Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa
File: 323830333a346430303a3a2f33322d3438203d3e20323639393933.roa (raw, json)
Hash identifier: CoAyprqouPrRnUcebHk0JH14hCf/MNrfYiFPRs2lNeM=
Subject key identifier: 21:21:CF:1C:7F:AD:C2:20:04:6E:8C:87:0E:13:93:0D:2E:EA:4F:0C
Certificate issuer: /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial: 74DE216A81366D93701D3C92932B61DEA1A551EC
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa
Signing time: Tue 04 Feb 2025 20:00:04 +0000
ROA not before: Tue 04 Feb 2025 19:55:04 +0000
ROA not after: Tue 03 Feb 2026 20:00:04 +0000
asID: 269993
IP address blocks: 2803:4d00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:de:21:6a:81:36:6d:93:70:1d:3c:92:93:2b:61:de:a1:a5:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Validity
Not Before: Feb 4 19:55:04 2025 GMT
Not After : Feb 3 20:00:04 2026 GMT
Subject: CN=2121CF1C7FADC220046E8C870E13930D2EEA4F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:9f:5c:75:3a:e1:67:07:0f:5c:b2:d2:03:
ac:78:0a:bc:78:a8:dc:31:e8:a7:67:13:8a:7f:b5:
f3:80:4e:11:b6:f5:06:31:f9:ba:7f:d3:46:6a:1c:
6a:54:06:bc:b2:cc:35:25:0b:b8:56:33:bf:31:24:
03:d8:34:c4:02:be:4d:af:17:20:7a:6f:00:32:a6:
2c:64:0e:cf:b1:bc:05:35:0c:b6:75:79:6e:61:e5:
aa:58:20:fb:c2:a2:b8:0a:87:1f:2b:b2:1e:c7:23:
f9:e7:48:de:b3:fc:b9:b8:1a:51:66:c2:32:a9:c8:
f4:0e:5e:47:a7:92:16:7b:75:00:5d:60:59:b4:2a:
03:5b:e3:36:a3:c0:c8:59:1d:2b:b1:83:8b:4b:fd:
19:67:3d:a7:42:d2:08:d9:f4:88:31:68:e0:69:b2:
10:e7:8d:01:7c:eb:18:4b:22:7c:03:ec:d3:d7:d0:
8b:59:06:54:7f:10:a9:c8:2a:fd:9d:7c:d1:35:7a:
39:d8:86:e7:04:60:7f:63:3a:06:75:91:f5:5f:d1:
b6:96:75:fc:27:4b:ff:da:f8:00:1e:16:32:aa:a6:
a2:66:97:58:92:3a:3d:17:0a:83:25:b6:d2:8f:d7:
b4:a0:eb:71:0d:78:de:02:9d:13:a9:98:13:76:84:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:CF:1C:7F:AD:C2:20:04:6E:8C:87:0E:13:93:0D:2E:EA:4F:0C
X509v3 Authority Key Identifier:
keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
92:88:6f:f1:a7:c3:83:8c:8e:6f:69:42:38:3e:74:b7:a4:33:
4f:eb:60:aa:60:12:a1:2c:02:57:04:e5:5c:c2:44:a7:40:b9:
23:ca:d5:28:dd:d4:31:60:fd:f3:c4:39:f3:18:1e:58:97:36:
ac:5e:9c:99:07:a7:7d:0d:71:b8:0f:30:9f:83:01:77:bb:03:
4a:33:91:42:85:fb:60:02:a0:41:c3:89:08:22:77:68:0a:1e:
40:7a:12:9f:f4:dc:84:8f:7d:39:de:24:7f:6b:46:3a:1c:e9:
63:f7:16:04:c2:01:62:29:ed:50:1c:01:7f:93:46:89:8c:37:
34:e6:39:a5:48:6b:ab:06:d6:0c:92:b7:e1:50:3f:9d:53:f3:
5c:80:66:03:52:93:bf:f5:b0:26:63:b0:4a:1e:10:7d:a7:11:
9d:e1:30:2f:b6:94:d9:0b:d0:61:28:7d:1b:ec:3f:cf:56:14:
f6:bd:49:a4:b2:82:96:9a:d7:a8:f6:4c:f1:74:62:4b:d4:ba:
f0:4b:19:76:cc:6b:ee:1a:44:39:af:db:f7:92:bf:2e:21:99:
d1:a5:96:b2:a6:f5:1d:09:55:c7:4b:b4:9d:9e:e7:c9:9b:fd:
46:71:26:17:66:dd:8f:00:d2:82:33:18:73:4e:6a:5b:08:e5:
fd:5a:d8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:16:03 2025 by rpki-client