Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa
File: 323830333a663061303a3a2f33322d3634203d3e20323633323338.roa (raw, json)
Hash identifier: XVccYgu7KCilrijrjo+VNhaAQ+BqSNrIXGY2flmcIPA=
Subject key identifier: A1:FA:F5:2C:25:A4:73:83:9E:19:B6:7F:46:72:9E:35:6D:BC:A8:9D
Certificate issuer: /CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
Certificate serial: 7CDF830DB631E21AE0EDA237896AF3874FF7DA0D
Authority key identifier: AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa
Signing time: Tue 04 Feb 2025 18:12:29 +0000
ROA not before: Tue 04 Feb 2025 18:07:29 +0000
ROA not after: Tue 03 Feb 2026 18:12:29 +0000
asID: 263238
IP address blocks: 2803:f0a0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:df:83:0d:b6:31:e2:1a:e0:ed:a2:37:89:6a:f3:87:4f:f7:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
Validity
Not Before: Feb 4 18:07:29 2025 GMT
Not After : Feb 3 18:12:29 2026 GMT
Subject: CN=A1FAF52C25A473839E19B67F46729E356DBCA89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:4e:23:8b:05:17:88:b2:20:b9:11:4e:8b:
7d:4b:98:f5:b9:d4:da:11:ce:f2:1a:a8:ca:92:c0:
9d:68:67:8e:ce:c2:52:91:dc:3d:16:f0:34:c4:ee:
81:a4:53:d3:c5:6d:4f:8e:00:6c:45:48:42:c1:1f:
f0:d1:0b:89:50:91:66:d1:67:91:02:dd:c9:ce:8e:
91:5d:1d:a2:9c:bd:2f:03:8c:33:4c:82:35:56:0c:
3b:fa:5a:9c:a7:72:9e:e1:6c:26:f9:31:24:75:fa:
54:e6:ff:b7:e2:bf:1a:74:44:62:bf:18:a6:c3:e1:
4d:a4:91:16:c5:1f:f2:eb:df:cb:3c:7e:26:18:b2:
05:9e:76:26:99:7e:e0:fc:6c:e6:90:93:73:49:1d:
4b:d2:42:e0:be:47:79:3d:8f:4f:6f:77:92:a4:1b:
4b:a6:63:61:f8:8e:11:a6:3c:49:9e:4c:fd:4b:25:
23:42:e8:6d:9e:85:b5:fa:e8:78:2d:4d:5b:7d:42:
89:0b:09:0d:6e:89:55:ee:87:35:57:04:68:a4:b3:
83:04:21:0f:98:d0:98:71:6c:62:c3:9c:39:e9:ab:
32:a8:38:78:86:e6:a4:18:cf:6b:d6:ac:e9:75:df:
50:aa:98:9c:1b:28:17:1a:48:a0:7f:e6:e0:a5:e3:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:F5:2C:25:A4:73:83:9E:19:B6:7F:46:72:9E:35:6D:BC:A8:9D
X509v3 Authority Key Identifier:
keyid:AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f0a0::/32
Signature Algorithm: sha256WithRSAEncryption
58:b0:3a:c0:f5:0f:ad:d0:46:b1:1a:31:3b:4a:1a:16:16:5e:
11:13:aa:97:ed:b6:25:45:e9:ca:3e:6c:02:96:c0:97:4a:a9:
c8:73:86:9c:be:21:ae:29:80:45:7f:fa:b6:12:a6:00:42:48:
b1:46:2f:1f:9c:63:57:eb:b4:ad:90:fb:ea:b0:68:04:6b:2d:
fc:5d:59:bf:ce:9f:09:1b:52:c3:87:a7:a1:cc:3d:90:73:2e:
b7:d5:3a:79:53:e1:ba:51:ca:6e:b5:66:b4:92:79:2d:48:d9:
9b:cb:10:39:2e:22:63:29:bd:90:7c:b0:d3:1d:08:a2:1f:f2:
28:85:3c:7f:06:30:2a:5e:20:3f:8e:5b:cc:7d:2d:55:4b:b0:
cd:9b:02:3a:11:4e:2e:93:7b:7a:6d:8c:05:10:39:b8:98:cc:
fd:42:88:54:58:8f:4b:93:4b:42:3d:cc:59:57:a3:21:f6:8c:
4b:f6:6d:c3:1d:64:67:29:6e:12:d9:cf:7a:fb:47:22:fa:42:
f5:9d:ef:e9:6a:88:7c:ff:bf:a1:36:c1:73:e0:fc:ca:3b:0d:
5d:95:ea:1a:36:9a:f2:2c:7c:31:16:87:7a:a8:82:1e:af:ea:
8f:d4:1a:3a:7f:35:54:37:ec:b8:e2:ca:9b:23:24:2c:58:84:
60:9d:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:57 2025 by rpki-client