Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa
File: 323830333a623832303a3a2f33322d3332203d3e20323635383135.roa (raw, json)
Hash identifier: BgiZVEBkCsQBpduxD2lkBm4tWZPrSE7ZdRvsOKcVcyw=
Subject key identifier: E6:D9:FF:42:01:B3:7D:1C:73:91:68:B7:8F:B8:A7:D2:F1:8C:C8:10
Certificate issuer: /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial: 3E8B55BE552E423226F5B6450AC0B6851E39CCED
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa
Signing time: Tue 04 Feb 2025 18:50:28 +0000
ROA not before: Tue 04 Feb 2025 18:45:28 +0000
ROA not after: Tue 03 Feb 2026 18:50:28 +0000
asID: 265815
IP address blocks: 2803:b820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8b:55:be:55:2e:42:32:26:f5:b6:45:0a:c0:b6:85:1e:39:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Validity
Not Before: Feb 4 18:45:28 2025 GMT
Not After : Feb 3 18:50:28 2026 GMT
Subject: CN=E6D9FF4201B37D1C739168B78FB8A7D2F18CC810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:fe:5e:a3:38:8b:a8:f1:3a:6a:2e:04:1e:
27:9e:10:48:9e:34:a3:fc:83:0b:7b:ad:5e:81:32:
63:ec:f3:e4:c9:63:c3:ba:db:bc:33:4d:67:3d:95:
ad:49:1f:ad:96:1f:dd:48:10:2f:a0:ab:c1:83:b5:
da:20:9c:39:50:2a:2f:fb:cf:aa:60:3f:3a:af:2b:
23:ae:fb:8c:c5:66:e4:d4:3e:4e:69:fb:dc:b8:26:
73:09:ad:a7:6b:7e:88:2a:a7:22:b0:d5:13:ae:4a:
38:2f:72:7c:cc:00:76:54:51:e8:db:09:13:21:b9:
f0:47:20:19:a7:69:b6:fe:96:fa:b8:f8:cb:61:58:
43:d9:2b:65:be:b3:fd:17:81:75:9b:93:cc:f9:6c:
03:4c:7b:7c:43:62:2e:78:c6:f3:41:44:78:2d:3c:
c8:cf:f9:8b:d1:e9:36:9c:e5:1d:88:2e:0e:34:9b:
d1:60:a1:2a:e3:35:45:6c:17:9d:85:5a:b5:d9:16:
9d:b3:ea:c6:e1:74:d8:39:f0:da:a2:0d:01:17:8a:
32:c0:ba:c2:a7:7d:84:e4:55:8b:c3:c7:01:04:53:
b6:37:41:37:e2:73:5f:43:96:c2:4d:b5:fc:fc:f6:
5e:b3:63:53:34:41:72:22:d1:81:c3:fc:26:df:e5:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:FF:42:01:B3:7D:1C:73:91:68:B7:8F:B8:A7:D2:F1:8C:C8:10
X509v3 Authority Key Identifier:
keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/323830333a623832303a3a2f33322d3332203d3e20323635383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b820::/32
Signature Algorithm: sha256WithRSAEncryption
a7:d2:df:e1:bf:b2:db:40:ff:9a:8e:dd:7b:b5:19:c3:6e:1f:
0d:19:e1:b1:5b:ff:60:08:d5:93:30:1f:90:72:ce:bd:97:b3:
bf:d4:93:c3:2a:b4:07:df:37:ce:b1:23:27:9b:ac:73:9f:69:
15:96:d1:14:07:00:84:ba:93:e6:03:ec:75:02:6b:4f:9a:bf:
9e:d8:06:28:50:28:27:c5:67:c0:c0:b2:5e:b8:02:a7:1e:c8:
ad:e5:c7:58:2d:33:cc:ce:41:40:ad:ec:4b:f0:7e:06:8f:f8:
30:4e:38:28:1d:30:a4:03:8a:ef:3c:26:8b:00:67:5f:3f:10:
47:ce:51:ab:27:9a:e6:ba:d7:57:f8:d5:6a:a4:38:16:ae:57:
c9:94:5b:19:25:33:5d:f2:61:4a:7f:e5:1f:68:c1:9f:56:d5:
fb:b2:31:0f:a6:cb:ef:9a:60:67:1e:ee:39:28:a2:46:a8:c4:
4d:70:b9:c0:c9:39:58:35:d1:f2:79:19:4f:11:40:d8:78:ca:
32:1f:ed:d6:99:9e:42:87:f9:8c:db:d6:21:d8:d2:c8:b8:45:
c5:52:16:85:f2:ec:e1:c4:3c:13:67:be:af:e4:13:9f:20:65:
57:d4:ad:33:76:f9:9a:e1:0d:a1:8a:81:2e:53:5d:17:90:f2:
0f:2e:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:10:43 2025 by rpki-client