Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa
File: 323830333a3161303a3a2f33322d3438203d3e20323637363839.roa (raw, json)
Hash identifier: DRHCzcpv5c6QsE11Z1eGXr6S+kUvnqyW1+55Onqm738=
Subject key identifier: AA:74:3E:FF:0A:1F:CF:29:95:1D:3A:F6:76:BF:54:BB:FF:B7:7D:41
Certificate issuer: /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
Certificate serial: 49D57687A82FDF917427CDB36793EB153C2E2693
Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa
Signing time: Tue 04 Feb 2025 18:50:02 +0000
ROA not before: Tue 04 Feb 2025 18:45:02 +0000
ROA not after: Tue 03 Feb 2026 18:50:02 +0000
asID: 267689
IP address blocks: 2803:1a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d5:76:87:a8:2f:df:91:74:27:cd:b3:67:93:eb:15:3c:2e:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
Validity
Not Before: Feb 4 18:45:02 2025 GMT
Not After : Feb 3 18:50:02 2026 GMT
Subject: CN=AA743EFF0A1FCF29951D3AF676BF54BBFFB77D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:14:61:aa:5a:8c:c3:9c:59:b2:a1:d9:5f:
31:d8:cf:64:df:7d:e7:51:5a:7b:f5:26:b1:52:d1:
a7:33:a0:26:ca:53:53:8f:c2:29:f8:4a:41:ca:ae:
9f:05:84:da:41:96:65:e6:70:e7:27:a3:d2:73:6c:
cd:92:32:45:9e:0e:a9:4a:75:05:94:01:e5:d6:bf:
b6:a4:74:1f:36:e6:e8:b6:50:94:1f:ae:dc:f0:c2:
5a:49:4a:e3:ac:19:0e:bc:a4:0a:18:6c:ea:6f:6c:
8c:49:fa:41:d9:13:48:b8:4e:2e:e3:3d:48:8f:68:
f6:ff:ca:d1:16:ed:dc:b2:51:2c:42:fe:cc:cd:78:
5b:2d:bd:31:03:e2:57:79:1e:25:08:be:2f:3e:29:
2f:4d:8a:14:d5:9c:24:8c:79:94:94:78:5f:22:99:
d7:e4:19:9c:54:3d:df:b3:66:4c:92:2d:5f:ec:7e:
21:ab:e8:7a:a9:de:c2:78:ea:62:91:b3:0d:1f:60:
a8:18:9d:65:0e:08:93:3d:69:ad:92:01:b6:bc:82:
9b:df:48:d0:ba:ff:ad:a0:ab:49:47:a6:f9:cd:61:
35:e2:4e:96:53:18:b5:72:f0:20:8f:ed:bd:57:c4:
a9:35:8c:c4:6e:0d:e9:e1:a0:08:21:58:a2:72:3b:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:3E:FF:0A:1F:CF:29:95:1D:3A:F6:76:BF:54:BB:FF:B7:7D:41
X509v3 Authority Key Identifier:
keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1a0::/32
Signature Algorithm: sha256WithRSAEncryption
22:66:5d:5b:ad:7f:63:39:c8:de:0e:45:c3:6d:71:36:50:0d:
3f:f0:45:f2:cb:60:f0:37:4b:2a:99:6f:42:55:da:3b:3f:e4:
51:d7:49:eb:de:a8:66:a2:ed:61:bf:fd:2c:ff:e9:a2:9d:42:
b6:81:51:be:7f:c3:9f:53:49:65:bc:b0:e9:28:de:26:09:c4:
9a:c9:94:3a:c2:c8:ba:1a:55:78:0b:b3:1f:87:d6:21:c1:28:
ec:3b:41:32:54:b4:a5:b3:66:d5:25:51:07:3c:5d:f4:4f:25:
c8:d1:36:56:ee:f4:5a:91:fa:7f:ce:50:2f:02:89:f5:ae:5f:
39:fd:ff:ee:e9:f7:8b:ce:a1:3d:9b:de:43:ff:81:f7:11:62:
34:af:9a:f3:5c:06:f2:36:a0:e1:d4:3d:f4:3e:3e:ad:55:d1:
c3:54:4d:92:5e:20:4c:b6:78:41:63:53:9d:90:37:5d:43:11:
4b:7d:19:be:36:49:f1:4c:c1:b4:40:ab:29:4d:8e:1a:1a:4e:
a5:22:7c:bf:0d:b5:fa:39:e5:64:a5:7d:ba:c1:2a:18:d2:2b:
37:76:33:ff:39:8c:83:cc:eb:81:c6:0b:20:9e:70:96:a1:58:
35:ef:6a:a4:12:60:e0:0f:d9:12:dd:3d:24:f0:ea:cf:26:fa:
74:fb:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client