Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa
File: 323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa (raw, json)
Hash identifier: 3eCv8vspA0eF+a2r7ncujuOVqxgOTA65GtFT7yrqK0s=
Subject key identifier: 76:90:0B:E9:54:D5:10:7F:02:F3:F1:DB:7D:5C:94:B2:4A:7B:54:18
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 3F233680F48709982B8065D4023107B0CAAB3777
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa
Signing time: Sun 23 Mar 2025 00:12:47 +0000
ROA not before: Sun 23 Mar 2025 00:07:47 +0000
ROA not after: Sun 22 Mar 2026 00:12:47 +0000
asID: 64120
IP address blocks: 2803:f080:2c00::/39 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:23:36:80:f4:87:09:98:2b:80:65:d4:02:31:07:b0:ca:ab:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Mar 23 00:07:47 2025 GMT
Not After : Mar 22 00:12:47 2026 GMT
Subject: CN=76900BE954D5107F02F3F1DB7D5C94B24A7B5418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:c0:b8:1a:e1:55:d0:31:fe:b6:30:51:d9:
c8:5d:2d:82:0e:c9:b8:db:02:fc:84:6e:a7:99:f1:
da:40:6f:8b:7e:98:c7:95:ce:e2:43:76:af:63:14:
53:25:6f:b9:7d:d3:8a:09:c2:df:48:fe:ef:de:c1:
99:48:e5:ee:e0:0e:e1:b6:1a:fa:d6:e3:a0:74:eb:
75:24:a4:de:7a:ff:a3:ef:3d:31:0c:7b:ee:6e:b9:
68:76:0a:72:cb:7a:63:95:c4:6f:38:df:7a:2d:39:
11:aa:e1:e6:3a:56:25:6c:7a:70:db:0c:ce:8e:37:
e2:71:bf:e0:71:5b:29:78:4e:85:cf:a9:b0:e5:41:
04:4f:c9:16:b5:df:17:cd:83:db:eb:1a:5c:a9:9b:
a2:f7:af:c0:06:f1:2a:96:d3:6b:63:74:0e:8c:9b:
63:7f:41:97:ba:b0:5e:3e:39:8e:69:17:44:99:a7:
64:1e:1d:c8:67:dc:78:db:38:9a:86:a3:9e:d2:38:
32:f3:67:76:73:d5:d0:a8:18:05:d0:70:62:d7:cd:
a1:2d:3c:97:d3:2e:51:79:15:f1:9a:9a:42:c6:eb:
08:34:ee:9f:d9:b0:cc:b2:ba:94:84:7e:17:05:00:
c0:41:cd:b8:18:d3:8a:b5:c3:fb:ad:6f:fb:22:0c:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:0B:E9:54:D5:10:7F:02:F3:F1:DB:7D:5C:94:B2:4A:7B:54:18
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:2c00::/39
Signature Algorithm: sha256WithRSAEncryption
82:24:1e:70:4d:c0:bb:74:a5:1e:42:2c:d6:42:50:85:c6:c4:
75:52:e9:ab:b2:8e:62:3c:f0:39:45:e9:d9:e3:de:16:74:f2:
cf:59:33:c4:41:90:2f:a0:bf:89:28:7d:da:58:f9:b4:c3:fa:
52:8a:9e:d8:16:79:52:ee:94:f9:46:0a:ef:ab:e6:b3:63:b5:
78:3a:3b:da:93:ef:79:64:00:60:0e:d8:24:52:86:5e:98:d6:
a2:93:8d:2b:5b:c5:6a:7e:01:7f:aa:b8:be:29:9e:c1:ef:06:
b1:bd:b8:ac:11:79:a3:c7:89:fe:c2:c4:43:f3:58:fb:c0:18:
d7:37:e9:3d:9e:81:6b:a6:9f:44:21:79:34:47:c4:4c:a7:9d:
08:4b:98:62:1e:dd:0c:6f:b6:5f:af:35:f4:0f:88:22:52:1d:
95:22:76:e6:32:48:6d:c7:0d:95:b0:79:8b:27:25:76:54:46:
c0:87:21:e8:63:df:50:6c:a7:c8:a4:fe:7d:47:f1:3f:73:5e:
a5:ab:8e:71:24:cf:fe:2a:28:3b:6c:d2:5e:10:02:0e:f5:e2:
4d:06:f1:5e:e8:d1:51:1c:3e:c0:2b:c9:dc:83:a7:57:46:79:
26:88:77:cf:18:4c:eb:ce:11:dc:54:0b:90:e6:f6:8a:7c:ab:
3c:19:dd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:49:53 2025 by rpki-client