Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
File: 323830363a3366343a3a2f33322d313238203d3e20323730313836.roa (raw, json)
Hash identifier: o45xKSQvPTXlbFGVf+ks42y30CLtK0wGu0TafNT0t/U=
Subject key identifier: B2:D8:E4:C2:61:D3:62:2C:05:E9:A3:C6:4F:99:DF:C6:1F:27:31:FD
Certificate issuer: /CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Certificate serial: 77A87F6248D6842A8C1D9AFAD47E98A968940034
Authority key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
Signing time: Tue 05 Mar 2024 17:54:23 +0000
ROA not before: Tue 05 Mar 2024 17:49:23 +0000
ROA not after: Tue 04 Mar 2025 17:54:23 +0000
asID: 270186
IP address blocks: 2806:3f4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:7f:62:48:d6:84:2a:8c:1d:9a:fa:d4:7e:98:a9:68:94:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Validity
Not Before: Mar 5 17:49:23 2024 GMT
Not After : Mar 4 17:54:23 2025 GMT
Subject: CN=B2D8E4C261D3622C05E9A3C64F99DFC61F2731FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:39:e3:a8:ca:c7:2a:b0:33:f8:dc:8a:0c:
cb:27:b5:c5:01:69:5b:c5:da:4f:68:1f:29:d7:9f:
c5:0d:1c:43:44:8e:6c:67:ff:68:a5:4a:81:28:96:
4a:55:61:0d:32:40:85:6f:ae:9a:b6:cc:aa:73:e5:
92:b4:8f:ed:6b:9d:94:e4:25:24:28:4a:2a:4d:fc:
cb:db:f4:b5:35:a8:35:49:b9:70:b7:fc:f9:88:68:
d1:93:e3:d3:aa:2a:53:a3:fe:16:01:f5:ec:8d:62:
b0:e7:2a:b5:1e:49:5d:00:41:6a:ca:0e:4c:95:83:
10:c9:68:b2:c6:93:e3:38:88:82:35:06:7f:ad:47:
0d:0d:37:80:f1:b3:e2:40:f2:29:0b:c3:86:05:ac:
52:b0:9c:bf:93:cc:15:14:8a:63:bf:65:ac:95:9d:
a3:e6:8e:33:d4:d0:a1:99:1a:55:cc:fb:1f:3e:87:
87:4d:7e:68:71:6a:22:0a:d4:a2:4d:8c:7d:2d:cb:
d0:65:15:df:c7:6c:e8:6e:c4:83:6b:15:a7:b4:90:
69:bd:ff:a1:35:42:34:e9:1e:7f:88:ad:96:fa:6f:
27:9c:62:cb:61:1a:90:9e:b9:f4:1c:6c:ba:c0:d3:
61:3e:28:a5:7b:49:94:c0:e3:12:48:90:93:53:a4:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:E4:C2:61:D3:62:2C:05:E9:A3:C6:4F:99:DF:C6:1F:27:31:FD
X509v3 Authority Key Identifier:
keyid:ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3f4::/32
Signature Algorithm: sha256WithRSAEncryption
21:e4:d6:59:33:32:6f:1a:13:6e:44:e3:b8:dd:dc:03:02:70:
07:7d:d2:65:a3:34:22:0f:d3:a0:c2:e9:d0:57:84:e0:91:37:
49:e8:b2:52:b3:0e:4d:dc:db:37:0e:ba:1e:22:c0:91:68:c7:
77:5d:91:f5:ff:99:4d:54:89:d2:8d:90:31:ae:2b:9b:75:cf:
22:08:87:8c:06:71:f6:d9:64:a9:d2:9a:49:10:4e:81:97:a5:
bb:0f:65:86:36:58:92:e1:61:a8:78:29:9a:6c:92:f8:41:55:
8a:e4:68:cc:26:08:29:f3:86:d8:9a:92:5a:97:4a:77:e9:f0:
cf:5f:b7:be:25:c8:5b:c9:75:bd:6a:fb:9d:98:d3:b6:9e:9b:
07:19:8e:06:e6:6b:d5:33:8b:c6:03:ff:f3:c0:cc:87:57:f9:
0f:be:85:64:05:be:27:3b:3f:6b:85:08:b4:b1:bf:fb:87:f9:
ca:b8:48:4f:6b:9b:95:10:26:40:15:5d:e4:98:55:7d:a6:6d:
25:48:1e:e4:cc:c8:60:2a:ad:a3:58:6b:9b:77:24:12:e3:fb:
c8:49:fc:e8:8b:e1:78:70:cd:05:6b:5d:c9:13:9b:6c:c4:03:
ab:17:cb:c6:17:1b:f2:0c:f6:a5:00:d5:3e:ac:1e:2a:27:dd:
f2:ed:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:29:40 2025 by rpki-client