Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
File: 323830333a643036303a3a2f33322d3438203d3e20323637383133.roa (raw, json)
Hash identifier: d/vCarQhHqEb/0j6X95nmeffRiB8RaA3P5LXAe9Y1nk=
Subject key identifier: 90:BE:39:0E:12:33:CC:F7:0E:56:2F:C5:74:5B:20:EE:24:B9:98:42
Certificate issuer: /CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Certificate serial: 322BD2EC7BE8BB240766B806D5649CAE183212FF
Authority key identifier: 4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
Signing time: Tue 04 Feb 2025 18:43:31 +0000
ROA not before: Tue 04 Feb 2025 18:38:31 +0000
ROA not after: Tue 03 Feb 2026 18:43:31 +0000
asID: 267813
IP address blocks: 2803:d060::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2b:d2:ec:7b:e8:bb:24:07:66:b8:06:d5:64:9c:ae:18:32:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Validity
Not Before: Feb 4 18:38:31 2025 GMT
Not After : Feb 3 18:43:31 2026 GMT
Subject: CN=90BE390E1233CCF70E562FC5745B20EE24B99842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:d4:b6:7e:b6:b0:79:89:55:ad:a1:ef:b5:
68:7d:ff:a5:ed:bb:8e:ab:c3:02:91:fd:cf:03:87:
f9:8b:ab:e8:41:5c:85:43:6b:26:dc:20:9f:d4:42:
f1:56:bb:f4:bf:26:e9:ca:47:ab:bc:73:dd:97:17:
61:f5:11:35:b5:40:44:ec:9a:d3:d5:2c:fa:b9:0b:
7e:3e:36:64:93:ce:ad:39:8d:7c:59:bf:de:8b:47:
a1:bf:2c:db:56:0b:74:f6:93:ae:e5:1a:f0:b6:6e:
6e:bf:fe:57:64:7f:95:98:c4:fe:d1:c6:8e:71:0d:
eb:7d:c9:19:34:c4:07:dd:4c:44:0d:1f:9e:8f:d7:
c2:1e:89:24:63:18:fe:0e:02:98:2a:b5:29:b3:34:
95:e4:84:53:3e:cc:00:6b:6a:af:2c:1b:ba:61:45:
50:0f:b3:81:9e:03:ac:ac:28:82:c1:9c:a2:cd:ea:
59:55:c3:7c:a1:3b:52:ac:24:23:15:df:10:87:e7:
72:1f:4b:5e:de:2a:4b:96:42:6e:09:9f:59:c9:13:
c7:e3:4a:c4:c6:34:c4:5e:39:ab:2f:f3:a7:1c:b2:
e1:f9:8c:a7:05:ec:33:24:4d:c3:18:06:97:eb:1c:
f4:5e:56:49:82:f4:36:5c:b5:9e:41:a6:f5:66:51:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BE:39:0E:12:33:CC:F7:0E:56:2F:C5:74:5B:20:EE:24:B9:98:42
X509v3 Authority Key Identifier:
keyid:4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d060::/32
Signature Algorithm: sha256WithRSAEncryption
18:10:de:b5:e7:b8:59:e6:21:54:63:a3:17:7e:48:07:03:bb:
fc:77:e3:8a:e6:46:54:3a:f0:d8:79:ff:8e:2d:e7:95:f4:01:
a9:4e:fa:a0:5b:0b:8a:17:7b:24:2d:27:39:6d:cc:e5:4d:7e:
db:7a:68:f6:0a:7d:b4:ce:1d:e1:57:ae:1a:23:56:e5:b2:e6:
82:8f:31:c1:18:b4:00:17:c7:4b:58:e1:46:d6:df:b8:eb:27:
0f:98:d0:f2:81:d4:a6:a9:74:f6:da:62:8c:c1:4c:79:23:6b:
25:e2:7e:ac:81:a6:8d:42:74:41:c2:13:fd:99:a2:72:a0:56:
e7:72:7f:bf:50:b9:a9:0c:1b:50:7a:bb:04:c6:7e:f9:3b:13:
58:d5:e9:33:b6:b9:94:b0:ff:9c:23:36:c5:68:2b:50:b1:e7:
74:fb:e2:e5:ce:2e:ad:3a:95:bf:1a:b5:f8:32:06:2c:c1:b9:
a2:96:58:b3:67:09:3d:0a:9f:10:26:96:84:2c:f7:8d:7f:e3:
cf:d5:37:6c:62:f9:d6:6c:bd:38:ca:70:31:a0:01:cf:e6:3f:
12:99:7e:d5:5a:0a:91:e7:99:bd:2b:c7:3e:80:81:c8:db:d4:
b8:0c:87:55:03:8a:a9:5d:b9:6c:fe:41:00:48:46:3b:f9:6d:
cf:bd:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:56 2025 by rpki-client