Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a343030303a3a2f33352d3433203d3e203634313230.roa
File: 323830333a663038303a343030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier: Zo46a2LSLWftsoap0P//pZ+bd4w7nhJXrmcF4aV5T2E=
Subject key identifier: CA:71:4A:58:8B:2C:82:71:48:99:06:E3:C1:8D:1F:47:F8:58:D6:77
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 671751854DD0A90194D6429FAA36ACB96649CA9C
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a343030303a3a2f33352d3433203d3e203634313230.roa
Signing time: Tue 04 Feb 2025 18:42:01 +0000
ROA not before: Tue 04 Feb 2025 18:37:01 +0000
ROA not after: Tue 03 Feb 2026 18:42:01 +0000
asID: 64120
IP address blocks: 2803:f080:4000::/35 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:17:51:85:4d:d0:a9:01:94:d6:42:9f:aa:36:ac:b9:66:49:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Feb 4 18:37:01 2025 GMT
Not After : Feb 3 18:42:01 2026 GMT
Subject: CN=CA714A588B2C8271489906E3C18D1F47F858D677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:9d:51:7f:62:84:e4:c4:0f:4a:48:4f:0b:
57:a7:0d:b1:2f:11:cc:a6:d0:6c:2d:f2:ad:c7:8b:
bd:e3:37:3b:4d:a5:83:cc:fd:6d:b9:ca:b0:61:56:
49:93:f5:8e:61:b5:64:74:6c:b1:48:7b:6a:e5:16:
9a:02:94:62:59:c7:83:a9:ba:7e:69:e2:c1:ee:df:
11:b4:b7:07:08:a0:10:14:a2:00:0d:f1:1f:ad:bf:
61:24:bf:08:3c:13:1e:50:2e:a1:07:63:03:13:55:
bf:cd:4d:10:4b:c5:3a:41:6a:d6:ef:c1:01:80:5e:
85:64:b4:12:c6:6b:7e:65:86:43:84:d9:fb:5d:e8:
3e:53:b0:44:21:6e:a4:23:64:cf:d3:23:2d:7a:4a:
b8:87:62:9d:94:5b:65:bf:ca:94:4a:ae:68:48:7e:
4c:eb:69:71:9b:9d:da:51:53:86:16:ef:75:0a:1c:
f2:49:11:ad:cf:f1:f3:69:d3:66:f8:42:7d:13:85:
54:a5:6c:3b:c2:40:3b:54:dd:b0:c4:cb:68:b4:fd:
39:9a:95:31:4a:44:70:bd:de:c8:51:58:1f:c8:67:
b6:18:d7:01:ba:fc:20:08:c2:22:af:c8:32:f7:8a:
7e:36:30:22:57:93:cb:40:23:ff:e3:bf:07:30:8c:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:4A:58:8B:2C:82:71:48:99:06:E3:C1:8D:1F:47:F8:58:D6:77
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a343030303a3a2f33352d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:4000::/35
Signature Algorithm: sha256WithRSAEncryption
99:f1:e6:38:80:c3:bc:cb:69:87:a8:f5:62:bc:a9:1f:c6:f3:
ba:56:64:00:73:7b:54:1c:aa:31:91:99:a5:2d:49:83:10:87:
ca:f8:ba:d4:9c:f4:38:bb:55:3c:a9:c1:fe:c5:b7:8d:53:a7:
41:54:af:fc:f5:16:8e:30:3b:8e:07:c2:41:72:76:7f:b7:cd:
98:91:3f:91:d9:85:c3:d6:d0:d6:68:be:68:a8:b7:73:98:21:
b6:2e:9f:e5:ba:9b:b8:be:68:3f:82:a5:20:f0:d2:34:73:b1:
a1:2a:d1:4c:3f:d6:a1:99:ea:ca:e9:10:1f:3d:a9:87:f5:ab:
b3:a1:f9:bc:43:f6:10:44:44:6a:39:8e:8d:d3:35:3e:b4:fe:
1b:94:d1:ca:71:ac:2b:02:e6:0b:9e:a4:19:9b:be:6c:e6:af:
9f:9d:9f:0d:2a:fc:11:62:e0:81:52:89:38:b0:3c:4e:f4:77:
f1:89:dc:57:5e:cf:37:6e:d9:91:69:cd:18:7c:17:8d:57:da:
3b:d6:70:ba:fb:98:7f:b8:4c:22:2d:3b:3b:63:20:0c:ec:50:
d0:04:f5:d2:d9:f4:f5:71:7b:55:ee:48:06:df:2f:4a:9b:49:
27:22:46:a3:3f:08:cb:a2:bc:19:71:3e:60:cd:8d:58:1c:d2:
49:06:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:31:14 2025 by rpki-client