:9a:bf:c0:8e:
49:5c:e4:ab:e0:b3:06:0b:a6:b3:5a:09:f1:52:b8:
cb:08:70:7e:05:4b:ef:4b:da:17:99:b0:e3:99:19:
a9:26:4b:04:0a:f8:85:8f:c6:9e:f7:f2:2d:bb:34:
6d:85:e4:09:87:f4:98:10:ae:bd:5d:ba:f6:93:ad:
7f:18:c9:7c:4b:90:de:87:2e:91:be:c1:60:b8:39:
b4:61:cb:92:15:b9:40:36:a2:90:9b:ff:c6:f9:c5:
bc:f2:9b:24:0f:02:d0:27:f3:ce:c8:d3:7f:5e:10:
66:b8:48:22:bd:b4:29:4c:9b:bf:eb:2c:c0:49:86:
a8:49:ea:93:8e:02:b9:71:01:7e:34:6d:78:f1:a7:
99:38:c6:39:e8:9e:f6:c5:47:16:ab:07:14:44:b0:
c6:e7:f5:a7:0c:0b:ad:18:c1:41:22:ab:3c:d7:a6:
59:0e:59:a2:44:8c:31:6b:f8:38:ac:f6:1c:5d:f6:
82:c0:c7:06:c0:2a:f2:93:21:bc:62:7a:06:cb:76:
18:bb:2e:02:8c:46:87:64:9c:f6:d7:5e:7f:c5:c5:
42:d5:9b:ce:83:a3:08:82:1c:ac:8c:ea:52:dd:b8:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:CE:2F:84:A4:77:85:7C:FF:CB:0F:5C:AB:17:17:C8:D5:01:7E
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a353030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:5000::/36
Signature Algorithm: sha256WithRSAEncryption
37:30:b2:96:bf:ab:37:a8:19:f2:b6:54:5d:f9:de:fe:61:b8:
8b:b4:b8:d2:42:68:3e:5f:0f:f7:9d:87:35:e9:06:78:9b:37:
8d:9d:b0:2e:3b:a2:1e:53:61:76:e1:cc:79:a1:2d:ce:2a:8c:
1b:22:3c:70:91:4a:a2:f5:df:8c:af:da:9b:ea:cd:cb:45:fc:
dd:02:c8:a0:8a:6a:47:73:0c:c3:12:c6:78:9c:dd:90:07:8a:
22:ae:e9:87:15:70:27:ab:b1:4e:05:da:71:65:91:13:77:3c:
2f:93:27:e0:55:75:c7:70:cf:db:f5:56:d8:ff:2c:ec:f6:87:
78:ab:83:69:f2:ac:62:92:77:12:f6:c0:6c:ae:b7:d1:81:95:
91:a0:94:63:4b:dd:88:4c:4c:6f:e7:59:ec:54:e7:87:23:29:
04:5e:89:23:55:f2:6a:ea:a8:1a:f8:b0:05:7d:4c:de:0f:4b:
73:21:f6:8d:ed:43:64:eb:d7:d6:79:95:1e:4e:f0:3f:ad:18:
6f:98:26:aa:08:50:c0:00:1e:5a:10:c4:e7:f1:7b:14:22:a4:
d3:f5:ba:91:19:8c:c0:7e:f6:56:bc:2e:c4:79:4c:85:5f:96:
10:aa:9b:13:5e:3a:15:e5:e4:00:83:de:5a:69:12:d4:cf:3b:
97:12:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:54 2025 by rpki-client