Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
File: 323830333a633530303a3a2f33322d3332203d3e20323633323330.roa (raw, json)
Hash identifier: g/loRh1M5bU2/FeBJ0a+jCjGA37XE4WQn9bgUXp87QA=
Subject key identifier: 79:1A:9A:C2:C1:AF:C5:C5:C1:09:16:89:2C:41:2C:ED:2B:EA:66:9C
Certificate issuer: /CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Certificate serial: 6A37F1CA5B935D340D72D029D3A938BD30B6679E
Authority key identifier: 4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
Signing time: Tue 04 Feb 2025 18:08:38 +0000
ROA not before: Tue 04 Feb 2025 18:03:38 +0000
ROA not after: Tue 03 Feb 2026 18:08:38 +0000
asID: 263230
IP address blocks: 2803:c500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:37:f1:ca:5b:93:5d:34:0d:72:d0:29:d3:a9:38:bd:30:b6:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Validity
Not Before: Feb 4 18:03:38 2025 GMT
Not After : Feb 3 18:08:38 2026 GMT
Subject: CN=791A9AC2C1AFC5C5C10916892C412CED2BEA669C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:3e:b3:59:99:ef:da:15:b2:18:b2:a4:80:
5e:4f:6a:f2:48:65:bc:46:3e:08:49:c4:ff:9b:de:
c4:e5:2b:b3:8a:2c:e8:bf:01:05:57:32:a9:c9:d5:
20:f0:8e:9d:83:71:06:1c:5d:2e:96:17:26:74:c5:
0c:10:94:ea:4b:6b:4a:06:7a:74:bb:00:90:38:3d:
34:b1:9d:ea:88:fe:0f:a6:9a:24:2f:6f:84:57:10:
95:49:51:8d:6c:5b:6f:77:fc:8f:99:24:ec:d6:bd:
e3:93:f4:74:f6:03:e5:01:03:d1:c4:b0:1f:66:60:
81:89:81:b5:2a:89:44:0f:3b:c8:b9:62:12:c0:3c:
29:73:f7:8d:1d:42:f3:46:89:69:d1:2f:07:2d:e5:
ad:95:62:65:2e:5f:a4:20:ae:ec:ee:40:fa:91:4e:
2d:65:55:0f:12:cf:1a:7c:65:d9:9a:a8:c1:00:34:
61:2e:73:4e:40:fa:08:4f:1f:88:a9:51:17:f4:fb:
36:a3:4e:9f:bf:9b:c8:9c:e4:d1:54:62:19:25:dd:
c8:42:9e:f1:6a:2f:1e:af:d2:24:5f:8d:a4:a2:6a:
8d:25:68:ba:30:3b:a0:04:53:aa:59:39:ac:f4:83:
e8:09:7d:2f:b6:dc:32:27:d2:e9:45:21:4b:58:bd:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:9A:C2:C1:AF:C5:C5:C1:09:16:89:2C:41:2C:ED:2B:EA:66:9C
X509v3 Authority Key Identifier:
keyid:4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c500::/32
Signature Algorithm: sha256WithRSAEncryption
12:1a:88:9e:5a:96:16:73:dc:e1:d1:8b:42:97:cc:e5:d7:be:
88:62:ff:d7:4a:4a:a5:cb:75:89:bd:1e:7c:d4:3a:6b:e5:97:
e9:46:8b:78:7d:03:15:af:d4:f3:04:3b:ec:29:28:8d:98:c3:
fa:b9:15:51:76:a4:70:56:f7:f2:86:0c:af:10:c0:ad:1f:5e:
f8:cc:da:b7:e3:23:8c:3a:be:76:6f:44:58:d3:6f:0d:bb:79:
7b:ce:97:9f:8c:9c:e3:01:c0:bb:27:38:06:cf:a4:bd:57:29:
57:44:a5:74:3e:e9:c9:f4:7f:47:4c:89:0d:c5:de:c8:e1:c2:
18:90:a9:7a:77:b8:cc:b7:0f:bf:17:f7:3f:e1:37:da:da:c5:
7e:6d:b0:97:9a:be:0a:94:6d:a3:6a:c8:67:eb:46:b3:97:f4:
17:6c:ff:c4:e1:3b:7f:94:57:1e:10:8f:41:d2:0f:87:dd:34:
6d:a6:37:dc:26:6a:ab:c0:bb:ab:f2:c9:c0:02:d3:7d:50:1e:
4c:b2:98:e3:36:45:3b:b3:35:ef:d4:8b:1e:f5:08:2e:31:f8:
92:f1:cf:5e:30:9e:86:5e:21:82:93:2d:d4:90:5b:17:35:38:
09:d8:ea:6a:27:e1:57:66:29:a3:2c:d2:2b:71:38:6f:d5:15:
3c:cc:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:27 2025 by rpki-client