Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa
File: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (raw, json)
Hash identifier: dvzwargEWguyR8iOmj+URH/WbQtPtG3se+Bb5q/B/+w=
Subject key identifier: 8C:8E:0D:52:31:F9:64:E7:E6:98:8E:EF:BC:8C:C5:1C:62:88:B4:41
Certificate issuer: /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial: 4EA32DE8C467E06F14D5839E19A0DA1C777D79B8
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa
Signing time: Tue 04 Feb 2025 18:56:16 +0000
ROA not before: Tue 04 Feb 2025 18:51:16 +0000
ROA not after: Tue 03 Feb 2026 18:56:16 +0000
asID: 265739
IP address blocks: 2803:e3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a3:2d:e8:c4:67:e0:6f:14:d5:83:9e:19:a0:da:1c:77:7d:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Validity
Not Before: Feb 4 18:51:16 2025 GMT
Not After : Feb 3 18:56:16 2026 GMT
Subject: CN=8C8E0D5231F964E7E6988EEFBC8CC51C6288B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:62:48:a9:c2:16:f9:e7:66:cb:ef:53:f6:
c8:8f:8f:57:6a:f6:ef:46:0e:1f:70:51:89:3d:7e:
01:58:4d:66:42:ec:79:c6:f0:b1:1a:ad:69:fa:be:
35:d4:43:c7:f2:eb:51:17:ab:3e:7f:1f:2c:64:f8:
25:66:aa:90:45:40:af:85:6b:98:f5:6b:cd:f9:66:
9f:96:10:3b:66:7b:f2:10:c7:0f:67:f2:c4:91:b9:
ee:74:ac:c2:9c:f7:d8:ac:1e:3e:fd:ce:ca:c7:79:
d9:53:e5:cc:86:0b:ac:9e:a5:67:77:8f:8b:0e:6a:
33:68:a7:0f:51:38:a8:e6:18:c4:62:f2:86:0e:fa:
cc:3d:07:f1:31:77:88:d2:2b:09:ca:ed:40:7c:ad:
de:33:3a:9a:d1:ed:3e:fc:75:dd:91:95:13:f1:bb:
be:43:17:73:30:4f:15:71:1a:95:30:f2:f5:7c:41:
d4:80:1d:07:1b:7e:1d:85:7a:64:24:c3:74:14:df:
33:21:4b:fd:7a:45:46:52:3a:12:5d:ce:be:92:21:
b0:98:e7:4c:84:ff:ff:1c:00:f3:b2:f9:4a:fe:00:
de:5d:8c:36:4d:b9:2c:12:4f:dd:5f:79:ac:a8:55:
cd:a6:e3:42:17:8c:db:6b:4e:78:e6:e4:c2:5e:e6:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:0D:52:31:F9:64:E7:E6:98:8E:EF:BC:8C:C5:1C:62:88:B4:41
X509v3 Authority Key Identifier:
keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:12:cd:11:a8:7a:c9:07:41:d3:c6:19:ea:16:5b:03:19:79:
2f:f0:08:ab:fb:37:2a:db:1b:d2:93:ea:a1:7c:23:b2:98:9a:
28:54:41:bd:0d:b3:bc:f3:b8:cb:46:90:ec:74:18:5f:87:bd:
c9:cd:16:5d:90:14:b4:a1:55:fb:e3:eb:1c:ee:5b:2b:82:6b:
d5:b2:6b:24:ed:32:63:fb:15:16:27:e5:d0:99:3e:5a:fa:43:
44:42:b4:6c:6a:d1:65:45:fc:90:c1:5e:06:37:a0:1c:47:d6:
43:81:54:1e:a5:17:fd:c4:fc:87:ba:3f:43:8f:6b:e9:20:ab:
69:23:7f:bc:2a:a4:9c:f2:c2:84:ac:fc:82:27:8f:ad:89:b3:
07:13:58:62:a4:63:c7:71:06:58:8f:ba:c4:ba:ba:9d:e6:56:
8c:37:46:90:3f:71:99:81:78:79:a7:81:ed:63:b4:c9:87:a6:
32:8e:60:65:30:a1:6e:6a:c9:45:c5:1f:7f:8a:9e:de:6e:5f:
0e:eb:cf:ab:5e:b2:68:5f:72:64:17:bf:6f:9c:10:31:13:d9:
73:a4:41:65:7e:01:be:a9:ea:26:08:ec:f2:8b:9a:1f:26:73:
6a:00:15:1e:58:4a:87:ce:3a:89:24:7e:1c:97:bc:3d:30:ae:
4b:44:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:55 2025 by rpki-client