Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa
File: 323830333a616432303a3a2f33322d3332203d3e20323636373033.roa (raw, json)
Hash identifier: bePYOPWOq22DDvvHW5uveWrt38pk0GvmhtB5QKqD5d8=
Subject key identifier: 9F:2E:46:1D:2C:E3:A5:98:84:B6:59:5C:CF:52:21:27:4B:EB:73:EF
Certificate issuer: /CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
Certificate serial: 4FAB3DFFFEEBED0B54D3857B00EB83CBB4522F81
Authority key identifier: 4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa
Signing time: Tue 04 Feb 2025 20:02:59 +0000
ROA not before: Tue 04 Feb 2025 19:57:59 +0000
ROA not after: Tue 03 Feb 2026 20:02:59 +0000
asID: 266703
IP address blocks: 2803:ad20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ab:3d:ff:fe:eb:ed:0b:54:d3:85:7b:00:eb:83:cb:b4:52:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
Validity
Not Before: Feb 4 19:57:59 2025 GMT
Not After : Feb 3 20:02:59 2026 GMT
Subject: CN=9F2E461D2CE3A59884B6595CCF5221274BEB73EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:82:80:7d:00:d5:66:bc:54:23:4d:80:62:
8d:58:1d:62:b5:ce:05:a8:74:c4:34:e5:42:53:09:
3a:e8:b3:c5:5c:ae:92:09:bb:e1:e6:91:cf:48:9f:
0c:9c:33:ef:f9:b6:6e:cf:dd:9e:6b:71:32:b8:0b:
06:27:a2:08:a1:5d:5b:94:df:d9:60:2f:1b:28:7a:
73:8e:3d:ab:7f:3d:2f:b8:01:ff:fb:54:d6:eb:6a:
28:6b:18:3c:6b:34:87:bf:8a:31:f3:63:ae:98:13:
cd:7d:12:9b:2c:f7:bd:9d:fb:97:e4:c1:d7:31:27:
34:c0:ae:08:79:c1:7d:88:f8:8e:4e:13:c7:72:4d:
f2:3b:be:7f:f3:74:5c:a2:88:1a:4d:fc:ca:aa:3f:
24:3b:46:7e:03:84:96:78:42:40:a4:c3:bb:f1:06:
85:c4:72:4c:26:f6:2d:a7:33:98:c2:d5:8a:e8:a9:
29:a7:c8:5d:73:3b:44:2f:5f:20:44:27:d2:69:0a:
11:76:a8:b7:a5:c0:6f:67:fb:77:ba:cd:d4:9b:76:
5b:c2:12:49:0c:c7:80:50:3c:01:e0:be:62:48:b2:
4e:ba:99:8c:61:e6:1c:00:9b:fd:53:fb:ac:f6:36:
2b:80:51:cc:b7:cd:cd:9b:e6:39:93:0f:7c:91:9e:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:46:1D:2C:E3:A5:98:84:B6:59:5C:CF:52:21:27:4B:EB:73:EF
X509v3 Authority Key Identifier:
keyid:4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ad20::/32
Signature Algorithm: sha256WithRSAEncryption
6a:61:a4:9b:12:d2:1f:c1:25:7b:29:38:62:37:59:ae:11:68:
37:10:48:fe:63:d4:00:39:4a:1d:79:fe:e2:ef:27:bb:b5:67:
55:3b:aa:14:3f:2b:66:9e:e1:f6:bd:8c:d6:5c:d1:0e:13:1c:
36:03:74:e4:6f:91:d8:09:92:43:d7:fd:32:2c:3b:28:5f:ba:
8e:63:3d:ed:9c:21:16:1c:87:97:99:b5:ef:4b:dc:e8:c3:d4:
83:3c:a9:c8:c4:85:ed:87:08:b2:13:01:75:e7:c2:7f:20:f5:
67:8d:76:2e:ae:57:c2:01:e0:ee:d4:60:93:d3:eb:fa:f6:ed:
2c:02:a4:e9:d3:91:2e:2c:b6:27:f7:66:64:80:fa:86:53:12:
b1:bb:81:94:f6:44:89:2a:18:8d:c8:b3:df:b2:e2:f1:c7:8b:
7b:6c:28:6e:32:b5:97:be:6e:10:c4:68:3d:35:d9:f8:3d:99:
93:72:5e:17:57:89:06:60:c1:61:01:7d:a9:a8:b1:d8:1f:12:
9a:b5:2e:6f:2c:77:ee:8a:30:06:37:9f:c8:3d:de:34:20:5d:
45:46:c6:72:7e:26:67:91:01:69:bc:f0:1b:6f:33:28:7a:cf:
8c:b4:3a:18:51:f1:86:4c:dc:e4:73:a2:b5:89:df:db:72:3e:
6b:f7:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:57 2025 by rpki-client