Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/323830333a396463303a3a2f33322d3438203d3e20323635373234.roa
File: 323830333a396463303a3a2f33322d3438203d3e20323635373234.roa (raw, json)
Hash identifier: OVlNl2pJf6FocwGuKEKsKEQQZWlyrEB3VgvjOgT4Eto=
Subject key identifier: 38:22:6F:67:FB:FE:48:46:81:39:98:A4:6F:16:C0:F1:21:6D:67:11
Certificate issuer: /CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
Certificate serial: 20098EDE5716D4F8CAC621688E23E7F67CB56EDA
Authority key identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/323830333a396463303a3a2f33322d3438203d3e20323635373234.roa
Signing time: Tue 04 Feb 2025 18:02:34 +0000
ROA not before: Tue 04 Feb 2025 17:57:34 +0000
ROA not after: Tue 03 Feb 2026 18:02:34 +0000
asID: 265724
IP address blocks: 2803:9dc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:09:8e:de:57:16:d4:f8:ca:c6:21:68:8e:23:e7:f6:7c:b5:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
Validity
Not Before: Feb 4 17:57:34 2025 GMT
Not After : Feb 3 18:02:34 2026 GMT
Subject: CN=38226F67FBFE4846813998A46F16C0F1216D6711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:f3:36:58:4c:2b:d2:2b:e8:08:ca:04:e5:
9a:5b:bd:63:28:95:a8:e0:20:2f:3a:4e:15:30:7f:
bc:ac:d6:4f:a9:e5:a4:07:c6:86:ea:61:f4:81:dc:
36:1a:46:aa:ec:46:bf:19:14:1c:52:db:e9:c9:17:
3b:c8:77:12:bb:8a:4d:5f:2b:84:c2:48:d5:6b:35:
c4:f5:57:c3:4d:1c:d6:11:fc:06:79:4e:bd:c2:e9:
c5:54:92:7b:12:8a:4b:b9:92:4d:01:37:1e:1e:e4:
b3:4c:2b:3e:2a:b4:a3:be:e3:68:5b:a1:71:81:f9:
80:7d:8c:e8:dc:ad:92:8e:ef:1a:40:11:6c:64:dd:
d0:7a:47:74:0e:a1:3a:70:c3:eb:6d:4c:24:f0:09:
3b:17:d2:2d:b2:96:7e:3e:5a:ee:23:74:0a:59:9a:
8c:82:05:37:62:75:6a:22:be:20:dd:19:3f:da:9e:
18:25:e4:56:41:c4:c0:4e:67:63:9b:1b:ec:24:e5:
b7:9f:66:e2:88:f8:6c:2a:06:af:39:44:19:f2:ea:
4b:33:74:71:d2:3b:aa:5a:e4:2b:83:2e:24:7a:07:
e1:6a:5c:1a:76:e6:e7:a7:ca:db:38:84:ac:8b:87:
ce:7f:3a:58:c5:79:5c:fb:41:aa:e4:08:3c:68:43:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:6F:67:FB:FE:48:46:81:39:98:A4:6F:16:C0:F1:21:6D:67:11
X509v3 Authority Key Identifier:
keyid:23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/323830333a396463303a3a2f33322d3438203d3e20323635373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9dc0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:00:4b:d8:a3:ea:b7:5e:dd:5b:03:b7:7d:7d:b7:c1:9c:86:
35:fe:88:3c:4d:8c:cc:f6:30:38:e2:e7:8e:32:6f:74:bb:25:
72:34:b3:f2:e3:d8:e6:6c:29:6b:c7:5e:6d:0e:79:8a:a3:ef:
7a:b2:db:52:fa:66:1a:d3:88:75:94:2f:95:38:57:01:d7:90:
b1:7e:f6:22:fa:40:3c:b1:17:46:0d:73:0f:8e:0a:bd:fd:de:
bc:a0:e9:73:21:a4:d1:8d:fe:06:1d:8a:42:4c:83:ec:3e:ee:
c4:cf:10:65:f0:ce:c1:1f:2a:f3:28:ff:09:99:e3:5d:4b:f9:
14:d5:89:e1:60:52:d7:e4:91:aa:9f:dc:51:22:3c:6c:29:13:
ad:c9:cd:0e:0e:b4:11:ff:06:93:47:ed:db:eb:00:d1:de:ef:
4b:f6:70:0e:cc:ca:a5:7b:a6:64:a1:b2:31:d4:d3:63:88:30:
9e:5b:9e:20:93:f9:59:3c:b9:73:3a:b6:9d:f7:4d:0c:5e:d1:
19:82:53:c4:ce:e7:3b:c2:8d:db:39:65:c1:f5:7a:7a:fc:57:
ed:05:0d:31:26:12:f8:4b:18:2b:15:48:a6:62:87:f2:4a:e2:
ad:75:cc:ee:11:a6:72:62:7e:74:5c:99:a8:75:7f:15:88:d7:
92:2c:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:26 2025 by rpki-client