Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/323830333a323264303a3a2f33322d3334203d3e20323734303438.roa
File: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (raw, json)
Hash identifier: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=
Subject key identifier: 35:46:78:D6:52:C9:6C:15:5D:BC:21:A3:14:26:E9:C1:08:E4:DE:F3
Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Certificate serial: 6D0978BD4578A161C89BC0BA95612F041D52CC29
Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/323830333a323264303a3a2f33322d3334203d3e20323734303438.roa
Signing time: Sat 01 Mar 2025 20:25:00 +0000
ROA not before: Sat 01 Mar 2025 20:20:00 +0000
ROA not after: Sat 28 Feb 2026 20:25:00 +0000
asID: 274048
IP address blocks: 2803:22d0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:09:78:bd:45:78:a1:61:c8:9b:c0:ba:95:61:2f:04:1d:52:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Validity
Not Before: Mar 1 20:20:00 2025 GMT
Not After : Feb 28 20:25:00 2026 GMT
Subject: CN=354678D652C96C155DBC21A31426E9C108E4DEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:1a:80:19:ea:6d:b9:66:4a:9a:6d:55:43:
02:ac:d7:20:c1:2c:fc:6b:59:63:67:d5:2c:ca:13:
8f:1c:18:ff:fa:42:f2:34:1e:19:32:a8:be:bf:f2:
5e:b0:db:76:45:47:e1:58:7e:ca:4c:68:51:71:ce:
2d:46:e2:d2:32:fb:df:79:8f:f7:41:57:b4:cb:19:
9c:39:cc:36:a2:77:71:84:ab:8f:d8:f9:56:87:25:
6b:7f:0c:01:d9:6f:68:a8:6b:e1:a0:f5:ea:d8:ce:
d9:de:66:e0:44:c5:19:ef:e4:37:68:8e:e8:a4:c2:
94:78:9f:d7:ce:b1:b4:5f:22:b6:01:64:72:4e:b2:
9d:f5:92:ed:03:3b:6f:13:6d:89:3a:e6:fb:ea:35:
27:52:51:38:49:89:5c:fe:89:48:46:cb:a4:e3:01:
4f:3c:be:fa:66:0f:29:d6:07:11:50:d9:03:7e:0f:
a2:4b:63:4b:f9:ed:0c:ee:0e:30:78:d3:b1:15:1d:
03:3f:d6:ae:95:d3:eb:41:79:99:c2:82:18:6c:01:
b3:78:f9:84:02:b1:f8:1b:31:49:7a:aa:c8:9a:8b:
f8:8e:3b:1f:29:fe:a6:d2:c9:94:89:36:c5:02:d2:
11:65:e0:4f:f5:b0:4e:1b:20:88:b0:6b:5b:03:fc:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:78:D6:52:C9:6C:15:5D:BC:21:A3:14:26:E9:C1:08:E4:DE:F3
X509v3 Authority Key Identifier:
keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/323830333a323264303a3a2f33322d3334203d3e20323734303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:22d0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:35:83:da:dd:f4:6e:f5:ee:9e:d9:99:93:99:4d:d0:d1:d7:
aa:98:fe:4b:7d:9e:dc:81:39:f2:66:55:f7:8a:ef:57:7f:f8:
69:e9:5c:44:4a:03:34:a8:f8:ca:77:44:c1:7f:15:a6:12:cd:
83:29:04:4b:98:80:e6:63:3a:4f:53:b9:1f:ed:64:cc:4e:8c:
c7:a7:a1:89:09:2e:15:1a:b4:56:25:30:b2:26:d8:c2:7a:05:
a6:ef:70:c8:13:b6:f6:e7:b5:4c:c7:a0:8e:29:31:6a:fa:b7:
81:83:0d:d6:8f:46:f1:a4:bc:e3:9c:c5:4d:46:72:35:d7:03:
6c:dd:11:9e:b8:44:af:bd:bf:fc:00:b3:e2:87:03:9c:69:62:
1f:05:3f:6e:e8:62:36:bf:81:b6:0f:59:1a:24:ee:a0:c2:8a:
a3:7f:20:0e:53:6f:87:ab:62:56:d8:a9:6c:39:7a:66:6e:1f:
a7:ed:54:fb:bc:23:63:29:54:8c:8e:cd:8f:36:f2:d4:23:71:
61:63:59:ea:6f:24:af:e3:c3:d4:77:bf:a4:2c:1a:25:40:94:
8b:dd:09:81:64:ad:26:1c:0e:9f:02:15:e9:56:2a:f5:06:63:
90:a9:11:cb:5d:ee:10:da:42:9f:5e:1d:14:53:0c:f5:56:ef:
8e:b7:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:53 2025 by rpki-client