Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa
File: 323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (raw, json)
Hash identifier: pJO47Da0HMNPXA0Qd0sOzC5x/TnHt/7Ud83cFN0Clpk=
Subject key identifier: 2F:6F:D2:DA:B8:03:79:D5:48:A2:E7:EC:9E:6A:E4:F2:D9:7F:EE:99
Certificate issuer: /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial: 14827F9B416728C6B07BE7B43333B79917810C46
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa
Signing time: Tue 05 Mar 2024 17:50:43 +0000
ROA not before: Tue 05 Mar 2024 17:45:43 +0000
ROA not after: Tue 04 Mar 2025 17:50:43 +0000
asID: 272859
IP address blocks: 2803:6290::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:82:7f:9b:41:67:28:c6:b0:7b:e7:b4:33:33:b7:99:17:81:0c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Validity
Not Before: Mar 5 17:45:43 2024 GMT
Not After : Mar 4 17:50:43 2025 GMT
Subject: CN=2F6FD2DAB80379D548A2E7EC9E6AE4F2D97FEE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:2b:38:84:f5:a5:0b:c0:a9:08:bf:a1:fc:
52:e0:74:69:a8:ad:d7:4e:93:5d:e6:e9:37:35:f7:
ff:3f:04:06:e8:50:72:ee:51:b3:1c:bf:aa:e5:99:
65:5c:3d:29:ed:cb:25:e2:f3:a3:32:30:0a:8d:57:
ee:19:7c:f7:c1:7e:73:09:9c:57:91:ab:31:d9:94:
4d:29:f7:83:be:be:2c:c0:f6:98:bc:5b:56:5c:b5:
1f:6e:0e:e0:0c:67:98:93:ad:17:cb:03:cd:3f:ae:
f6:9f:09:ac:2f:3f:ef:4c:f6:dd:12:2d:fd:3a:50:
94:0e:3c:22:0a:2a:cf:de:38:e4:5f:7f:39:c1:96:
b6:a2:f2:21:5d:fe:20:80:5c:49:ae:82:3c:53:65:
9e:57:64:f6:f3:c1:fc:76:0d:80:b8:6a:36:fc:3c:
00:d4:8a:5e:8b:bf:b8:48:74:3e:b9:32:9e:41:b5:
8b:35:6b:30:00:fc:38:28:ef:27:09:f6:bf:44:0f:
0c:d5:12:33:27:ad:8a:dc:f2:d7:1f:ac:f3:cd:ca:
89:9c:cd:09:fa:63:31:b8:db:25:83:ba:9e:01:29:
0a:26:c6:cb:d6:48:e6:b8:7e:89:3c:66:b5:ac:00:
66:53:20:33:d3:07:99:1d:7c:94:76:23:85:e3:08:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:D2:DA:B8:03:79:D5:48:A2:E7:EC:9E:6A:E4:F2:D9:7F:EE:99
X509v3 Authority Key Identifier:
keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6290::/32
Signature Algorithm: sha256WithRSAEncryption
1e:75:28:52:1e:3e:91:77:06:46:59:ed:bd:90:e9:73:ed:ae:
77:c5:d7:31:ed:dc:71:5f:d8:c7:6f:86:76:f0:bf:e3:a6:a6:
7d:87:9f:c0:77:41:03:ad:01:e6:27:e4:7c:d8:a7:ab:80:e7:
11:e8:de:ee:dc:16:41:9f:50:ef:fd:ae:98:22:dd:47:9d:a0:
d7:fc:16:b4:55:44:2a:38:2f:59:31:01:45:f5:00:95:29:e8:
87:7d:9a:7c:63:62:a2:6b:64:4b:a1:40:8e:a3:e8:19:75:a8:
a2:b4:e4:2c:da:90:6b:8f:72:d0:81:53:c6:40:6c:f2:bf:e4:
e0:b5:b6:05:55:36:45:3e:9f:b7:39:4a:54:07:38:b0:73:ea:
6c:99:1e:69:be:9e:3d:6b:80:e7:d6:26:71:6c:39:26:fa:a5:
37:55:a6:49:a4:1f:f3:30:c3:9e:a4:86:bc:9f:99:e1:f6:68:
ae:8e:12:18:33:5d:0e:e8:0f:72:93:a2:c8:69:69:e2:c0:55:
91:07:3b:66:35:98:3b:44:9e:89:9a:94:ec:9a:e4:35:e4:06:
63:92:ba:1e:b6:cf:aa:08:3b:0d:19:01:df:7a:6b:6e:06:3f:
9d:5c:d9:0e:f7:a4:b0:51:8a:88:7c:37:de:02:1b:47:f8:8f:
8d:1c:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:30 2025 by rpki-client