Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa
File: 323830333a353763303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier: AJFdj9LMJzBq55DiN5Ieh/Fx/AUOdl/cDCKDSms1eIc=
Subject key identifier: E3:AE:DE:3E:E5:94:2F:70:84:2C:6D:EB:91:13:F1:16:96:6E:31:E9
Certificate issuer: /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial: 326BE0E9478590D13B5B79A6A913D3B20EDDDD28
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:24:52 +0000
ROA not before: Tue 04 Feb 2025 18:19:52 +0000
ROA not after: Tue 03 Feb 2026 18:24:52 +0000
asID: 264668
IP address blocks: 2803:57c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6b:e0:e9:47:85:90:d1:3b:5b:79:a6:a9:13:d3:b2:0e:dd:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Validity
Not Before: Feb 4 18:19:52 2025 GMT
Not After : Feb 3 18:24:52 2026 GMT
Subject: CN=E3AEDE3EE5942F70842C6DEB9113F116966E31E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:e8:ce:9d:2a:f2:cd:54:f3:29:7f:78:6f:
bb:8d:cc:e9:60:03:b2:b8:95:be:16:74:a5:d3:70:
a3:a1:9a:72:ab:6d:36:db:d0:2f:1e:f0:12:12:51:
ad:bb:d4:b7:ff:91:1b:d8:07:00:de:83:59:bf:ff:
97:b8:6d:60:20:d4:4b:fd:34:74:61:f7:02:cc:4e:
15:5b:f5:e6:ab:a3:7f:42:6f:39:99:6d:fe:8a:0a:
02:25:03:01:bd:7b:7b:0f:6b:7a:fa:a9:68:3b:0e:
2e:47:8c:41:1e:b7:25:7e:9b:33:0a:f7:49:27:36:
1f:53:6a:fc:fb:ba:44:33:c6:ad:1f:ef:fb:a0:79:
0d:f5:38:ec:f8:3f:ee:f3:5b:a5:89:60:37:a5:d0:
66:82:10:61:07:0a:cc:b6:7b:aa:64:9a:e7:ab:0b:
f3:bb:a4:09:d7:8f:2d:a0:97:46:43:24:77:b7:bd:
48:64:d6:36:c7:d5:31:69:09:14:cf:1b:f2:75:45:
3a:ff:55:ce:9a:c6:fa:82:6e:c9:36:c6:84:7f:48:
ae:e6:8a:e8:70:72:b5:f2:12:8f:67:63:fa:7a:90:
c8:ad:3c:6e:a4:1d:dc:16:9f:1f:1e:b5:b4:4c:7e:
fe:b3:55:52:89:52:16:29:c6:fd:60:1b:45:ea:2a:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:DE:3E:E5:94:2F:70:84:2C:6D:EB:91:13:F1:16:96:6E:31:E9
X509v3 Authority Key Identifier:
keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:aa:6a:44:de:4b:17:c6:d1:ae:96:7e:d3:f5:3f:64:39:d4:
8e:eb:51:e2:5c:5a:4b:ed:94:5a:41:1d:36:5d:67:0d:62:bb:
80:97:79:30:4c:44:03:e4:9d:25:64:73:47:6c:6e:b0:b5:94:
6f:d2:97:5f:a1:53:c8:4c:05:ba:55:15:11:a6:58:24:fc:bf:
00:35:a3:d2:92:47:90:1e:69:8e:0a:33:3a:0a:b8:a7:2f:29:
fa:c6:80:1a:5c:b7:8f:01:d0:79:10:3b:03:f7:34:74:55:65:
5b:44:16:f6:5a:68:90:18:22:cf:0f:72:2b:a7:2b:8c:40:a1:
e4:1e:a3:ee:46:27:6f:7b:15:0d:83:64:16:f5:d6:28:5a:56:
4e:b1:6d:74:a0:23:0f:63:8d:a5:d0:10:32:13:0c:6e:84:7b:
6c:1c:ea:7d:2c:7f:2f:c2:ff:7c:da:9c:df:f2:cb:0c:21:9f:
12:ab:70:fa:c1:5a:f5:95:87:24:7c:10:e3:01:79:a6:a5:86:
ed:33:02:dd:93:ea:3d:fe:9c:df:ff:62:41:99:14:ac:22:aa:
cf:c2:29:b6:19:e3:4b:8e:78:8f:f1:50:2e:96:8b:ea:12:44:
37:8e:d1:9e:40:cc:b1:c1:43:f6:b2:5e:11:fe:79:48:69:b3:
1c:25:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:12 2025 by rpki-client