Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa
File: 323830333a6136303a3a2f33322d3332203d3e20323637383738.roa (raw, json)
Hash identifier: etr1vxzggL8ebp6gb0P76/ItGyWW6MBzBD13t/gLlvA=
Subject key identifier: B7:4F:23:C5:23:40:A8:FD:98:91:24:E5:97:86:7E:4F:B7:27:D0:FB
Certificate issuer: /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial: 6A929CEA78154341B8002C293581E25A9B45259D
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa
Signing time: Tue 04 Feb 2025 18:20:56 +0000
ROA not before: Tue 04 Feb 2025 18:15:56 +0000
ROA not after: Tue 03 Feb 2026 18:20:56 +0000
asID: 267878
IP address blocks: 2803:a60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:92:9c:ea:78:15:43:41:b8:00:2c:29:35:81:e2:5a:9b:45:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Validity
Not Before: Feb 4 18:15:56 2025 GMT
Not After : Feb 3 18:20:56 2026 GMT
Subject: CN=B74F23C52340A8FD989124E597867E4FB727D0FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:59:df:bb:d1:7e:25:1b:e6:75:00:09:8c:
a1:bc:8a:9a:f5:b0:45:39:59:d9:ec:b2:b6:f8:a1:
b1:98:bf:97:37:93:91:56:f7:cd:c7:9f:63:6e:0d:
00:c0:96:ba:7d:fd:59:e6:88:22:54:b9:24:e8:52:
73:b1:a6:f0:86:f1:71:9c:96:67:81:5d:0e:09:1c:
58:e6:8b:9b:c2:92:76:ca:14:16:9c:8b:cb:ce:d4:
ff:2f:16:a2:bd:a1:46:b9:ed:0b:fc:b1:4f:2c:7e:
7d:1f:11:7a:08:b9:96:9c:82:87:0f:b4:26:c2:72:
54:07:89:dc:cf:86:12:df:31:c1:07:bc:9b:63:9d:
de:73:c9:53:24:18:19:3a:50:97:c2:e5:b9:65:aa:
11:2f:f8:7c:76:f0:44:6d:6b:99:a5:ae:01:ff:be:
43:cc:4b:bb:f5:08:57:97:71:67:2c:ec:50:83:8d:
3c:99:be:ad:b6:25:a5:09:9a:b3:0b:7d:55:da:a0:
bd:f7:00:25:02:3b:49:64:cc:17:0d:34:77:90:0e:
0a:ec:c8:e7:43:4d:c7:d3:cb:24:9c:d0:7e:41:d3:
20:0c:6d:86:52:cf:a7:6e:cf:e2:9f:f5:7f:1a:4e:
e6:1d:ed:62:10:bb:0e:54:13:e1:f5:9d:a3:08:9b:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:23:C5:23:40:A8:FD:98:91:24:E5:97:86:7E:4F:B7:27:D0:FB
X509v3 Authority Key Identifier:
keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a60::/32
Signature Algorithm: sha256WithRSAEncryption
0e:a5:37:5e:d8:ef:3f:9b:ab:12:db:01:2c:31:3e:71:5b:12:
17:ae:56:d1:13:23:c3:70:19:d4:8f:19:3a:6d:40:75:e0:7d:
bb:68:9d:3a:ce:2f:4e:26:0d:ec:54:59:9f:b4:e6:a4:05:73:
68:85:b0:2f:84:89:b6:01:38:bc:33:e1:6c:54:0f:54:11:93:
9b:43:4d:d1:26:42:0b:75:56:de:3d:39:39:5f:c7:33:23:9a:
8c:c3:6c:5d:e5:33:d5:48:ff:5b:71:41:6d:0a:3c:04:df:5c:
dc:e3:3a:84:4a:79:21:ea:d6:a8:66:71:55:e5:47:89:c0:ff:
43:35:92:65:f5:f6:64:b9:6a:a6:3b:72:a5:42:ca:f3:72:f0:
de:c5:49:de:65:4d:46:bb:9a:17:e9:60:ee:af:c1:9d:0c:23:
d6:10:d1:eb:3c:fc:cf:be:7a:0b:f2:b2:10:66:a3:bf:36:35:
17:d1:0f:bb:2f:23:a1:40:1a:3d:5c:39:fc:69:14:a3:10:c3:
9a:d3:b7:50:14:ec:ec:0e:2e:05:ab:75:81:2f:ab:28:60:bd:
93:e2:e3:ab:e4:0b:d0:c7:ea:f9:a6:cd:cb:93:ef:32:4a:f1:
8b:16:44:b6:0a:51:9e:75:3d:db:df:75:c7:cd:f9:0e:a9:ab:
c0:63:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:49 2025 by rpki-client