Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
File: 323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier: xxbGx2U9416rnpOePWTF0XfDzx8KcENgIr5ckpSJR/c=
Subject key identifier: 23:D8:67:46:25:E6:56:41:84:BF:33:31:F9:04:02:73:FA:8C:12:75
Certificate issuer: /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial: 70B4D9ED767FBEAB81FEE7E2C3E736228A69A663
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
Signing time: Tue 05 Mar 2024 18:12:37 +0000
ROA not before: Tue 05 Mar 2024 18:07:37 +0000
ROA not after: Tue 04 Mar 2025 18:12:37 +0000
asID: 273114
IP address blocks: 2803:790:8000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b4:d9:ed:76:7f:be:ab:81:fe:e7:e2:c3:e7:36:22:8a:69:a6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Validity
Not Before: Mar 5 18:07:37 2024 GMT
Not After : Mar 4 18:12:37 2025 GMT
Subject: CN=23D8674625E6564184BF3331F9040273FA8C1275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:2f:b1:fc:59:d7:a5:c6:9d:5c:15:a7:8c:
32:a5:f4:9c:4e:d3:7e:28:22:b0:54:c9:23:80:8b:
c6:e8:48:66:e0:68:7c:e4:2f:b2:51:26:c5:13:5c:
ee:a1:9b:5a:98:8a:f0:03:4c:23:c1:7a:ba:2e:91:
ee:31:96:58:46:31:5e:60:13:c3:f5:da:30:3d:fb:
1b:53:8a:b9:a7:c8:39:2b:22:4c:d5:76:c7:5c:96:
9b:fa:bf:50:e3:f4:9e:99:0b:1e:10:99:0a:55:71:
27:60:39:1e:4f:df:86:14:a9:14:1f:30:41:30:4c:
53:35:9b:9b:03:b7:c0:f1:95:08:66:d8:47:32:00:
09:62:d7:51:53:dc:a7:97:d2:4b:6a:6e:d4:c2:c2:
7f:64:18:b8:4e:d1:5f:7e:41:3b:d8:2a:05:f4:67:
4f:a0:c4:61:a4:1f:8e:47:b9:16:57:2f:27:e5:f7:
5e:ab:45:4c:10:04:9b:d3:9c:62:5f:fd:73:a5:eb:
d5:56:a5:b6:b0:c2:b3:a8:a5:06:bf:77:91:cb:ee:
02:8f:7a:c0:9b:10:ff:1f:16:61:16:af:f2:f3:e3:
23:b1:92:1e:b6:0b:b5:ce:a9:fc:72:34:e1:0c:62:
a7:62:5d:5f:3d:db:62:26:31:af:97:5c:88:73:4a:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:67:46:25:E6:56:41:84:BF:33:31:F9:04:02:73:FA:8C:12:75
X509v3 Authority Key Identifier:
keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:790:8000::/36
Signature Algorithm: sha256WithRSAEncryption
78:93:bc:4f:7f:ca:37:a0:a0:55:26:ff:28:dc:00:82:52:aa:
dd:b6:7b:95:9f:bb:a1:a1:0f:ce:c5:ef:45:e2:8b:45:e7:3c:
40:d7:18:2b:54:86:4b:8e:74:80:66:63:54:16:d9:50:52:53:
1c:a1:97:87:d4:ef:6f:16:e7:07:09:df:73:57:a7:49:1d:78:
52:69:49:b0:dd:10:67:cf:97:d0:cc:d9:b6:19:71:55:f1:2f:
5a:f6:ad:4c:1f:ac:64:c1:53:d8:e3:3f:a6:61:32:ac:30:4d:
a5:8a:ae:72:98:ae:a1:7e:fc:5c:90:cf:b3:66:86:d3:ee:91:
12:48:9b:03:90:cd:45:3f:03:16:19:5b:53:4e:d1:86:f7:47:
52:57:87:e2:4c:eb:d6:1a:80:fa:ab:2c:c7:b6:7d:db:8c:0b:
30:f7:92:a6:ae:ad:ee:cd:c0:8c:91:22:a0:f7:56:02:2d:4a:
0b:b0:af:c5:dd:53:a6:3f:32:cb:15:dc:b2:7e:50:0f:be:bf:
9a:d4:8d:34:b2:30:20:d7:87:89:d1:69:90:a4:70:5b:e5:b0:
da:65:b7:19:df:3a:50:e3:43:08:c9:b6:6f:50:3d:e0:d0:7d:
8f:32:09:49:13:1b:ed:c5:0a:58:18:b0:4d:87:19:fd:58:df:
42:b7:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:19:04 2025 by rpki-client