Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa
File: 323830333a643232303a3a2f33322d3438203d3e20323636383830.roa (raw, json)
Hash identifier: l0WMMqPT63dtfqO0gPul38a2OsI9SKgH8O1l+DOdNPk=
Subject key identifier: EA:C5:95:AE:60:73:74:8B:24:6D:90:BF:BA:BF:E3:97:D8:01:DA:66
Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial: 2A759E02815022B84DDD75E0323D427B0A3E96BF
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa
Signing time: Tue 04 Feb 2025 18:54:32 +0000
ROA not before: Tue 04 Feb 2025 18:49:32 +0000
ROA not after: Tue 03 Feb 2026 18:54:32 +0000
asID: 266880
IP address blocks: 2803:d220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:75:9e:02:81:50:22:b8:4d:dd:75:e0:32:3d:42:7b:0a:3e:96:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Validity
Not Before: Feb 4 18:49:32 2025 GMT
Not After : Feb 3 18:54:32 2026 GMT
Subject: CN=EAC595AE6073748B246D90BFBABFE397D801DA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:7e:d3:89:42:60:f7:bc:e3:af:5b:18:ab:
47:8b:2f:fe:90:d6:36:25:85:fb:fc:2b:53:d9:d3:
31:51:38:8b:5c:30:1c:00:b0:92:fe:ac:9b:f2:f7:
d0:a5:76:e6:51:42:5f:c8:a6:02:7a:a1:2d:91:42:
45:1d:17:9d:99:14:09:bd:eb:65:55:c8:35:92:97:
7f:f0:0a:0d:92:e1:e9:2c:74:a2:98:68:6e:1a:4c:
c0:06:44:2a:b9:2f:2d:57:7a:b1:00:89:50:02:d8:
fa:85:6f:08:e8:42:05:23:be:95:5b:71:fb:c6:8c:
06:87:af:c8:20:d7:6a:29:63:48:8c:37:c1:ce:5f:
45:25:21:72:20:2d:ec:86:97:08:be:71:34:69:8e:
a1:26:29:86:eb:c4:3b:d6:47:cf:cf:f9:a3:32:9d:
d6:ab:c4:3f:dd:71:85:02:47:3d:21:c3:69:6d:b1:
c6:fa:21:cc:6d:42:67:d4:49:7a:ed:d6:f3:b2:49:
d0:81:3c:17:36:94:2e:7e:45:0e:15:32:b4:5c:08:
a5:e4:43:3e:81:e9:52:8d:09:ac:a8:43:b7:2a:15:
7f:1f:fa:e5:8c:62:52:f7:c1:ec:59:6c:3f:1e:aa:
b0:69:2a:c0:87:9b:83:93:f5:83:f7:73:fe:90:c4:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C5:95:AE:60:73:74:8B:24:6D:90:BF:BA:BF:E3:97:D8:01:DA:66
X509v3 Authority Key Identifier:
keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d220::/32
Signature Algorithm: sha256WithRSAEncryption
38:1b:ec:b3:4a:c0:e8:64:b3:61:e1:c2:22:9a:a9:e0:4a:11:
86:7b:f5:5a:f7:19:29:a0:a9:42:15:3d:b5:3f:64:67:10:bd:
fd:aa:d8:7e:2a:f4:f8:f7:26:c7:7b:52:34:8b:22:97:15:c0:
7f:99:fd:7c:61:89:09:c8:08:cf:eb:0f:cd:2f:03:eb:80:8a:
d1:3b:a0:8f:f3:f1:bb:87:3c:76:c1:04:b1:be:4d:0c:3e:5e:
87:0f:b5:c6:76:45:23:9c:bb:76:03:82:00:b5:a6:8f:ab:4a:
e5:51:64:08:56:b9:24:68:c8:26:f8:a3:67:cf:89:2e:3b:9e:
13:51:eb:27:bf:54:0e:b9:be:40:70:4c:41:6f:1e:16:2a:6d:
f9:6b:80:aa:15:8e:b7:ff:50:a6:2b:c8:10:e0:ff:e3:e2:16:
42:c7:a0:4d:9f:5a:fe:03:ef:d4:43:7a:90:f0:91:07:64:46:
9a:74:01:79:6a:6d:c5:a0:d2:13:ac:28:33:ca:d9:7a:2f:a1:
ef:38:06:0a:99:3f:36:6d:8d:2d:cc:31:a7:a4:3c:bb:3e:4a:
4f:b5:dd:ec:b5:91:41:f1:e9:3a:e2:3b:1b:2e:2e:49:7d:7b:
a9:06:b3:b6:4e:d6:5f:31:a3:fd:33:d4:75:b9:3d:93:4f:32:
ce:01:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:52 2025 by rpki-client