Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
File: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (raw, json)
Hash identifier: JHP2Uezt1dzGGXxGqnFZBFGPhL5oSUsfaxOIfywP3yc=
Subject key identifier: FE:31:40:F8:C5:57:7E:A0:8D:20:25:75:96:43:4D:5B:96:32:0C:1A
Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial: 52F6F4668EE8B61303E248CEC2B78D87B605E576
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
Signing time: Tue 05 Mar 2024 17:45:01 +0000
ROA not before: Tue 05 Mar 2024 17:40:01 +0000
ROA not after: Tue 04 Mar 2025 17:45:01 +0000
asID: 265794
IP address blocks: 2803:e020::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f6:f4:66:8e:e8:b6:13:03:e2:48:ce:c2:b7:8d:87:b6:05:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Validity
Not Before: Mar 5 17:40:01 2024 GMT
Not After : Mar 4 17:45:01 2025 GMT
Subject: CN=FE3140F8C5577EA08D20257596434D5B96320C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:52:c0:0b:e6:5a:2a:01:7f:78:58:89:57:
78:31:70:43:b1:fa:49:fe:8c:d8:23:ee:e8:4d:b6:
fb:74:51:0f:d5:37:5d:93:6f:e7:21:84:30:9a:fd:
71:bb:72:83:43:35:ce:4f:0c:c1:66:a0:4a:59:57:
b1:62:48:08:88:55:f4:38:fe:37:b7:7d:fc:fd:c8:
55:d8:44:0b:7e:98:b9:98:ee:ac:42:13:80:c5:d9:
69:d5:b0:09:7f:58:ac:5c:b4:cb:24:40:d7:01:6b:
a3:b8:a8:1b:ac:4c:44:29:f1:93:36:f3:9c:47:4a:
21:b6:20:57:6e:94:73:e1:f0:ca:f6:fc:ce:64:1b:
5a:fc:04:fe:c0:18:a0:9e:1f:df:11:3a:be:97:a5:
ab:40:2e:f5:26:37:aa:cb:d5:83:b2:41:77:51:a0:
2b:17:09:5a:ed:3e:a6:58:14:45:d2:ad:5f:ba:dd:
87:47:03:3a:35:09:bf:21:cd:5d:eb:15:58:73:fd:
54:5d:d4:e7:78:a8:51:11:66:dd:8f:0a:87:98:5b:
9d:06:c3:ae:4d:1c:28:e7:52:a4:99:ea:cc:bf:67:
95:e3:fa:7d:2e:16:91:bc:33:70:19:72:e9:c3:04:
55:52:8d:95:1d:85:d3:a0:9c:92:bd:e4:af:54:18:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:40:F8:C5:57:7E:A0:8D:20:25:75:96:43:4D:5B:96:32:0C:1A
X509v3 Authority Key Identifier:
keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e020::/32
Signature Algorithm: sha256WithRSAEncryption
92:a8:2b:f4:c1:11:d5:48:c4:9e:e4:9b:3f:6a:f1:f8:95:02:
ff:8b:f3:65:ce:e2:7b:58:fd:ca:b0:04:95:de:43:80:32:c9:
1f:11:5d:f8:b8:50:bc:f3:fa:66:c1:2e:ee:b2:04:a4:9e:6e:
09:d6:26:4c:f0:18:a1:b3:b8:eb:c3:6a:f3:68:4f:d8:1c:73:
cf:84:9a:79:e9:22:b8:5e:6e:d6:b7:9e:aa:db:49:b7:d0:58:
a5:68:53:ca:1e:bb:e8:61:6c:dd:ee:6f:ef:7f:f5:ec:2c:44:
3d:6b:8f:79:ab:1e:5d:7c:36:b9:bf:be:2e:45:c4:65:b4:10:
2d:4b:39:2c:b0:3d:4a:ef:0c:34:5c:9f:e1:e9:12:36:af:f1:
0c:ef:42:a5:e9:5a:86:18:ad:a1:7c:1c:db:4e:75:82:6c:f1:
2c:3e:fd:e0:41:36:2d:47:10:26:e6:dd:e3:7e:3d:e8:07:8a:
07:bc:12:04:fb:34:3e:18:2b:7f:b3:e9:b0:f2:c7:f9:9b:6d:
b4:a3:f5:54:70:73:bd:f0:c3:9e:77:fb:8a:0e:16:a1:ae:c1:
ed:0d:c0:c2:dc:f5:59:60:a8:b6:fe:40:27:06:8e:6a:cb:e4:
61:70:14:39:d5:3f:dc:c0:33:20:c8:1d:55:58:83:97:29:eb:
0d:87:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:28 2025 by rpki-client