Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
File: 323830333a363932303a3a2f33322d3332203d3e20323636363730.roa (raw, json)
Hash identifier: g8P/aEUHOXVuZyHcO+EjtK4xRX5/NaGoX6Zv5IXeRdo=
Subject key identifier: DA:91:78:1B:35:40:A1:CD:3C:EC:C8:6B:F6:B5:3C:04:18:00:47:06
Certificate issuer: /CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Certificate serial: 55E2D5603A133F319E67AFBB813D8FE657A281F0
Authority key identifier: 84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
Signing time: Tue 04 Feb 2025 18:10:11 +0000
ROA not before: Tue 04 Feb 2025 18:05:11 +0000
ROA not after: Tue 03 Feb 2026 18:10:11 +0000
asID: 266670
IP address blocks: 2803:6920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e2:d5:60:3a:13:3f:31:9e:67:af:bb:81:3d:8f:e6:57:a2:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Validity
Not Before: Feb 4 18:05:11 2025 GMT
Not After : Feb 3 18:10:11 2026 GMT
Subject: CN=DA91781B3540A1CD3CECC86BF6B53C0418004706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:7c:e2:f8:ad:54:da:eb:73:85:1e:2c:9d:
c4:80:c7:00:70:e1:e3:d7:cb:4c:41:ce:0c:ea:08:
35:cc:fc:66:0f:26:80:2d:b4:be:5b:29:2f:4d:1e:
fd:13:ba:71:b0:f1:ec:80:66:23:d3:64:82:47:b3:
e0:58:97:ca:35:f7:15:9a:ae:36:bb:95:dc:55:b4:
a5:1f:a6:19:6e:e4:3d:80:db:c4:58:e2:4d:57:fd:
f5:8b:e6:0e:cb:97:d8:0f:cb:2c:a7:7d:a8:73:dc:
64:89:38:13:c9:27:5f:1f:9a:19:ba:a5:a8:c9:3b:
96:7c:c7:fa:52:d8:22:27:c0:23:09:9c:f7:d7:ad:
9d:56:d9:02:2c:03:7b:0d:21:b9:69:a9:f0:d5:31:
7b:b2:e7:73:d9:3e:cd:58:c5:02:73:55:09:7f:56:
ce:e4:21:10:fe:35:74:11:17:87:1e:fe:96:6e:a9:
28:4d:28:cb:b9:5f:7c:03:b1:22:ff:46:e9:e5:2c:
05:d9:aa:25:02:fc:9e:bb:77:8e:f1:e0:f6:9f:70:
d8:36:27:27:5f:c5:60:31:e8:c1:c2:d2:eb:df:a9:
39:ab:c8:d7:ed:e4:c4:15:bb:ac:a3:13:53:b1:db:
27:0c:cc:c5:78:27:b7:9a:cb:f4:e0:43:74:af:7e:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:78:1B:35:40:A1:CD:3C:EC:C8:6B:F6:B5:3C:04:18:00:47:06
X509v3 Authority Key Identifier:
keyid:84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6920::/32
Signature Algorithm: sha256WithRSAEncryption
6d:88:fa:2d:aa:c9:cf:37:66:fb:72:3f:9b:bd:79:7a:0a:3d:
e9:12:84:18:de:65:a1:04:9b:39:ac:15:ea:d0:75:87:7c:ef:
2f:b8:d8:b7:d5:c5:0b:59:82:9e:98:60:ce:ae:36:10:d9:dd:
ca:c3:5e:75:d6:91:fb:36:d9:8a:54:88:6d:7d:36:46:e9:61:
e9:ed:9c:1e:85:f8:b5:63:2a:47:32:cf:04:61:3b:7d:9a:91:
6e:35:da:d6:11:db:12:17:6d:64:6f:41:3a:88:c7:0c:73:c3:
fc:11:fb:0a:cb:7b:27:d4:2e:d0:41:72:a1:45:65:56:36:19:
ca:79:17:f0:9c:7b:df:a1:47:99:56:7f:8d:11:36:64:6c:ca:
a1:38:73:de:4d:6a:37:ac:92:a1:b5:af:92:dd:8f:c6:45:80:
ac:e3:da:ef:86:f6:e4:ac:52:be:58:35:0c:af:66:bc:22:98:
a1:f0:b1:69:28:3d:23:e1:be:c1:ef:e9:cb:27:1b:72:13:2e:
a8:d5:39:a4:4e:e6:2f:c3:95:66:3d:6a:f6:1a:4a:fb:e8:08:
6f:7d:ca:8e:06:e1:c3:06:f4:77:45:47:2c:bf:32:1b:01:af:
11:e7:4f:f9:bd:80:40:1f:81:1f:f1:ad:f7:12:f0:81:9b:16:
ba:aa:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client