Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3430303a3a2f34302d3430203d3e20323639373330.roa
File: 323830333a353136303a3430303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier: 4YP4QytBOEbDRxrBThnH2BkZXT2pUXwLISORJC/v0ts=
Subject key identifier: 90:D6:E6:8C:F4:A3:B2:40:BC:21:2E:97:5F:45:1E:FD:23:33:DB:91
Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial: 3CC0AB9851FEBCC9F899F345C72A6056CC293192
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3430303a3a2f34302d3430203d3e20323639373330.roa
Signing time: Fri 17 Jan 2025 14:45:01 +0000
ROA not before: Fri 17 Jan 2025 14:40:01 +0000
ROA not after: Fri 16 Jan 2026 14:45:01 +0000
asID: 269730
IP address blocks: 2803:5160:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c0:ab:98:51:fe:bc:c9:f8:99:f3:45:c7:2a:60:56:cc:29:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Validity
Not Before: Jan 17 14:40:01 2025 GMT
Not After : Jan 16 14:45:01 2026 GMT
Subject: CN=90D6E68CF4A3B240BC212E975F451EFD2333DB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0b:37:c3:a0:86:a4:d0:fb:43:73:9d:0e:a6:
33:2e:e4:1f:ec:e4:41:37:c5:23:25:70:1f:fe:6d:
e2:56:ba:8d:ce:da:49:b1:1d:97:11:ef:b6:aa:d8:
c0:da:25:0d:80:96:fe:0a:47:74:a1:60:b1:9b:d8:
b7:84:c0:be:bf:6e:81:41:97:23:f9:6b:70:ec:d6:
8c:27:d6:ed:15:76:41:f7:64:24:86:a2:d2:c1:8c:
59:31:48:03:33:47:ca:8a:51:6b:d1:89:c1:e7:d9:
93:5f:7d:d0:53:c0:61:07:67:f7:ea:59:95:76:f4:
22:e4:64:b5:a8:b9:ea:34:9f:85:ef:10:e9:a3:86:
10:19:8e:2b:36:a3:10:66:05:fb:90:1f:87:69:de:
f8:86:d9:9e:ae:16:ea:5a:10:1d:5a:cf:5a:b8:e2:
69:fa:cf:33:35:d7:6b:fa:8f:30:a0:f4:94:d8:56:
4e:89:81:5e:ad:0b:37:9c:c9:8c:23:1a:7f:0d:e2:
35:d6:fe:e9:27:b4:9f:2a:0d:e4:21:4d:01:e8:b2:
e6:97:7c:17:ed:6a:cb:9a:09:af:d6:72:c8:5e:51:
7c:b4:98:c1:54:14:e4:01:af:45:77:b2:e2:36:48:
92:d7:dd:e9:ce:33:83:94:3f:d9:28:c1:63:24:91:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:E6:8C:F4:A3:B2:40:BC:21:2E:97:5F:45:1E:FD:23:33:DB:91
X509v3 Authority Key Identifier:
keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3430303a3a2f34302d3430203d3e20323639373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5160:400::/40
Signature Algorithm: sha256WithRSAEncryption
03:a2:4a:1a:1d:a4:54:be:e0:f0:e5:18:bc:e0:45:ef:1e:3d:
d4:b6:21:82:de:7a:a1:64:08:04:25:d1:48:c5:d0:f5:fb:36:
f6:7c:db:ef:ad:0c:de:90:39:0a:ba:d4:95:a5:ee:5c:75:ec:
7c:d5:82:a0:5c:a7:19:94:1a:cd:37:10:a1:97:9e:97:64:86:
5d:19:11:f3:11:b6:9d:74:e0:80:b6:c7:12:b5:94:18:7f:1a:
26:1f:96:38:a6:bd:ed:5c:57:79:88:28:f5:56:50:f1:f8:55:
fc:48:d8:2c:76:20:e2:8e:34:97:fe:08:42:68:67:48:ef:b7:
31:9b:c4:7c:d2:34:32:76:b1:f6:d1:dc:82:34:3a:c5:cf:40:
2d:6c:3d:c5:13:f6:5c:15:b3:5e:f3:2e:3e:f6:a8:47:3f:40:
ba:8f:54:72:47:26:4e:9e:1b:d6:53:d9:ff:13:82:82:e4:23:
f2:ed:d5:66:ab:77:07:57:af:b0:07:a5:88:4e:fb:17:87:fd:
36:62:4c:86:d8:e0:f3:1b:2b:ba:c8:aa:1c:b8:cd:37:99:17:
b4:7d:d7:63:8b:9c:71:dd:79:a5:c7:05:bc:4d:fa:91:b5:63:
cd:b6:a8:cd:8e:44:55:58:f6:2e:92:77:3d:47:44:03:cf:45:
f7:24:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:10 2025 by rpki-client