Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
File: 323830333a653134303a3a2f33322d3434203d3e20323634363331.roa (raw, json)
Hash identifier: dx7KwiAQJ8UnBRb3MU6ouvJRtci1RWBUWju2g9fSpT4=
Subject key identifier: 3F:77:E6:AA:4D:6E:87:86:B4:17:D9:AF:D2:0A:E7:50:4C:67:9B:E2
Certificate issuer: /CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
Certificate serial: 646DDB546A1AB8FE9C76CFAF34463D0CD4FA94D1
Authority key identifier: D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
Signing time: Tue 04 Feb 2025 19:58:20 +0000
ROA not before: Tue 04 Feb 2025 19:53:20 +0000
ROA not after: Tue 03 Feb 2026 19:58:20 +0000
asID: 264631
IP address blocks: 2803:e140::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6d:db:54:6a:1a:b8:fe:9c:76:cf:af:34:46:3d:0c:d4:fa:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
Validity
Not Before: Feb 4 19:53:20 2025 GMT
Not After : Feb 3 19:58:20 2026 GMT
Subject: CN=3F77E6AA4D6E8786B417D9AFD20AE7504C679BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:62:54:a6:44:7e:8f:8d:28:ad:b4:59:3e:
7a:04:ed:01:f5:bb:72:fc:07:42:2a:65:c6:b2:a5:
c7:02:98:fc:85:6a:37:ca:15:f1:31:87:be:fc:1b:
b7:61:a5:ed:1e:99:64:08:36:35:b5:48:4d:d1:52:
fd:91:2a:aa:7c:53:90:d7:0c:5a:26:a4:65:67:34:
e6:b4:8d:03:0f:d9:ce:56:ba:ae:43:26:be:4e:0e:
43:ca:69:22:a2:b6:f6:41:9f:06:34:91:12:16:e6:
b2:24:cb:93:5a:e6:24:ed:09:90:a1:79:5d:e9:4c:
33:f9:e0:24:92:18:c9:ad:99:2b:2e:b6:21:d3:67:
19:51:06:c5:94:8d:c8:15:10:16:dd:bf:17:9f:0d:
dd:65:3e:ea:38:44:b7:c9:40:2a:b1:39:17:2b:f7:
02:76:ab:1a:f7:e9:14:cf:5e:24:b9:c4:31:98:dc:
d3:40:e8:a4:53:58:71:c0:48:cc:d9:4a:ed:b7:ea:
91:a5:4c:f0:58:24:dc:68:c1:3a:66:f2:e1:e3:7a:
8d:d2:c7:91:73:b6:87:f1:c1:04:d1:c9:22:d7:8b:
37:ec:1c:c3:9f:13:0b:d7:16:1c:3a:09:3d:6c:1d:
4f:22:c5:8c:72:08:61:ac:11:3c:95:87:2b:63:62:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:E6:AA:4D:6E:87:86:B4:17:D9:AF:D2:0A:E7:50:4C:67:9B:E2
X509v3 Authority Key Identifier:
keyid:D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e140::/32
Signature Algorithm: sha256WithRSAEncryption
4b:f9:b8:23:7e:90:42:3c:7e:52:d6:6b:22:76:4e:02:36:90:
2b:1a:2d:0f:64:01:75:2d:87:09:ce:8d:7e:62:e5:b5:a9:b0:
22:31:6b:de:85:bb:7c:c3:7d:4f:ef:d2:fd:bf:01:c2:f3:98:
a4:23:4e:39:59:dd:cc:d5:6e:38:34:ab:70:c2:50:fe:4b:2f:
9f:a9:32:b8:c2:86:38:d8:22:d4:83:d6:e3:d3:b4:10:6b:11:
bc:89:c3:dc:97:08:de:c9:b1:86:6b:7d:fe:ef:48:28:84:56:
ff:ed:91:19:15:03:4a:2c:33:74:2d:cb:46:24:13:9c:fc:bb:
32:08:7b:17:66:46:34:7f:d4:c9:41:ad:80:4b:8f:40:9e:84:
1b:e2:c0:db:d8:41:e2:33:c3:8b:24:68:6c:80:b5:42:ae:3c:
f4:85:8b:4e:55:f2:7a:21:cb:b5:31:7b:01:86:5e:57:a7:5a:
d1:fa:a2:ae:a2:1c:d3:65:c4:70:e8:77:4d:c5:f1:aa:58:45:
21:84:bb:68:64:9d:94:57:a8:e2:f8:f2:42:a9:a2:ed:24:ec:
6a:3b:43:40:92:4e:78:b8:ee:cc:c0:21:3a:ff:3b:48:0d:94:
f3:65:85:1f:37:b8:50:48:b1:e7:84:cc:fe:9a:85:d0:c3:83:
b6:37:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:11 2025 by rpki-client