Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa
File: 323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa (raw, json)
Hash identifier: 9d2E/WnO20k1bVF3cQcwvezesGZxvTXyUC6CPcG1IBM=
Subject key identifier: 8C:6E:0D:45:03:68:B4:F0:D4:13:C0:69:F3:05:84:94:7B:4D:BA:33
Certificate issuer: /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial: 765CE0447CFBE1B312E33C97EA4BDD1820B5E777
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa
Signing time: Tue 04 Feb 2025 20:01:30 +0000
ROA not before: Tue 04 Feb 2025 19:56:30 +0000
ROA not after: Tue 03 Feb 2026 20:01:30 +0000
asID: 265671
IP address blocks: 2803:7ec0:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5c:e0:44:7c:fb:e1:b3:12:e3:3c:97:ea:4b:dd:18:20:b5:e7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Validity
Not Before: Feb 4 19:56:30 2025 GMT
Not After : Feb 3 20:01:30 2026 GMT
Subject: CN=8C6E0D450368B4F0D413C069F30584947B4DBA33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:a0:c4:65:c2:54:a3:02:27:cf:88:f3:31:
28:03:37:ab:1b:a7:6c:71:6e:39:05:49:56:79:c0:
32:b8:b3:68:0d:54:b7:00:7a:11:06:f2:a9:0f:37:
7a:1b:88:f0:50:4e:ed:42:db:37:e6:03:d5:94:a8:
c2:48:3d:0a:f0:ce:74:de:84:a7:3e:79:be:98:58:
0b:17:f1:4e:dd:73:30:75:12:9c:e7:95:db:9a:f4:
a5:c0:09:39:17:f6:35:8a:57:7d:11:f6:f3:00:12:
73:78:8f:ed:ee:03:78:d1:1f:47:e2:fa:fd:a5:01:
ca:3e:9b:0f:b0:da:ba:d4:81:95:65:34:4e:fa:6d:
47:7a:66:55:5e:c9:d3:92:74:74:cb:ff:5d:69:9d:
96:93:96:97:78:d2:57:ca:24:98:33:6c:c7:28:64:
f0:b5:be:e1:8f:78:ed:3b:ed:37:9b:d7:42:95:54:
b2:6a:6e:64:f4:0a:aa:b7:a1:70:e6:50:49:14:f5:
07:67:c0:0b:ac:aa:75:c2:48:a4:4f:4c:e5:18:a7:
31:5e:12:3f:88:58:eb:1a:b0:21:e4:76:26:a7:38:
e0:21:b5:2c:6f:11:64:06:ef:ab:52:ad:92:ec:c9:
59:8f:e4:fb:2c:cd:30:b3:16:5d:f1:e2:1d:a5:c1:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:0D:45:03:68:B4:F0:D4:13:C0:69:F3:05:84:94:7B:4D:BA:33
X509v3 Authority Key Identifier:
keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7ec0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
01:cf:b4:06:fb:b5:ae:50:83:b2:55:9b:32:b3:e7:9c:1f:19:
73:9d:cb:52:ca:f1:85:34:23:88:bb:a4:a1:d4:eb:f3:09:57:
1f:c4:35:07:f2:f7:0a:23:3d:ad:ae:0c:48:2c:4f:dc:39:12:
21:e3:08:26:14:24:5b:24:ab:f1:3c:cc:0b:36:d0:d6:99:be:
93:35:a6:58:11:87:ee:c9:05:65:6e:7e:db:99:2d:ef:d8:01:
0e:7a:a3:ea:52:d6:f6:7e:c2:08:f3:39:26:f0:bc:1c:95:71:
07:e7:6e:ac:d4:86:0c:7c:91:d7:fa:c4:37:e2:bc:c2:3d:60:
91:b5:8c:fc:4b:54:f4:2b:e9:e7:f0:aa:7a:26:d4:65:f5:32:
89:b8:e6:cf:11:55:4b:b5:35:4f:e3:7c:f8:2f:ce:47:04:7e:
99:17:21:98:96:68:5c:e1:de:e8:37:6f:10:ee:98:61:e9:22:
6b:b8:d9:52:45:85:fc:27:01:a7:07:22:a2:b0:f1:d7:0d:18:
e1:75:09:0d:2b:99:a9:a7:31:a6:56:46:fc:03:f3:c5:e8:55:
af:47:4b:c8:39:a7:c8:60:d5:a4:6b:bc:96:30:f5:4a:96:c5:
e6:7d:66:64:14:f5:03:19:42:52:b9:e7:9b:47:79:42:23:90:
ca:b0:08:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:48 2025 by rpki-client