Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
File: 323830333a343938303a3a2f33322d3438203d3e203532333238.roa (raw, json)
Hash identifier: O2gr/3rwYBQEvsakfcsJFyvP3roWcpjcyudU4NEnIRw=
Subject key identifier: 85:E8:40:E3:91:2C:84:65:68:D9:86:12:28:9B:A2:58:EC:C0:B1:DB
Certificate issuer: /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial: 2A6CFCFE68943E8F82CF6B55C2B76F527FB7701A
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
Signing time: Tue 04 Feb 2025 18:16:22 +0000
ROA not before: Tue 04 Feb 2025 18:11:22 +0000
ROA not after: Tue 03 Feb 2026 18:16:22 +0000
asID: 52328
IP address blocks: 2803:4980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6c:fc:fe:68:94:3e:8f:82:cf:6b:55:c2:b7:6f:52:7f:b7:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Validity
Not Before: Feb 4 18:11:22 2025 GMT
Not After : Feb 3 18:16:22 2026 GMT
Subject: CN=85E840E3912C846568D98612289BA258ECC0B1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:d3:00:ce:fd:30:83:ad:86:b3:08:55:fb:
c4:0d:ad:2a:86:a2:1b:b6:31:fa:e6:b7:ea:16:b7:
73:f9:b3:cc:3b:b1:37:6b:87:1c:ad:68:04:e7:37:
79:d5:45:ff:9c:c5:99:00:d4:68:1b:64:a2:29:07:
7f:8e:08:62:e0:ff:56:64:a0:a0:5b:eb:b6:7e:e2:
0e:db:82:a8:d0:f3:44:8b:87:a0:53:54:16:a9:c3:
ad:d8:d1:f6:d4:95:a2:d6:16:25:97:8a:95:18:cc:
df:2f:4e:0a:e1:20:1f:da:9f:16:1f:41:a9:e0:9b:
d4:da:74:ee:ba:e0:54:2a:a2:71:41:98:cf:2a:c5:
35:be:cb:fb:b4:7d:15:57:f4:04:dc:d3:89:de:50:
e6:b6:5e:31:ad:0d:b4:99:a5:18:9f:ae:c9:b2:a8:
47:88:d3:1c:fb:2e:ae:c5:38:e3:31:31:ac:96:37:
b4:11:b9:d1:8c:d6:f5:5b:43:47:ba:ec:d5:3c:0c:
2d:c1:36:18:20:77:82:48:a1:31:dd:15:44:b5:0e:
eb:4e:0b:75:b9:36:d4:ea:17:a9:38:f6:7c:2e:fe:
07:33:2b:88:05:fe:95:4b:db:08:91:23:25:c8:a1:
07:47:9d:bf:44:33:9d:08:6a:18:99:45:94:b4:cc:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:40:E3:91:2C:84:65:68:D9:86:12:28:9B:A2:58:EC:C0:B1:DB
X509v3 Authority Key Identifier:
keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4980::/32
Signature Algorithm: sha256WithRSAEncryption
32:c8:b1:69:f4:de:f0:68:75:7b:7e:01:54:39:b7:e8:e3:44:
b2:d7:17:3c:88:b8:45:75:6a:fa:0f:1f:90:3c:ad:d4:0e:3b:
50:34:d7:3d:34:25:92:73:ba:f2:7b:61:e1:68:c6:de:18:ca:
b7:19:e4:64:e2:9b:c7:9c:e1:e8:b2:ae:8c:d8:ea:e7:f5:a7:
31:13:f5:49:82:f6:1b:b6:91:b1:7e:9a:b5:d8:a8:df:fb:27:
01:bc:36:d5:52:70:b1:d8:53:77:16:0a:29:fd:66:50:92:5c:
0b:e8:0c:ca:4a:fc:d2:d1:d1:d9:aa:7b:fd:63:27:ea:95:f6:
2b:4f:3f:cd:10:93:f8:b3:5a:c3:be:ad:42:e8:a4:12:ac:70:
b9:0a:10:d6:d5:4e:87:89:c4:f6:bd:58:89:63:60:6b:49:fb:
84:70:57:9e:69:fc:30:c6:e8:dd:4e:12:01:bc:8c:6e:80:4d:
44:44:0d:67:da:78:7d:ff:a5:16:fa:09:99:91:df:ca:3d:06:
78:3f:5e:d3:9b:ff:61:be:45:72:d9:1f:60:1e:3d:e6:8b:65:
cc:59:f2:e1:34:de:c2:1f:2f:87:fd:ef:46:54:6f:12:f3:10:
4e:de:50:e3:a7:2c:77:45:3c:7c:b4:ef:65:3f:64:15:c8:47:
9d:3f:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:29 2025 by rpki-client