Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa
File: 323830333a373761303a3a2f33322d3332203d3e20323639383736.roa (raw, json)
Hash identifier: E4AAme4QClGvB0pDKhPG2U6t/iOBUn89N8iomQFTeX4=
Subject key identifier: DF:C5:15:8B:C6:A2:02:2C:E1:99:44:24:46:02:A3:68:B0:29:69:21
Certificate issuer: /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Certificate serial: 2DAA16B382572055F09D0882393BBA7409A8039C
Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa
Signing time: Tue 04 Feb 2025 18:39:59 +0000
ROA not before: Tue 04 Feb 2025 18:34:59 +0000
ROA not after: Tue 03 Feb 2026 18:39:59 +0000
asID: 269876
IP address blocks: 2803:77a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:aa:16:b3:82:57:20:55:f0:9d:08:82:39:3b:ba:74:09:a8:03:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Validity
Not Before: Feb 4 18:34:59 2025 GMT
Not After : Feb 3 18:39:59 2026 GMT
Subject: CN=DFC5158BC6A2022CE19944244602A368B0296921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:ec:b6:a9:95:49:c7:7e:a0:10:1b:ec:a9:
64:5e:3f:d1:00:98:de:10:6c:8d:58:a1:2e:83:0d:
f7:50:03:11:af:f9:1f:03:b3:8f:75:71:78:93:b4:
9a:5d:55:d2:64:94:fe:12:6b:b3:b5:a0:42:ea:29:
2b:a8:cb:50:2d:7b:ad:94:cc:26:c4:f7:e5:56:3d:
55:44:48:10:ac:fa:93:9c:49:f8:ac:66:08:83:47:
4a:40:4d:86:25:9b:4c:15:78:ac:32:73:08:ae:7b:
85:41:cd:cc:85:48:de:39:a6:29:f8:ed:55:7b:ef:
da:ed:f8:3b:9d:ee:7f:3b:1d:aa:b5:97:18:95:52:
71:cd:60:8f:20:f1:f3:01:3f:f4:5f:1a:e1:f8:3d:
46:13:58:e9:9b:d7:0d:c7:22:c5:2c:6f:9b:90:7f:
a3:a4:26:03:6b:08:5b:1a:9f:cb:cb:6d:8a:bd:d2:
0e:9d:ee:ee:da:c1:57:ff:a9:b7:af:27:c5:3e:39:
9a:70:03:45:10:9c:4d:50:7c:c4:c0:d4:93:13:30:
68:d7:fa:2b:ba:ad:ca:c2:c4:7c:93:da:06:78:5e:
51:8d:3b:30:67:12:49:0d:4d:96:48:34:13:16:60:
da:b9:0c:d7:37:84:dd:f1:34:c6:ee:18:c3:a1:aa:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:15:8B:C6:A2:02:2C:E1:99:44:24:46:02:A3:68:B0:29:69:21
X509v3 Authority Key Identifier:
keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/323830333a373761303a3a2f33322d3332203d3e20323639383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:77a0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:a6:b5:eb:d2:b3:87:b4:b0:c2:45:17:b6:42:3f:ec:70:f6:
03:69:2b:f4:59:6e:13:9c:2e:b6:d3:a4:64:e2:23:e7:00:f9:
a4:74:a6:69:bd:10:03:92:39:8d:d0:8b:db:2b:c3:6d:60:13:
e6:c2:42:6a:7e:15:64:20:fb:7e:51:dd:0d:10:fb:66:5e:66:
e6:22:47:bf:3c:dd:73:2d:52:7e:8d:36:bd:e1:54:de:b4:88:
4f:2d:8e:ae:06:4f:54:fe:29:4b:f2:42:50:0e:25:33:ff:c6:
ab:46:29:82:72:48:52:7f:f2:2b:d0:e4:a9:df:d9:90:d3:bf:
20:7b:e5:96:45:a1:42:6a:11:6c:4d:a3:0c:7e:70:29:95:cb:
64:89:63:91:df:61:7f:67:89:e4:7a:05:c9:d9:35:0d:72:06:
33:d1:03:9a:ae:cc:5f:55:af:aa:10:c4:87:2c:6f:b2:79:35:
45:7d:6c:f7:55:28:72:95:6f:81:12:2b:66:c3:8b:a4:ed:db:
27:5e:36:d3:91:0e:62:dc:64:2b:85:fb:0b:5b:96:6b:72:27:
50:eb:96:68:0d:6f:1e:b4:e2:01:1a:fc:9c:f3:0c:25:04:52:
50:fc:51:e0:93:50:45:18:76:18:cb:04:1e:84:d1:15:7e:d8:
05:f4:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:44 2025 by rpki-client