Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203233303539.roa
File: 323830313a3131343a3a2f34342d3438203d3e203233303539.roa (raw, json)
Hash identifier: i7jXUc6OtNqM0IjxOkzA4hgBHU+fq+1m79OaCRUTo58=
Subject key identifier: 7E:49:94:0B:B6:10:77:39:A7:E6:53:84:F1:48:48:D6:E2:D5:42:09
Certificate issuer: /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial: 6CFBD0BC530A5ECDFA35CEEFDDC6B268D752624C
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203233303539.roa
Signing time: Tue 04 Feb 2025 18:18:42 +0000
ROA not before: Tue 04 Feb 2025 18:13:42 +0000
ROA not after: Tue 03 Feb 2026 18:18:42 +0000
asID: 23059
IP address blocks: 2801:114::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:d0:bc:53:0a:5e:cd:fa:35:ce:ef:dd:c6:b2:68:d7:52:62:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Validity
Not Before: Feb 4 18:13:42 2025 GMT
Not After : Feb 3 18:18:42 2026 GMT
Subject: CN=7E49940BB6107739A7E65384F14848D6E2D54209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:fc:65:75:a2:03:80:30:98:4d:e3:8b:14:
ab:af:b1:aa:2f:90:68:a4:bf:73:da:72:17:3c:e2:
cb:85:e2:7a:d2:a1:a9:81:a3:a6:f0:30:e9:be:1e:
50:29:5d:45:2d:27:b3:1b:f6:35:0e:37:12:57:93:
3e:0c:b5:05:0f:bc:1c:d6:eb:3e:22:61:ef:7b:6f:
6a:8f:ea:27:48:29:d6:f2:86:3e:d8:93:50:7b:9e:
8f:f0:2b:bc:93:dd:23:14:7d:e3:a0:56:52:87:ed:
03:92:ec:dd:43:27:74:ab:54:01:f6:c3:73:f6:c6:
50:30:e2:09:fc:10:43:7d:17:18:76:29:ac:a6:c5:
47:86:67:7b:f3:32:e9:e6:6b:ff:fc:31:64:2e:9f:
08:82:36:a2:26:45:65:09:26:a3:2e:9a:19:3b:eb:
ef:81:04:c1:12:73:06:f3:1a:db:30:27:47:12:1c:
e7:b6:55:19:ef:e5:9c:8a:88:24:5a:04:75:bb:41:
a9:60:ba:b0:de:e1:65:bc:86:2c:77:f1:46:5b:16:
56:5e:7e:0d:c0:61:4c:ba:e7:20:4e:9c:86:a6:54:
90:f1:f1:27:0b:13:ad:95:72:df:0b:73:a1:f5:84:
2e:1b:a2:82:53:08:c8:59:64:f9:ea:9a:00:2f:bf:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:94:0B:B6:10:77:39:A7:E6:53:84:F1:48:48:D6:E2:D5:42:09
X509v3 Authority Key Identifier:
keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203233303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114::/44
Signature Algorithm: sha256WithRSAEncryption
21:0f:72:7b:92:af:b7:10:f3:ed:41:90:49:4a:b6:e0:f4:fa:
6a:00:7f:69:b3:cb:c9:b9:f6:d7:fb:89:98:4c:32:bb:04:30:
ca:b5:68:2b:2f:9a:d3:d3:62:99:dd:54:f5:03:d9:a2:c8:87:
85:68:62:38:e5:47:af:91:b9:d3:8c:16:ab:de:bc:57:cc:6c:
17:bf:14:37:06:d4:45:09:76:f5:76:f7:64:5a:9b:42:cb:a2:
cd:29:0b:dc:eb:8b:eb:34:b3:e3:d0:33:06:c3:38:94:72:a9:
d2:bc:95:4c:97:42:99:74:b4:5c:5d:bd:fe:f9:70:c0:4e:34:
8e:b0:31:0a:74:7d:6a:b8:51:5e:e2:e4:a7:9a:d3:0d:74:90:
1d:07:59:5f:4e:a9:27:cb:4b:8f:89:42:6b:48:9b:20:04:c3:
47:d7:95:5f:f9:ca:71:ad:db:25:30:19:da:b5:bd:27:03:e0:
e8:13:25:17:b6:18:4e:be:0c:22:a5:ae:09:c3:82:93:21:99:
85:44:85:7e:42:5f:3d:59:ba:45:8d:fd:97:5a:cc:06:a4:b0:
db:42:d4:b1:63:b8:5d:d9:de:23:27:e2:2e:81:14:6b:29:a4:
1e:f1:10:b1:11:2d:f7:a1:cb:99:f3:11:4e:80:38:c4:b3:35:
e7:f3:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:03 2025 by rpki-client