Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
File: 323830333a343663303a3a2f33322d3332203d3e20323635363537.roa (raw, json)
Hash identifier: dGfs7yMvw/bdb3ypOnjmBtzVh4bjroeCWvgJXoQUL3g=
Subject key identifier: CB:DD:E2:BD:3D:95:0C:8D:EE:B9:ED:AA:3B:0F:45:D9:E6:8A:5E:EC
Certificate issuer: /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial: 421BDB4BA46BDA59EC7B74F62E3D804DE529210B
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
Signing time: Tue 05 Mar 2024 18:22:46 +0000
ROA not before: Tue 05 Mar 2024 18:17:46 +0000
ROA not after: Tue 04 Mar 2025 18:22:46 +0000
asID: 265657
IP address blocks: 2803:46c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1b:db:4b:a4:6b:da:59:ec:7b:74:f6:2e:3d:80:4d:e5:29:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Validity
Not Before: Mar 5 18:17:46 2024 GMT
Not After : Mar 4 18:22:46 2025 GMT
Subject: CN=CBDDE2BD3D950C8DEEB9EDAA3B0F45D9E68A5EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:74:f3:13:95:f3:4c:83:fb:c8:2a:c8:c0:
d4:85:c0:45:e8:7f:17:80:c7:14:c5:8f:4b:f9:82:
dc:01:1c:74:69:04:02:1c:8f:73:6d:fd:a8:64:e3:
af:60:71:7c:e9:dc:10:79:e0:10:3e:f6:f2:41:88:
03:f1:32:83:45:25:a6:6e:1e:f2:cb:f3:a1:cb:be:
55:02:c6:c4:45:04:d9:3e:13:90:92:2a:8c:21:8c:
0a:e6:44:1b:10:11:1f:78:cf:c7:14:08:02:75:64:
f9:dd:58:c7:b8:44:57:c3:9f:58:b8:07:65:94:47:
ed:32:93:18:07:a7:8d:0c:f4:c0:c0:87:0f:b8:ea:
92:8a:8f:e2:ae:c9:bf:a6:d1:01:d7:2b:91:38:d2:
1e:a2:12:16:a5:4b:8f:30:a6:9b:f1:84:0f:99:9b:
7d:95:24:b8:4a:01:07:76:fb:2e:67:eb:c7:de:05:
51:bf:3a:29:af:65:60:6f:08:9c:95:c0:99:c6:ed:
bb:41:a8:f3:cb:80:4a:fb:2e:a5:33:a7:6f:df:2b:
1a:85:64:c2:77:bd:4c:93:54:59:88:e3:b5:c6:e6:
ce:4e:37:1c:15:6a:cd:c7:03:8d:86:93:d4:5f:55:
0a:91:0f:8b:5c:86:0e:c1:75:06:e5:b1:81:74:da:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:E2:BD:3D:95:0C:8D:EE:B9:ED:AA:3B:0F:45:D9:E6:8A:5E:EC
X509v3 Authority Key Identifier:
keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:46c0::/32
Signature Algorithm: sha256WithRSAEncryption
36:ee:1d:2a:d0:0b:94:d1:59:f5:e8:94:e2:0a:a1:74:b8:7d:
af:e4:78:d1:68:18:81:a6:f3:bc:0b:da:1a:d2:0f:ca:aa:c2:
4a:5b:8b:7a:7a:fe:90:11:6f:f6:f7:90:37:dc:99:d1:8f:06:
86:ab:da:a9:67:06:77:02:f1:05:e5:4d:ba:8b:ea:12:d7:ae:
1f:9e:2d:e0:db:c3:c5:ba:3b:d7:e8:7f:a0:30:b3:50:99:b7:
f5:ea:0f:88:f9:fa:b0:bf:6d:db:39:e3:ba:b1:e0:50:ce:64:
6d:05:df:10:5d:63:2b:1f:21:ba:8e:64:f8:41:05:54:98:25:
08:26:fa:59:f1:69:9f:5c:ad:8a:14:b8:c4:47:01:9d:dd:c2:
38:cb:a1:53:e2:83:f2:34:c7:ba:dc:fc:cb:62:9f:2a:e8:ac:
a7:bf:72:d9:3a:91:4a:5d:3b:89:03:1f:5b:c4:67:b0:ce:c2:
6a:ab:5a:cc:ff:65:57:f9:a2:43:df:34:f4:b1:a0:5a:94:a6:
8a:2e:2b:9b:25:d9:2a:e7:a0:45:81:23:de:db:84:70:5f:29:
95:c9:4f:3a:c6:f3:06:e3:19:88:62:33:ea:00:36:76:33:73:
c9:13:93:0c:c1:22:db:c6:ea:ec:34:3b:6b:89:24:d4:fa:6e:
f5:f7:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:19:59 2025 by rpki-client