Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
File: 323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier: vJyIwNYj2oRr5CbvCvfGx5G4XbRw+Bek58eStXN8LfY=
Subject key identifier: BB:67:9D:D3:47:4C:F4:63:0F:52:77:CF:D5:97:F1:48:D3:52:C5:41
Certificate issuer: /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial: 173E6125D6AA17D729A079348465775F3ADD6E6C
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
Signing time: Mon 29 Apr 2024 17:30:01 +0000
ROA not before: Mon 29 Apr 2024 17:25:01 +0000
ROA not after: Mon 28 Apr 2025 17:30:01 +0000
asID: 270165
IP address blocks: 2806:3eb:200::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3e:61:25:d6:aa:17:d7:29:a0:79:34:84:65:77:5f:3a:dd:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Validity
Not Before: Apr 29 17:25:01 2024 GMT
Not After : Apr 28 17:30:01 2025 GMT
Subject: CN=BB679DD3474CF4630F5277CFD597F148D352C541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:01:c1:9c:0c:fd:08:ba:a3:6a:78:60:7a:
ef:73:4f:c5:d0:ba:8d:80:8f:a6:22:20:17:a1:48:
96:c3:79:05:89:16:57:6b:49:de:57:37:da:28:d0:
b4:26:79:15:f4:15:b4:fa:9d:d4:7e:36:d5:ec:8f:
59:ef:68:fc:03:84:7a:40:e0:e7:42:5d:ee:30:f5:
e2:7d:26:75:2d:f4:a4:0b:a8:ae:46:7b:40:ed:8b:
fe:6b:f5:4a:7e:00:ca:5f:02:65:bd:3e:42:ed:eb:
3a:e3:27:38:ba:44:8b:62:54:c6:ce:c9:7f:27:82:
c1:6d:33:e5:22:cc:71:63:6f:11:f3:a9:89:84:08:
2b:92:7a:04:66:9f:59:3f:3d:ec:41:54:fb:b7:e7:
f9:50:e8:fa:99:dc:8a:12:47:e4:d4:0e:c3:5c:cc:
f1:46:0f:77:12:a9:61:ce:f0:ff:da:48:84:50:ff:
d6:66:bc:08:85:a3:a9:e1:75:71:24:31:2c:4d:62:
2a:df:fd:a7:18:b4:39:d7:8d:50:5b:77:fa:47:f3:
cc:35:94:fd:7c:e7:ab:5e:7f:9a:87:a7:77:9a:44:
a6:0a:45:82:d6:3f:18:64:0f:e3:6c:4b:59:74:6d:
be:88:35:bf:7e:13:db:31:61:8b:3f:0b:0f:06:82:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:67:9D:D3:47:4C:F4:63:0F:52:77:CF:D5:97:F1:48:D3:52:C5:41
X509v3 Authority Key Identifier:
keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3eb:200::/39
Signature Algorithm: sha256WithRSAEncryption
a1:b7:dd:01:ff:98:92:b8:3c:81:98:de:86:b8:78:7d:13:17:
04:8f:b5:5c:fd:3b:b9:16:15:79:b7:4e:46:8e:7d:83:28:91:
94:e2:b4:e2:a7:01:a0:48:1d:f5:a3:63:14:a0:4f:34:9e:e2:
5e:52:a1:5f:b9:f9:a5:b7:e8:cb:f8:35:fb:ad:a3:da:0c:21:
8b:a3:e6:b7:cf:03:68:00:2d:79:28:d7:88:07:7f:d6:b0:22:
82:ca:ef:32:c1:f1:7a:26:47:69:02:cd:90:89:67:1c:82:15:
17:b4:58:3e:0a:49:d2:6f:23:94:42:4f:3e:de:87:af:7a:a1:
0a:41:af:a3:d4:5f:7d:7f:91:76:e2:e9:2a:29:ac:8f:4c:7f:
53:26:7f:0a:b5:5e:ae:a5:82:88:5c:81:a9:1a:e4:ff:29:3a:
41:7d:86:2a:c7:70:38:6a:96:e6:20:fc:b9:cb:3a:a3:1b:6b:
89:6d:d2:8c:4f:6a:cc:bd:f5:73:c5:49:19:eb:4b:1a:ad:52:
97:cf:b4:22:0b:5a:ca:db:f8:52:32:5d:56:f6:74:5d:14:83:
e9:1c:fd:af:b5:fd:c4:4d:28:80:63:c9:d9:cf:c6:a1:e9:0e:
9e:20:33:05:a1:63:99:4d:f2:cf:3b:cc:32:68:2b:9c:0b:72:
6f:aa:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:16:43 2025 by rpki-client