Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa
File: 323830333a623731303a3a2f33322d3332203d3e20323732313039.roa (raw, json)
Hash identifier: FUZLQmLiKcSjfUSah4b3pLHxc9EuqpV1j4HMvKlaZ04=
Subject key identifier: DA:A6:C7:62:DE:5E:A1:A4:E8:F2:99:9C:BE:58:99:70:D3:58:55:F1
Certificate issuer: /CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
Certificate serial: 4D7D7B3EA3801E00D2A9E2BA8E8837F942F4F179
Authority key identifier: 3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa
Signing time: Tue 04 Feb 2025 20:07:09 +0000
ROA not before: Tue 04 Feb 2025 20:02:09 +0000
ROA not after: Tue 03 Feb 2026 20:07:09 +0000
asID: 272109
IP address blocks: 2803:b710::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7d:7b:3e:a3:80:1e:00:d2:a9:e2:ba:8e:88:37:f9:42:f4:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
Validity
Not Before: Feb 4 20:02:09 2025 GMT
Not After : Feb 3 20:07:09 2026 GMT
Subject: CN=DAA6C762DE5EA1A4E8F2999CBE589970D35855F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:de:0c:72:6d:df:64:f3:48:d9:8c:f8:1e:
33:76:82:04:60:4e:a4:9f:a7:53:51:82:c5:38:f6:
f4:f5:a7:61:8e:09:e0:90:b7:78:22:8e:c9:b4:7d:
44:b5:89:66:a4:a3:ae:75:dd:5d:dd:96:74:63:2a:
c4:57:14:6e:5c:6a:14:40:98:27:e3:0b:5d:4e:6a:
06:61:23:e7:08:2c:88:53:56:e0:24:85:e5:31:0d:
da:4c:86:bf:38:c1:e0:f2:00:bf:09:e5:90:72:77:
2f:1e:d3:9b:37:98:1e:b9:fd:c9:e8:bd:b7:88:9d:
f5:d9:46:08:c0:61:7b:e3:b7:07:61:fd:66:c6:03:
08:68:72:4e:d1:c4:15:63:ee:22:e0:8e:22:49:3f:
34:66:6b:49:1c:5c:26:60:00:d7:1b:68:fb:6d:b7:
47:87:44:3d:a8:59:24:c9:05:f4:4e:79:30:99:6c:
18:90:bd:fe:13:fa:e4:d0:f8:eb:d3:ee:03:99:ae:
51:be:e6:dd:7a:32:a6:d2:04:54:68:82:5a:3f:f8:
49:93:88:44:86:23:1b:1c:ab:36:8a:ff:51:18:6c:
4e:4b:2c:34:07:3a:c7:0f:37:1f:2c:c5:dd:e2:1f:
fe:56:0b:57:d2:5d:dc:56:0a:09:45:be:00:5e:72:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:C7:62:DE:5E:A1:A4:E8:F2:99:9C:BE:58:99:70:D3:58:55:F1
X509v3 Authority Key Identifier:
keyid:3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/323830333a623731303a3a2f33322d3332203d3e20323732313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b710::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ec:d5:a0:77:45:28:91:d0:77:3d:97:c3:97:87:3b:3f:03:
8f:ee:45:6a:e0:9a:89:96:05:22:16:80:c8:5a:93:63:e0:3d:
ff:f3:bf:e2:1a:84:1b:ee:2b:c9:1f:4b:ff:db:ae:90:e2:e0:
49:0b:0b:69:3c:ac:e2:15:2c:f3:af:61:12:de:e5:11:86:56:
30:a8:7b:39:ae:c2:ca:14:b4:7e:ea:e0:d6:3f:75:be:5b:6a:
64:aa:a1:bf:96:3b:cd:79:b3:7e:08:30:a1:ad:72:b3:a1:13:
ac:14:5c:6f:e4:9f:f2:4e:d7:58:36:5b:25:b9:74:c5:78:50:
ba:24:87:32:57:c0:06:db:d7:99:4a:20:6f:5e:a3:37:98:3e:
b5:46:a0:dc:70:02:aa:e1:2d:4a:20:c2:57:ad:4f:b9:0a:fa:
a6:c0:de:c8:db:da:75:39:d9:d1:dc:51:1e:f2:4c:53:53:15:
09:7e:af:96:32:72:5b:92:17:5d:f9:ac:01:67:ff:b2:81:ea:
95:bc:03:7a:c7:78:a0:d5:dc:51:46:36:e7:74:f8:2f:f5:b3:
05:64:ea:c4:c2:24:19:a3:8d:0e:60:37:1c:7d:11:12:fa:23:
db:19:64:e5:e4:2b:0e:1d:8b:75:ac:77:0d:8b:df:1f:2a:51:
6c:42:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:50 2025 by rpki-client