Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa
File: 323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa (raw, json)
Hash identifier: 4LLNECX1aJ+tqtgSLp1gxTMXVWGR/MlH23ABz7xu1b8=
Subject key identifier: 89:39:77:B8:AC:76:AE:A0:9E:5C:07:CA:07:2D:58:A3:8C:F1:D7:C7
Certificate issuer: /CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Certificate serial: 6603FD29A04E3BCB9C77CAA6449251187C8CA4BB
Authority key identifier: 84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa
Signing time: Tue 04 Feb 2025 17:59:10 +0000
ROA not before: Tue 04 Feb 2025 17:54:10 +0000
ROA not after: Tue 03 Feb 2026 17:59:10 +0000
asID: 273011
IP address blocks: 2803:390:ccc0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:03:fd:29:a0:4e:3b:cb:9c:77:ca:a6:44:92:51:18:7c:8c:a4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Validity
Not Before: Feb 4 17:54:10 2025 GMT
Not After : Feb 3 17:59:10 2026 GMT
Subject: CN=893977B8AC76AEA09E5C07CA072D58A38CF1D7C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:ab:97:ce:85:c4:13:a8:81:bd:71:01:00:
a9:f5:35:5e:0d:a7:99:f6:84:aa:5b:ac:70:4a:50:
89:a5:1d:5a:c2:93:55:b6:e5:89:4c:2a:09:9c:0d:
fb:be:cb:7b:ac:57:65:29:bf:b6:88:36:e9:ef:8f:
e1:08:64:4c:1f:09:ab:6a:17:7e:c3:03:c3:ba:34:
d6:ea:0d:bc:32:e7:0c:be:36:14:86:a7:26:c7:7c:
96:60:a8:e9:bf:75:1d:f5:56:0b:e5:de:ca:fa:3f:
b8:6d:52:d7:08:f5:10:54:e1:de:fb:cb:85:57:20:
36:d2:99:23:bb:45:fe:ac:4d:e0:9e:c7:75:b2:4d:
95:30:25:a2:98:ed:d5:59:16:59:76:c8:8d:ec:f1:
42:07:6f:bc:18:a8:8c:30:62:9a:7c:1d:c5:af:6e:
fb:8a:7b:9c:45:4f:21:89:06:56:ec:ec:0b:6f:b0:
d0:bf:9f:72:c6:ed:23:5c:b7:6b:30:1d:4b:1b:6b:
37:d9:5b:7c:12:34:a2:5f:54:c5:eb:04:04:28:df:
20:04:f0:a6:6f:53:75:99:bf:ca:fa:e0:53:13:c2:
d6:c5:98:dd:9d:10:ab:9a:df:a6:f6:76:76:43:3f:
92:a0:92:81:64:13:c2:c4:43:85:1e:d8:18:6b:4b:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:77:B8:AC:76:AE:A0:9E:5C:07:CA:07:2D:58:A3:8C:F1:D7:C7
X509v3 Authority Key Identifier:
keyid:84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:390:ccc0::/44
Signature Algorithm: sha256WithRSAEncryption
12:b2:f5:76:fd:6e:58:67:b5:bf:9e:78:29:f2:27:4e:68:d8:
f4:50:29:ba:96:05:69:47:75:44:8f:23:bb:f3:df:11:be:1a:
64:fa:57:57:35:f1:04:b7:8b:21:49:62:ed:15:e7:11:05:77:
d4:07:f1:61:3d:eb:8f:8e:0a:55:64:fd:67:01:03:18:77:51:
4b:10:b3:ba:1f:76:06:89:13:e5:10:47:3d:bd:80:e4:48:99:
45:de:8b:cb:3e:38:74:09:c9:6e:5f:f1:5a:8f:e5:1d:51:af:
98:79:15:3b:c4:8c:23:42:6b:3a:af:70:25:42:87:2d:db:b9:
94:53:a2:41:0a:2d:a3:4a:9d:0e:46:98:5c:0c:eb:08:3b:55:
f5:aa:31:b7:04:5a:b7:41:e3:4a:f1:f9:2e:8c:28:b1:df:49:
05:48:fc:c3:93:91:e6:80:e3:aa:43:1d:0e:f0:81:78:d2:24:
2d:86:db:40:be:da:f9:bf:6b:78:68:94:d9:8f:3d:50:ae:bc:
a7:13:8c:c7:53:36:ea:b2:d2:44:cf:23:38:7b:6d:59:09:e5:
6b:29:d7:57:b6:ec:04:71:c1:b2:d1:35:8b:24:a5:01:c5:06:
9c:50:c8:84:41:0a:ee:00:6b:95:8e:98:ba:94:bc:ff:52:75:
ad:dd:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:57 2025 by rpki-client