Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33342d3334203d3e203238343531.roa
File: 323830363a3366393a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier: 6qjKwYoRlXxnK5bXNBylqDGbgJZn8I84CqpFk2bNLCQ=
Subject key identifier: 83:3F:E1:FE:FD:7F:CB:55:FE:E8:D2:C9:39:4B:14:F3:EE:B4:3E:E2
Certificate issuer: /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial: 4C91BABFD6E42F55208E5539FDE8057F5BF4456A
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33342d3334203d3e203238343531.roa
Signing time: Wed 05 Mar 2025 23:35:00 +0000
ROA not before: Wed 05 Mar 2025 23:30:00 +0000
ROA not after: Wed 04 Mar 2026 23:35:00 +0000
asID: 28451
IP address blocks: 2806:3f9::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:91:ba:bf:d6:e4:2f:55:20:8e:55:39:fd:e8:05:7f:5b:f4:45:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Validity
Not Before: Mar 5 23:30:00 2025 GMT
Not After : Mar 4 23:35:00 2026 GMT
Subject: CN=833FE1FEFD7FCB55FEE8D2C9394B14F3EEB43EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:83:10:d7:78:99:02:0c:46:ed:ea:88:29:
dc:c0:41:c5:2f:a9:79:76:1b:9a:a4:51:d8:dc:eb:
d6:af:a1:70:28:fb:32:e1:da:4a:ea:1b:45:ad:43:
2f:e5:2e:90:2a:d3:95:6b:84:b6:7a:56:91:d8:8c:
78:91:39:d1:93:f1:cf:70:f3:1e:1c:99:5b:b5:e1:
f6:34:7f:46:e6:aa:ff:c0:09:0b:25:a0:96:15:0c:
2f:fa:65:39:f3:a5:ed:91:12:06:ae:81:a9:9d:b4:
f3:2e:78:51:1b:82:2d:ad:76:17:40:16:42:9a:e8:
4e:22:af:c6:02:74:68:96:93:38:d3:93:30:ad:4c:
d3:0d:38:0f:bc:30:16:f9:73:93:f2:12:24:01:22:
52:bd:64:0e:ff:dc:67:aa:af:04:c5:73:42:b6:31:
82:20:92:75:ea:06:78:3f:f7:c9:b4:5a:87:89:c4:
ee:12:22:79:ca:80:de:0b:c5:fd:62:57:31:5f:73:
99:29:b2:a3:a8:34:d2:bb:3c:a7:70:2a:9c:3e:4c:
0c:5d:13:d7:bc:d3:69:8d:c0:9a:64:77:69:6d:d5:
c3:f8:de:a5:0a:d4:c2:74:c9:17:80:09:b3:f8:98:
19:64:85:08:ac:bc:fa:b8:e1:5a:88:6a:c3:f9:2e:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:E1:FE:FD:7F:CB:55:FE:E8:D2:C9:39:4B:14:F3:EE:B4:3E:E2
X509v3 Authority Key Identifier:
keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33342d3334203d3e203238343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3f9::/34
Signature Algorithm: sha256WithRSAEncryption
3e:ec:41:a8:d4:53:ed:28:21:d4:e8:90:7a:5f:00:5b:d7:b0:
b9:fd:2f:92:97:92:e6:03:d1:c2:d4:c7:a4:05:f8:60:22:3a:
9e:48:8b:4a:5b:25:73:58:45:45:da:d2:b7:9b:dd:91:c5:8f:
49:ea:ed:33:f6:23:26:30:51:7b:1d:a4:0c:e2:88:2a:02:64:
c0:61:6d:47:e3:ff:80:df:18:ba:c5:6f:9b:8a:df:da:fa:07:
1a:c0:44:80:d7:93:cc:6a:18:a0:8d:de:3f:05:ff:71:c1:bf:
cb:cf:49:fa:95:19:fb:6e:4c:60:2e:a4:06:76:04:ae:36:54:
0e:6d:ed:2e:be:85:30:a1:4e:7d:30:60:bc:86:8c:10:23:7a:
ff:ec:d0:7a:0c:37:03:9e:fe:b7:7f:91:c2:1f:ea:47:0d:43:
3f:57:5a:16:48:bb:84:31:20:1b:ac:71:02:1d:39:99:2f:67:
1f:60:a6:b1:06:97:8a:6d:b4:b5:79:74:60:6e:bb:77:89:cd:
c6:27:21:88:7e:99:00:40:ec:6c:8f:4d:38:96:25:43:89:81:
07:9a:19:bd:c9:a2:37:31:55:d4:6e:8e:ac:89:ab:8b:13:5b:
64:2b:d5:cd:8d:30:2c:f0:c4:7b:67:19:f4:09:7c:35:68:07:
31:7a:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:02 2025 by rpki-client