Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
File: 323830303a613032303a3a2f33322d3332203d3e203237383931.roa (raw, json)
Hash identifier: aTEpdPYg1Vyt23ZS7zKUmY3QI9Ps7OTOx37CHeH7H58=
Subject key identifier: 98:8E:24:69:61:86:63:CD:F6:DE:F1:1E:E3:C9:17:23:4C:05:ED:D5
Certificate issuer: /CN=3C181C58C943704D75823C9900C54516564C54BF
Certificate serial: 2F7DF60736B5DCA86D8EE2607CDB3BDF93D55A13
Authority key identifier: 3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
Signing time: Tue 05 Mar 2024 17:49:36 +0000
ROA not before: Tue 05 Mar 2024 17:44:36 +0000
ROA not after: Tue 04 Mar 2025 17:49:36 +0000
asID: 27891
IP address blocks: 2800:a020::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:f6:07:36:b5:dc:a8:6d:8e:e2:60:7c:db:3b:df:93:d5:5a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C181C58C943704D75823C9900C54516564C54BF
Validity
Not Before: Mar 5 17:44:36 2024 GMT
Not After : Mar 4 17:49:36 2025 GMT
Subject: CN=988E2469618663CDF6DEF11EE3C917234C05EDD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:5d:b8:fa:79:6e:0c:ac:86:89:af:1e:c2:
c0:ab:aa:ab:09:5d:3b:3d:ab:e4:ef:d9:11:ae:e4:
08:4c:a4:68:06:9a:ea:c2:2e:36:7a:65:52:9e:f5:
75:47:a4:c8:fb:cf:77:3e:fd:77:b3:90:17:95:2c:
a5:07:02:ec:00:ce:f1:3f:24:ed:75:08:d9:02:61:
a3:2e:39:46:84:fc:fa:57:47:a1:5c:1a:e8:ea:6b:
43:34:a8:db:f2:bd:d7:da:4d:ab:c4:09:d8:28:aa:
79:e5:f4:4a:1e:ad:ef:26:d3:59:f1:64:e3:f2:d3:
20:02:14:a8:66:34:de:bd:80:e0:53:fe:31:d4:da:
ef:59:09:35:3a:82:42:a9:f1:7d:77:5a:b7:44:9e:
bb:b0:27:cd:ec:2c:93:7b:aa:93:14:6f:eb:39:60:
af:a0:5e:64:73:1a:a2:ef:8c:7d:d8:c5:e9:a9:76:
83:5e:3a:f9:f6:ff:f3:8b:76:fa:9f:98:30:97:8a:
ce:df:19:c3:06:20:6e:68:d9:be:65:68:e7:b7:f3:
bf:4a:c3:a7:cb:af:d0:db:7e:fd:73:ff:55:70:0b:
b0:2e:2a:45:44:7a:9d:71:c2:fe:04:05:48:1d:9c:
fa:6b:9a:d5:b7:cc:ed:5a:b1:57:5c:0d:e5:5f:9a:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:24:69:61:86:63:CD:F6:DE:F1:1E:E3:C9:17:23:4C:05:ED:D5
X509v3 Authority Key Identifier:
keyid:3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:a020::/32
Signature Algorithm: sha256WithRSAEncryption
a1:87:04:e1:76:ff:ab:d7:ed:8e:53:ad:aa:bf:e6:bb:3d:90:
0d:da:d5:78:fd:61:06:17:1f:a5:91:d0:57:09:64:50:d4:5e:
6b:40:0a:73:79:1a:7f:ec:be:e6:9d:07:6b:d2:d5:17:a8:23:
48:a1:1e:3f:85:3b:ad:34:2c:55:d1:3d:65:70:82:16:5f:19:
09:d7:3a:d2:27:8d:0c:79:96:8b:8d:79:0c:26:56:76:d6:9c:
87:d3:54:e1:59:08:09:62:ab:55:d9:df:7e:93:b0:c9:98:8c:
f4:ba:3f:59:a6:a4:d5:9b:49:ad:6a:49:b4:4a:33:65:cd:5e:
ba:c6:41:dd:df:65:5c:cf:fb:eb:d2:86:82:dd:b7:f3:ee:83:
55:fd:74:c1:4c:d5:69:c6:4d:be:a8:a1:2c:6b:0a:c4:9e:27:
4e:75:c1:46:0c:06:39:b7:8a:72:13:80:79:ea:1e:3f:5a:d8:
6c:c4:83:6c:68:1e:31:dd:f8:9d:72:af:7a:b2:f2:43:07:3a:
d9:d5:2c:d0:84:cf:3e:6a:8e:56:b6:66:8f:a6:6a:d4:73:d3:
08:51:c8:29:cc:76:84:db:35:f2:93:89:e6:cd:76:aa:1b:5e:
85:1f:0c:6e:33:29:00:c6:91:25:05:a2:b1:c8:bb:7a:73:66:
12:f0:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:17:48 2025 by rpki-client