Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/323830333a383536303a3a2f33322d3332203d3e20323639373632.roa
File: 323830333a383536303a3a2f33322d3332203d3e20323639373632.roa (raw, json)
Hash identifier: xgdu2VKXGWT3zuazQQ3ZGRAu8EfpPw4CmBmO186ZJdA=
Subject key identifier: 27:4B:2E:AC:9D:61:34:5F:D2:1F:85:10:40:BA:CA:3B:07:C6:48:0D
Certificate issuer: /CN=8422A5C9039083170A21D8F8523768E40CD48430
Certificate serial: 3B38396E15D0AAF5A6C4996ACBA7155FE3B73429
Authority key identifier: 84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/323830333a383536303a3a2f33322d3332203d3e20323639373632.roa
Signing time: Tue 04 Feb 2025 18:33:57 +0000
ROA not before: Tue 04 Feb 2025 18:28:57 +0000
ROA not after: Tue 03 Feb 2026 18:33:57 +0000
asID: 269762
IP address blocks: 2803:8560::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:38:39:6e:15:d0:aa:f5:a6:c4:99:6a:cb:a7:15:5f:e3:b7:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422A5C9039083170A21D8F8523768E40CD48430
Validity
Not Before: Feb 4 18:28:57 2025 GMT
Not After : Feb 3 18:33:57 2026 GMT
Subject: CN=274B2EAC9D61345FD21F851040BACA3B07C6480D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:b7:9b:19:af:09:bb:7b:82:61:80:5b:9c:
65:4e:ed:f7:e0:47:32:2d:cf:21:05:f3:02:88:71:
55:16:d7:06:51:44:99:14:46:94:e9:3f:6e:fd:f4:
18:bc:c5:d4:b6:98:fe:d6:78:87:67:6d:0f:29:1b:
19:7d:76:dc:5f:1a:4b:49:27:b5:93:78:57:b9:06:
d3:2c:a7:0c:71:45:5a:23:16:5b:8c:cb:20:29:67:
92:45:92:ee:08:9f:dd:5d:63:c8:60:e3:eb:f5:b9:
d7:8b:77:64:a9:0a:c7:c7:6a:85:e1:db:0d:95:a0:
05:97:7f:cc:d2:87:b6:27:29:33:e4:2e:a5:77:9e:
57:81:cc:d0:a8:2e:7a:e5:60:76:5f:c7:43:5d:57:
45:52:ae:74:8b:90:d9:e7:cb:e0:af:4c:bc:22:32:
29:d7:a8:d6:09:a8:6b:10:1b:11:76:12:a3:2b:1c:
97:d1:7b:42:33:3b:76:18:e7:d9:7c:a7:a4:68:29:
01:45:b6:9f:77:97:a1:f4:88:8d:92:23:fb:fc:c4:
3b:7c:93:95:e8:32:ae:8c:15:f8:4c:24:f2:ab:45:
89:77:e8:37:bc:d1:93:04:8a:1c:d9:d3:1c:d4:00:
87:b4:12:79:b7:43:a3:41:90:49:ae:f9:83:05:9f:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:2E:AC:9D:61:34:5F:D2:1F:85:10:40:BA:CA:3B:07:C6:48:0D
X509v3 Authority Key Identifier:
keyid:84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/323830333a383536303a3a2f33322d3332203d3e20323639373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8560::/32
Signature Algorithm: sha256WithRSAEncryption
aa:4a:34:74:a4:50:2b:f8:6a:a9:cc:b9:e9:89:d3:92:32:96:
d3:b8:3b:0f:15:31:13:76:e0:1f:28:ec:99:22:ba:91:54:61:
2a:ad:25:6b:61:8b:e9:11:b9:fc:26:1b:29:da:13:94:33:d5:
e2:92:60:2d:13:72:5a:bb:f7:4a:a1:42:c7:61:13:47:f8:69:
c7:9e:10:4d:83:7a:57:86:47:a8:28:4e:02:4a:9f:5d:f3:55:
00:c8:a2:a1:48:37:e2:cf:23:c6:f1:83:e1:3a:1d:e9:7b:43:
d1:e9:bf:1e:d9:c8:2d:4c:76:29:16:78:0b:df:25:8e:2f:f8:
c9:de:e9:66:f3:29:36:cc:cc:82:e8:35:38:ce:ac:0d:0b:20:
4f:1c:9a:40:cc:ca:f9:a2:ff:f4:f9:ca:95:1e:f8:77:00:46:
bd:10:d9:66:c2:18:2c:74:d7:98:26:29:2e:6c:ee:9e:62:f8:
5e:04:6d:8d:1c:3f:e5:82:78:c5:85:28:85:99:35:f5:fc:3d:
c7:4a:cb:fd:eb:79:70:4d:10:78:2a:a8:72:c5:cd:fc:92:de:
e5:01:78:6a:c5:4a:80:ed:6c:1b:63:bd:9d:3d:83:5e:4f:77:
8e:6d:f2:3b:fb:ad:1b:df:47:cd:df:70:32:23:b8:de:0b:78:
c0:48:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:05:46 2025 by rpki-client