Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
File: 323830333a346434303a3a2f33322d3332203d3e20323634363733.roa (raw, json)
Hash identifier: 28oU9J+62QpJEi/D4BIYYjfQHEKaCYe2pUAFLBzTEpM=
Subject key identifier: 22:D4:8F:53:E4:7E:99:2B:19:27:E2:3D:25:DF:8A:D6:A9:B7:2B:F7
Certificate issuer: /CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Certificate serial: 3FD202C1CB86F214AD6589C0E95C85A6BAFDC4F2
Authority key identifier: 39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
Signing time: Tue 05 Mar 2024 18:09:46 +0000
ROA not before: Tue 05 Mar 2024 18:04:46 +0000
ROA not after: Tue 04 Mar 2025 18:09:46 +0000
asID: 264673
IP address blocks: 2803:4d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d2:02:c1:cb:86:f2:14:ad:65:89:c0:e9:5c:85:a6:ba:fd:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Validity
Not Before: Mar 5 18:04:46 2024 GMT
Not After : Mar 4 18:09:46 2025 GMT
Subject: CN=22D48F53E47E992B1927E23D25DF8AD6A9B72BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:7e:16:03:40:e5:bf:67:91:72:70:dd:65:
5e:30:8d:cf:ee:48:8f:fe:8e:03:eb:55:1f:81:7a:
c1:5d:b7:05:01:21:2d:2b:69:f0:0b:65:ce:dd:36:
08:44:be:77:6c:3d:de:c1:8a:85:86:e2:59:09:69:
a3:76:15:0d:2d:c5:3d:a0:2e:f5:13:af:ac:b4:74:
70:4e:8c:8d:ee:26:1f:ed:81:60:9b:f0:7a:2a:b0:
1c:05:12:d2:20:5d:ab:cd:65:89:2c:dd:11:d5:6e:
73:11:e1:6d:1b:30:54:e2:b4:aa:91:cd:5d:97:75:
37:86:7b:02:69:88:e6:44:01:31:fb:cd:05:81:df:
5a:0c:d6:52:5c:d9:c6:ff:5a:3c:68:09:d7:3b:67:
ba:74:a0:a6:1c:e1:00:9d:16:f9:b3:39:a9:0d:93:
60:e0:41:66:b0:cc:9c:d6:3d:c2:00:76:74:84:10:
7f:10:a7:f9:c9:31:fe:98:84:86:53:6e:56:1a:a0:
82:e0:75:8e:00:50:d2:05:a9:80:f3:32:64:9b:40:
8e:58:39:a1:ff:b3:50:be:96:75:80:5a:0e:c9:b2:
23:42:b8:ea:54:17:8d:56:62:04:37:16:97:76:d4:
12:60:ca:67:43:73:4d:05:8d:93:d8:26:ce:30:54:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:8F:53:E4:7E:99:2B:19:27:E2:3D:25:DF:8A:D6:A9:B7:2B:F7
X509v3 Authority Key Identifier:
keyid:39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
a2:b5:db:a2:76:8a:40:58:39:0c:a5:b5:48:5b:cf:46:a3:b8:
72:1c:54:a8:94:db:4d:06:3f:33:fc:a4:91:e7:6e:02:f8:10:
fc:d0:a2:ec:e5:ba:7b:6c:66:e9:02:31:9c:ac:a8:11:13:b5:
c8:dc:b2:b6:5e:12:65:76:fa:1d:df:26:92:be:6c:5e:e0:e2:
48:f9:9a:df:8e:c4:6d:df:a5:32:b9:53:78:9f:6a:9c:fd:26:
75:19:d8:65:52:43:83:53:52:96:8f:df:5c:fd:e5:7d:58:6a:
e8:c2:28:0d:1a:bf:ed:be:5c:3e:d7:d0:ec:cf:2f:92:46:38:
24:7e:24:f4:7c:1e:fc:09:8e:2a:59:0c:d1:c2:a2:04:28:b5:
4e:43:30:b8:8a:c5:1b:74:b5:36:e0:d7:2f:be:82:2b:70:be:
a6:51:8c:cb:c5:72:b6:4e:f3:36:ad:97:b9:24:98:27:3a:b3:
78:68:b0:e0:30:fb:f6:5a:21:cf:c8:d1:e0:9a:e4:e7:7d:09:
b2:8a:ca:2c:97:9a:7d:a7:4a:c6:1c:91:98:b2:45:d5:c1:f5:
1d:bb:04:c6:73:d1:3c:69:d7:e6:d8:9f:5a:06:52:58:00:4a:
b6:dc:b4:7d:1d:0e:6f:9a:52:b1:29:7a:c7:4f:2a:95:10:11:
b5:84:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:23:52 2025 by rpki-client