Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
File: 323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier: 8h2uDdgfaZ4MbK3x3qz2dsLdU7kQsgQN4HrefxIXDE4=
Subject key identifier: 81:EB:05:8E:A9:EF:1B:66:EF:6A:E3:41:74:8A:33:66:BC:61:45:3D
Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial: 27F52F9313897DFB7347C5478A2794BFE749124B
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
Signing time: Wed 29 Jan 2025 15:30:00 +0000
ROA not before: Wed 29 Jan 2025 15:25:00 +0000
ROA not after: Wed 28 Jan 2026 15:30:00 +0000
asID: 270088
IP address blocks: 2803:bbe0:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f5:2f:93:13:89:7d:fb:73:47:c5:47:8a:27:94:bf:e7:49:12:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Validity
Not Before: Jan 29 15:25:00 2025 GMT
Not After : Jan 28 15:30:00 2026 GMT
Subject: CN=81EB058EA9EF1B66EF6AE341748A3366BC61453D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:fa:48:70:57:2d:05:fd:4f:6d:16:f6:25:
42:d2:81:3e:5f:96:5a:60:60:6c:de:9b:94:58:2f:
5b:5b:60:7b:6c:1d:ff:9f:dc:a8:ae:32:46:72:87:
67:81:1c:5b:ef:9f:cb:4d:7f:30:2f:25:20:cc:68:
e1:d9:b6:b7:6e:eb:96:0f:41:a1:0a:15:69:33:87:
04:fa:a9:f9:06:8b:36:a2:f8:4b:fc:bd:3c:ee:68:
ec:92:6f:bb:98:c9:ab:d7:87:2d:be:23:ce:b8:15:
56:03:11:d5:36:1a:94:e2:aa:58:85:82:78:0f:fb:
0e:b3:49:7b:4d:df:86:1b:81:42:4c:4a:33:f4:5c:
ac:cb:73:54:f8:30:43:73:49:c2:49:fa:47:59:4d:
87:12:c0:70:09:d2:0e:28:ad:35:68:6b:ad:49:ac:
2a:d2:29:e4:1f:df:b3:67:7e:94:93:bc:61:30:34:
3e:33:68:68:54:cc:8f:28:e7:aa:f5:2e:ac:0e:ac:
06:c0:3a:e8:a8:40:4f:fb:07:00:5a:3f:43:d9:0f:
60:e4:40:28:d3:cb:94:bc:51:78:27:04:94:20:9b:
95:ba:46:da:71:14:8b:90:41:7c:30:bc:86:a0:36:
9d:a8:73:a7:c5:c1:17:3d:41:92:fd:14:8d:09:0e:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:05:8E:A9:EF:1B:66:EF:6A:E3:41:74:8A:33:66:BC:61:45:3D
X509v3 Authority Key Identifier:
keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:bbe0:300::/40
Signature Algorithm: sha256WithRSAEncryption
6d:f4:29:10:3d:7b:d5:af:c5:74:ce:21:ae:6f:fe:ca:9e:1b:
45:fe:3b:fa:9e:18:a2:50:97:a8:e6:92:5d:52:e4:5e:3a:65:
bc:a2:cb:77:20:5c:8b:5a:4a:42:da:4d:4f:36:cd:73:11:ee:
f1:2d:c0:fd:c7:10:e5:a6:8d:5f:7b:0a:54:a3:57:39:0a:b1:
f8:c5:61:b3:b2:55:20:9c:b3:6f:d5:dc:fe:d7:ac:e5:8f:74:
ff:20:83:53:4e:dd:5d:62:b2:7c:cc:d7:dd:99:d9:86:e0:e8:
f3:ab:84:24:15:4b:43:48:49:5b:93:87:bc:ee:43:08:e9:be:
e7:99:f2:13:9c:ae:2b:c7:95:1f:65:a3:40:1c:07:17:00:61:
60:c2:ae:c3:33:e7:f7:f7:48:5f:d5:5e:83:ff:5f:ee:88:23:
f3:8f:e7:f3:c5:cd:e6:ca:14:ea:9a:0b:ab:3d:ad:08:83:63:
52:91:36:9c:6f:cf:d8:2d:07:e7:1f:f2:62:de:ec:e2:87:61:
6f:f7:ce:e1:e0:7c:24:3f:43:31:50:80:64:19:80:53:b5:36:
ee:75:0f:85:bf:c4:a7:af:19:35:e9:e2:7f:9f:58:f2:a8:b8:
22:43:37:6b:e8:8f:a1:75:12:16:38:1c:23:fb:fe:ff:6e:15:
4f:97:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:21:40 2025 by rpki-client