Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
File: 323830333a633530303a3a2f33322d3332203d3e20323633323330.roa (raw, json)
Hash identifier: OvAvnFqNYTWMNM/wPBh09HyHTbDEcE71YV9qaPskwZM=
Subject key identifier: 81:74:99:E5:F4:2B:D0:7D:BC:B5:00:BA:FA:BE:0F:D3:64:D9:EF:50
Certificate issuer: /CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Certificate serial: 2B370A09A75BBFE504201B8B90E0583306A9DDD7
Authority key identifier: 4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
Signing time: Tue 05 Mar 2024 18:08:10 +0000
ROA not before: Tue 05 Mar 2024 18:03:10 +0000
ROA not after: Tue 04 Mar 2025 18:08:10 +0000
asID: 263230
IP address blocks: 2803:c500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:37:0a:09:a7:5b:bf:e5:04:20:1b:8b:90:e0:58:33:06:a9:dd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Validity
Not Before: Mar 5 18:03:10 2024 GMT
Not After : Mar 4 18:08:10 2025 GMT
Subject: CN=817499E5F42BD07DBCB500BAFABE0FD364D9EF50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:35:4c:3b:8d:65:98:88:de:96:dd:b3:0d:
bd:a9:03:6b:cb:49:d1:09:20:64:00:0b:71:d0:f9:
c9:eb:c4:e1:77:47:75:8e:dc:f3:db:bf:64:59:c2:
73:d4:a5:53:10:65:b9:d9:83:e1:e3:6c:91:4b:e1:
84:b9:dc:a3:ec:00:0d:d6:7c:84:41:6c:c5:a3:2f:
82:e4:d3:f3:e7:46:1c:ed:59:5e:be:b6:f8:e5:cc:
5c:d9:58:f5:75:ba:fa:61:a1:2c:32:3c:f3:13:24:
78:11:c1:09:7a:0b:09:6e:28:4b:e6:20:9f:19:43:
6f:49:93:8f:f5:50:ed:88:8c:7e:95:09:f7:5c:e3:
14:62:d4:b4:e1:df:de:a5:83:2b:7a:09:6c:d4:a6:
33:31:c9:86:a3:fe:e1:50:f8:d2:12:aa:c2:54:86:
8d:fc:d5:6a:d9:5d:45:c5:29:ea:fc:f0:7f:37:32:
8a:d8:72:76:a8:cf:db:a7:f2:e1:36:23:f9:57:cc:
ac:7d:71:72:62:7a:eb:48:7c:e0:51:52:a8:ef:f4:
8d:b9:73:a5:70:51:ff:67:2b:7e:14:d1:4d:32:c9:
72:e8:51:79:d1:9a:32:c9:a6:57:f2:bd:cf:d8:76:
68:e7:9e:e4:42:1d:b2:83:b0:30:cd:29:78:c9:4b:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:99:E5:F4:2B:D0:7D:BC:B5:00:BA:FA:BE:0F:D3:64:D9:EF:50
X509v3 Authority Key Identifier:
keyid:4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c500::/32
Signature Algorithm: sha256WithRSAEncryption
14:85:d2:28:e8:e2:9d:6e:07:91:ed:a1:f0:eb:2e:0c:5a:26:
c0:b1:1a:ab:cb:ff:87:36:a5:92:d4:85:d6:77:7e:e8:cf:93:
30:a1:90:a0:72:9d:a3:a4:df:3b:93:02:7c:dc:bb:0d:84:62:
08:25:44:66:2d:2b:4c:56:be:52:5b:04:bf:d4:69:6b:45:12:
08:cd:8e:22:d9:3a:99:53:14:6d:19:c3:23:89:58:17:89:fe:
f9:f8:c5:db:d2:25:6f:c9:de:51:c4:f7:cc:9e:77:ed:a9:23:
3e:f1:ad:49:88:b3:f1:ff:15:69:19:e2:c4:e9:fb:91:84:22:
bb:9b:bf:31:e0:0d:cd:f3:b2:80:b4:b4:aa:15:6e:2d:13:ba:
3e:5e:b2:39:ee:57:09:b1:36:91:28:f5:24:0c:46:73:bb:2f:
36:3a:e0:dc:4b:33:b6:24:dc:e1:2c:76:0a:12:dc:b8:db:5b:
ad:f4:91:b3:4d:96:64:2c:af:12:41:e6:d9:85:70:e2:b0:69:
05:ef:3d:de:bd:39:1e:47:67:64:00:35:54:f6:68:2c:b3:ae:
e8:79:b1:51:55:e8:f3:eb:02:eb:4f:52:5f:cc:9d:74:b0:dc:
cf:4d:e7:cf:d6:72:67:19:de:53:1f:dc:71:ef:36:a3:fe:4b:
74:22:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:49:19 2025 by rpki-client