Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa
File: 323830333a663038303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier: zR63HMEKW8XwAkIqXPh5jIby9j54KIyQ2DRrKOzzuh4=
Subject key identifier: BF:33:53:2B:E5:BC:38:29:68:05:A0:31:77:7C:70:FD:6A:F9:E4:C7
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 1C525849261178AC94C6FAB21DF0BB998B4BBA63
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa
Signing time: Tue 04 Feb 2025 18:42:03 +0000
ROA not before: Tue 04 Feb 2025 18:37:03 +0000
ROA not after: Tue 03 Feb 2026 18:42:03 +0000
asID: 64120
IP address blocks: 2803:f080::/35 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:52:58:49:26:11:78:ac:94:c6:fa:b2:1d:f0:bb:99:8b:4b:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Feb 4 18:37:03 2025 GMT
Not After : Feb 3 18:42:03 2026 GMT
Subject: CN=BF33532BE5BC38296805A031777C70FD6AF9E4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:a8:ad:04:ee:fe:d6:1d:35:5f:e9:c6:6e:
17:fb:c8:48:c7:00:b4:1e:62:a2:1e:b1:9a:0a:1d:
75:a6:2f:d8:6b:2d:61:3b:79:4c:00:2e:aa:a5:00:
7b:da:fb:4a:b1:81:73:b9:40:07:54:a0:0a:d0:e2:
57:98:d6:03:d8:e1:71:94:50:0c:19:72:ee:db:7d:
1e:22:3b:e1:9c:69:0c:13:5c:fb:cb:b6:c4:12:48:
6a:30:1e:78:ac:c8:ec:9f:eb:69:b1:36:cd:d9:00:
26:09:cc:ef:64:16:33:74:74:8c:8a:bb:13:3e:f5:
88:46:01:51:4e:17:e8:b6:99:cf:ab:5d:14:25:44:
d4:f3:96:8d:e8:22:b8:a7:33:a2:b8:47:7f:7d:c7:
38:38:f7:9d:c1:3e:b1:4e:3c:02:5a:0f:cb:22:58:
fe:78:91:e9:e6:dd:8f:3c:01:33:74:40:a4:74:00:
24:4c:a4:ec:7e:d5:1b:c0:bb:7d:42:45:0d:3b:a1:
a0:55:b7:06:d8:43:4b:64:37:e3:60:e9:2d:3c:fe:
d1:b3:51:eb:eb:34:15:7a:a2:e5:cd:aa:53:32:ea:
62:76:82:54:4f:55:33:82:a7:2f:f3:14:b1:d0:76:
15:fd:42:16:01:ab:9a:94:4c:fa:9d:31:ff:ff:21:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:53:2B:E5:BC:38:29:68:05:A0:31:77:7C:70:FD:6A:F9:E4:C7
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080::/35
Signature Algorithm: sha256WithRSAEncryption
09:04:4a:35:61:52:30:99:53:71:e4:21:da:01:77:3a:5c:af:
90:9e:3e:f5:9b:72:39:52:b8:7b:6b:e8:38:64:c9:b6:6d:70:
42:60:70:28:51:48:10:61:be:f3:af:d0:c5:5d:7b:e0:73:65:
d9:6c:33:dd:23:4a:7a:1b:7c:a0:7b:40:7d:da:36:a8:7e:30:
a5:70:b7:09:10:d3:ba:56:2d:04:df:a9:1d:53:6f:46:02:52:
fb:08:f6:47:dd:67:12:8a:b1:32:4a:16:91:35:c7:35:59:14:
31:88:c0:44:b0:b4:b0:96:b0:f4:ba:36:1e:7d:a0:11:e7:85:
e0:50:51:bb:10:20:38:94:ce:65:ca:b8:b6:a5:14:5a:d7:93:
c7:80:65:a3:25:64:86:a7:12:57:84:8f:02:b1:99:4f:7d:4c:
bd:1e:38:7a:a3:70:d7:f5:09:c0:66:26:a0:be:78:e2:55:33:
af:92:9b:c2:7e:de:e0:4c:08:ea:ad:9c:e0:90:fc:b8:7b:14:
f8:26:75:91:4c:2d:30:07:ca:b2:c2:f6:fa:52:37:1b:8a:f5:
40:75:16:96:55:5d:ec:5a:53:4e:61:eb:20:96:7e:5d:3c:9e:
5f:8b:cf:b2:75:c4:4b:23:f2:e2:d6:f2:08:a3:da:1f:c8:ea:
14:29:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:10:20 2025 by rpki-client