Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa
File: 323830333a653765303a3a2f33322d3332203d3e20323730313032.roa (raw, json)
Hash identifier: SQdjKQtSzG/WZFv4TU9n3FP201/WafkDAbZjnJj4Kmg=
Subject key identifier: A3:A6:D4:D2:C1:1D:29:2A:B7:CC:81:1F:36:53:7F:70:2F:64:A2:01
Certificate issuer: /CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
Certificate serial: 3CB16146F518C1015CE1234C724608766201B3FF
Authority key identifier: B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa
Signing time: Tue 04 Feb 2025 18:52:01 +0000
ROA not before: Tue 04 Feb 2025 18:47:01 +0000
ROA not after: Tue 03 Feb 2026 18:52:01 +0000
asID: 270102
IP address blocks: 2803:e7e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b1:61:46:f5:18:c1:01:5c:e1:23:4c:72:46:08:76:62:01:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
Validity
Not Before: Feb 4 18:47:01 2025 GMT
Not After : Feb 3 18:52:01 2026 GMT
Subject: CN=A3A6D4D2C11D292AB7CC811F36537F702F64A201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:82:6d:10:4a:de:bc:5d:f9:26:37:fa:ab:
f4:12:8a:90:e0:81:cf:26:c1:5f:25:eb:f2:e5:bb:
03:bf:75:0a:9b:30:3f:fc:78:e9:2a:ef:e1:53:b2:
97:01:c4:84:ef:96:3d:d5:ee:b1:76:27:1e:9e:f7:
6e:b4:7d:9f:46:52:42:ad:d0:76:8e:80:c3:22:d1:
49:54:31:35:fa:2b:4a:a3:b7:b8:99:ab:40:ef:8f:
4f:3d:c6:8a:69:59:dd:ec:4a:bb:08:46:8f:5c:5e:
eb:34:e6:ec:aa:5e:6a:af:33:3b:6d:ff:53:2e:0d:
b8:60:07:36:17:27:31:81:e9:24:6b:cf:e7:60:b3:
be:80:67:a8:fd:1c:88:19:64:f2:c8:9b:48:97:1f:
f0:4c:48:a5:4f:bd:08:a8:33:94:d5:1f:0f:84:91:
fe:25:5e:7a:15:67:43:ae:f1:cb:5e:ac:e4:57:41:
91:6a:89:68:e5:a1:4b:03:73:10:f0:d1:1e:45:7f:
30:83:87:46:94:93:b7:65:78:c6:f0:8d:aa:d8:09:
2e:66:1b:50:5c:37:be:06:eb:dd:03:e8:d1:9d:3e:
9a:5b:a1:8c:8d:27:c1:7a:c4:88:24:9e:c0:f1:2e:
ca:d3:7e:9a:ba:04:24:a3:d7:44:b6:50:cc:9b:d4:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:D4:D2:C1:1D:29:2A:B7:CC:81:1F:36:53:7F:70:2F:64:A2:01
X509v3 Authority Key Identifier:
keyid:B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e7e0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:4d:a9:4d:56:8d:53:ef:77:64:76:7e:ef:6b:6c:c6:9b:cc:
84:12:5a:a4:2b:2f:32:14:a2:ad:ae:f6:f1:8b:f9:0a:4d:4e:
88:9f:8c:e2:8d:05:f8:05:2f:21:8a:f8:fa:ac:84:bb:a3:ce:
50:df:85:13:26:84:19:9d:2d:04:f0:3e:48:58:19:04:7e:f9:
10:1c:ca:04:ef:2d:1b:d6:2b:e6:ea:ce:ca:ca:53:28:4a:f5:
c1:9a:a2:e4:34:80:97:f5:d8:a1:f3:79:3a:7b:95:c9:6a:dd:
ab:d2:94:f1:66:4a:aa:ba:03:6f:0c:cf:b9:aa:34:a2:3e:b6:
2f:d8:a0:d2:fd:4a:a8:85:94:e8:38:45:29:6d:9d:49:ed:4c:
8f:19:9f:fd:de:3a:36:a2:07:2c:92:ee:11:32:92:aa:b6:ca:
0b:6d:2b:9c:31:ad:57:f4:3f:2e:c4:25:04:52:cb:be:3a:e7:
69:b0:5e:fb:f5:11:fd:f8:d1:3d:e7:2a:65:31:b5:52:6c:dc:
40:c3:cf:d4:83:f8:02:60:06:07:c1:b7:8c:5e:2e:df:50:98:
7e:52:38:d8:01:bd:eb:73:65:b5:6f:d0:4e:4a:0a:fa:e8:73:
8b:87:86:9e:0c:4b:79:c0:14:df:ea:12:7b:cd:e3:04:b6:e0:
f1:45:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:04 2025 by rpki-client