Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/323830333a363931303a3a2f33322d3332203d3e20323732303034.roa
File: 323830333a363931303a3a2f33322d3332203d3e20323732303034.roa (raw, json)
Hash identifier: ROGYJ2QMB2QstVFiwK0hBAdafhWbr5n5RjyNgIyPrBA=
Subject key identifier: 6F:A7:3E:2F:A0:BF:64:D2:9F:E6:D8:2B:8F:17:D7:DA:D2:C1:66:4A
Certificate issuer: /CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
Certificate serial: 1C883A820A6D99C4D740C713C93011D6D3EA1B09
Authority key identifier: 7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/323830333a363931303a3a2f33322d3332203d3e20323732303034.roa
Signing time: Tue 04 Feb 2025 18:15:09 +0000
ROA not before: Tue 04 Feb 2025 18:10:09 +0000
ROA not after: Tue 03 Feb 2026 18:15:09 +0000
asID: 272004
IP address blocks: 2803:6910::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:88:3a:82:0a:6d:99:c4:d7:40:c7:13:c9:30:11:d6:d3:ea:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
Validity
Not Before: Feb 4 18:10:09 2025 GMT
Not After : Feb 3 18:15:09 2026 GMT
Subject: CN=6FA73E2FA0BF64D29FE6D82B8F17D7DAD2C1664A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:58:7d:67:99:69:00:93:b5:a5:25:d0:6b:
5f:64:bc:be:14:24:a9:fa:61:5a:c9:20:a6:3b:25:
42:ae:73:8f:4a:5b:c8:7b:af:ca:c2:cc:6d:76:61:
e4:49:ad:6d:5e:57:af:aa:9d:b2:50:56:a3:e9:2b:
42:11:44:7e:55:94:1c:fd:9d:a7:f2:6d:cd:8e:71:
97:b6:aa:bd:87:85:e5:ef:67:e4:c0:e2:d0:21:a3:
0b:85:b8:4c:cf:8e:bd:3b:fd:32:b8:39:1f:15:61:
ea:a0:48:24:27:53:b8:57:f5:39:77:f1:1f:9c:6f:
18:b3:26:ab:f9:34:ed:75:79:76:cb:84:0b:3c:91:
a7:fd:c7:e5:35:93:f4:45:b4:0b:45:ef:50:21:b8:
79:cd:03:ba:28:22:83:e6:56:f0:95:d4:43:fe:78:
00:49:1d:1d:72:3a:19:74:b2:75:3a:35:d5:b0:29:
c9:a1:cc:ab:bd:94:66:2a:7c:2c:38:34:73:47:11:
ac:f3:4a:9e:6c:99:83:57:d0:94:0a:cf:44:7e:33:
dd:6f:b0:65:26:61:c5:2f:36:4f:1a:36:3c:5a:6a:
a1:07:37:5b:27:38:14:ae:0f:9c:17:c6:6f:a4:c1:
bd:e0:8e:a7:b6:2e:6f:a0:30:fe:4a:b3:e9:02:27:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:3E:2F:A0:BF:64:D2:9F:E6:D8:2B:8F:17:D7:DA:D2:C1:66:4A
X509v3 Authority Key Identifier:
keyid:7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/323830333a363931303a3a2f33322d3332203d3e20323732303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6910::/32
Signature Algorithm: sha256WithRSAEncryption
23:a2:d8:11:6d:70:c7:18:7a:77:f2:4b:a9:09:fe:4e:95:91:
4b:b9:34:1c:4d:40:e0:5b:91:83:ed:64:10:00:8c:ff:23:3e:
ad:14:57:91:0b:60:ed:56:1a:b3:40:cd:d0:b8:a3:69:2d:5c:
b6:e6:03:95:49:1f:f6:7d:24:e6:34:17:0c:a0:fa:bb:76:41:
2b:9e:cd:23:52:78:52:2e:23:71:4e:2d:f6:6e:16:c4:3e:a8:
f8:15:1c:91:e9:ce:47:0f:09:9a:bc:5c:fb:65:25:5a:f4:d0:
d3:2a:84:49:00:f2:89:ab:e9:bc:ad:f6:46:b3:ce:fc:11:b9:
8d:e1:e3:e4:64:8b:37:ec:9e:6d:75:96:87:aa:af:98:4a:e3:
fa:ad:8b:5a:c7:c8:28:04:04:12:a7:78:b2:0f:59:5b:ee:7e:
2a:98:8b:ec:4c:87:12:28:57:d1:e3:f0:a2:2f:94:4b:c2:46:
b0:b5:4a:f3:07:a3:53:8c:d2:27:7c:95:e6:f6:eb:8a:74:4d:
31:ff:70:82:e9:d4:f2:1a:63:64:ba:c1:3e:e1:f8:97:35:0d:
03:5c:93:f3:86:4b:16:d3:42:e3:50:87:6f:bd:90:75:a7:2d:
9e:d4:78:32:84:a2:41:f8:92:74:10:65:45:a6:21:42:35:6c:
6c:3c:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:30 2025 by rpki-client