Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
File: 323830333a613431303a3a2f33322d3438203d3e203634313134.roa (raw, json)
Hash identifier: wUH/nQgJ4RCIJGBr5QzWN9bv6cmXEhYRkxM8RmVHm3I=
Subject key identifier: D7:EA:10:64:1A:FD:E1:48:81:FE:7B:9C:6C:AF:68:FF:AC:89:E0:45
Certificate issuer: /CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
Certificate serial: 043B347044A38CB3054C2368127AC88A5AB2927F
Authority key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
Signing time: Tue 04 Feb 2025 18:10:56 +0000
ROA not before: Tue 04 Feb 2025 18:05:56 +0000
ROA not after: Tue 03 Feb 2026 18:10:56 +0000
asID: 64114
IP address blocks: 2803:a410::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3b:34:70:44:a3:8c:b3:05:4c:23:68:12:7a:c8:8a:5a:b2:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
Validity
Not Before: Feb 4 18:05:56 2025 GMT
Not After : Feb 3 18:10:56 2026 GMT
Subject: CN=D7EA10641AFDE14881FE7B9C6CAF68FFAC89E045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:ae:a9:a8:d3:19:b1:2c:e2:69:32:53:80:
82:43:b4:90:f8:89:9e:6f:9a:3a:d7:55:c2:a0:52:
7b:dd:f0:01:fa:5f:44:87:38:39:d4:02:91:0d:92:
75:4c:76:07:de:72:1e:97:e5:42:d1:df:19:57:df:
6a:8c:4c:f6:4b:b4:75:5a:41:44:e1:b5:b4:15:86:
26:47:de:de:af:d4:36:44:86:7a:87:b7:e0:be:a4:
d3:93:eb:d1:e3:1f:a6:ba:49:b6:ea:1c:a7:d8:cc:
f7:6e:58:7f:17:1d:79:aa:46:a4:8e:c8:ff:1a:cf:
22:1d:3c:63:d1:e1:6f:65:d5:30:be:35:65:cf:3b:
4b:a0:64:77:15:61:4a:f9:dd:8c:f4:6a:e2:9f:a4:
77:7c:59:67:04:61:dd:75:94:40:43:a4:02:49:e1:
53:d0:f2:68:53:9f:44:bc:f1:fc:56:64:dc:30:ad:
4d:42:4d:1a:fd:e9:c0:4f:0a:42:0f:88:db:04:eb:
36:dc:01:0e:eb:c0:1a:1e:4f:2f:d6:4b:a9:c8:99:
60:86:fb:08:34:21:6a:88:26:e0:ce:b5:39:d8:ad:
7c:0c:55:a1:da:d9:0c:ab:5c:f3:e5:bf:0b:fc:69:
c9:d1:48:b8:7b:5d:2a:35:f0:23:b8:8b:44:c2:83:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:10:64:1A:FD:E1:48:81:FE:7B:9C:6C:AF:68:FF:AC:89:E0:45
X509v3 Authority Key Identifier:
keyid:40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a410::/32
Signature Algorithm: sha256WithRSAEncryption
a9:85:31:d2:0d:54:ae:e1:8a:bb:71:a0:cf:6d:cf:3d:32:f9:
76:4d:be:29:ea:af:b4:2a:f5:a3:16:06:5c:b3:b9:86:38:bb:
55:7d:54:9f:31:9f:66:c8:c4:12:b4:94:c8:cf:8f:4b:cc:a1:
c4:c5:20:b8:19:a7:15:5e:87:d2:e1:86:4b:33:b7:bc:a2:81:
dd:4e:75:46:2c:9d:02:c8:aa:54:3d:0d:25:84:45:5d:88:a0:
59:0a:38:a2:ce:4e:60:78:e3:c9:73:e0:0c:65:62:15:ac:fe:
41:20:d5:4b:89:8e:eb:c8:2f:f8:17:8f:cc:d9:06:f5:fe:a2:
2a:6a:17:56:b3:e2:91:e0:5d:80:ca:8f:06:94:e3:d5:ac:1c:
f8:ff:c9:6f:95:c1:28:41:ea:9e:3c:9f:a4:67:dc:24:86:a9:
07:0c:24:79:6e:4d:4f:6d:ff:27:f0:d4:6c:4a:12:ed:86:22:
08:98:9f:22:7f:70:1c:e7:f2:c9:0d:01:c9:8a:cc:80:7f:29:
fa:4b:66:42:ad:42:3a:85:33:b1:3e:86:f4:f1:a9:26:cc:29:
1a:46:d0:2f:e0:cc:98:83:c8:1a:87:fc:ba:b2:f8:54:d5:1a:
d6:d6:2a:bf:e5:7b:7d:44:22:33:aa:d3:e1:1f:35:3d:48:e2:
78:82:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:04 2025 by rpki-client