Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: Zra22WP7adC2D/4oUgjwZr9pltq5B7CYy/1koIpF8kc=
Subject key identifier: 35:04:39:44:01:4E:8F:12:84:34:1F:05:8B:DD:C1:85:1A:CC:83:5B
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 4FDAAC0D1D3A22BCE31AA30AE898AD3A1173CA2E
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 04 Feb 2025 18:25:07 +0000
ROA not before: Tue 04 Feb 2025 18:20:07 +0000
ROA not after: Tue 03 Feb 2026 18:25:07 +0000
asID: 27818
IP address blocks: 2803:3380:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:da:ac:0d:1d:3a:22:bc:e3:1a:a3:0a:e8:98:ad:3a:11:73:ca:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Feb 4 18:20:07 2025 GMT
Not After : Feb 3 18:25:07 2026 GMT
Subject: CN=35043944014E8F1284341F058BDDC1851ACC835B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:36:65:d9:08:32:61:17:de:47:31:fa:6d:
30:2f:32:95:d6:c2:cb:28:50:a0:f2:cc:75:8a:84:
ed:60:50:e2:21:33:b2:c3:c4:d1:43:49:39:02:ab:
68:54:59:18:dc:48:97:9d:6c:79:fb:da:df:b0:11:
79:40:96:f0:62:c5:d5:24:2d:19:f7:74:15:21:a5:
5e:9c:11:73:82:24:f2:17:48:03:15:4d:a8:d7:e3:
e1:1a:8b:ef:87:b2:71:88:ce:1c:f1:f9:0f:34:f9:
bc:90:3e:8f:61:34:67:5a:0d:97:f9:fc:a9:63:c0:
6b:8b:ad:0e:dd:06:1a:52:77:8d:7e:2e:16:14:ff:
f5:38:ab:7b:49:8c:d4:3c:c1:bb:0e:23:7d:be:24:
42:1b:7c:fc:ca:52:1e:0d:85:f3:b1:47:ac:ab:03:
7f:8f:07:ba:7e:2c:00:da:cc:e5:9e:e4:3e:16:d5:
95:7f:5e:16:03:7c:d9:a1:cd:7d:62:03:89:a2:c9:
4f:d8:03:7a:30:21:aa:43:8c:28:ae:ce:9a:fa:65:
85:52:f9:ab:5f:d6:48:06:56:fc:50:9e:6b:08:ab:
f4:2f:6d:7c:69:16:d5:f9:da:ca:e6:e6:79:aa:cf:
df:f1:37:14:1f:4a:49:0e:d5:a6:da:b4:55:11:d9:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:39:44:01:4E:8F:12:84:34:1F:05:8B:DD:C1:85:1A:CC:83:5B
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:8000::/36
Signature Algorithm: sha256WithRSAEncryption
06:e6:20:4f:3d:2c:a3:3c:86:9e:b5:6f:07:d7:79:8d:06:5a:
1d:54:51:29:4f:c5:79:07:d7:e3:0b:f9:d1:71:04:b5:44:9e:
33:d4:ba:eb:d2:a8:5f:92:f0:e1:d5:4f:4e:0f:35:b7:c5:f4:
db:b7:2d:18:72:6f:14:8c:de:b2:38:41:7c:da:36:ef:5c:5a:
d4:fa:9d:3f:56:64:eb:ed:7a:c8:e5:13:a0:15:c7:b2:28:f6:
59:cf:91:59:4c:4e:8d:62:d0:e5:d1:ad:88:e4:4b:66:c1:f1:
1c:eb:f8:6a:bd:78:db:c8:0f:6b:c1:54:21:46:8b:0d:8d:14:
b8:95:17:83:63:cd:86:a7:19:ae:63:96:38:e8:38:7e:e5:fa:
95:56:82:ef:80:34:28:8c:d1:65:3b:5c:b3:dd:a3:1a:93:e6:
3f:b4:7c:cd:0f:54:14:51:08:28:78:55:65:69:bd:e0:a3:96:
77:d5:7b:3f:1e:fd:4b:a8:f1:83:48:2a:4b:80:4b:50:91:e4:
2b:1c:61:46:e7:f8:21:9a:f8:4f:81:03:b5:a4:0d:c6:d1:d9:
8c:10:d3:6e:0c:eb:61:1b:51:7e:fe:92:46:f8:ed:9c:da:5b:
6f:96:5c:84:c1:85:be:62:3a:86:25:ed:ef:c5:db:6e:d8:72:
55:e6:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:03 2025 by rpki-client