Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa
File: 323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa (raw, json)
Hash identifier: 4apyQ+PvxJx2/gw1LjUgHg6pY6cdK5hzXedNx/776OU=
Subject key identifier: AE:C7:F8:55:24:89:6A:68:4C:D4:6B:7D:81:64:84:4E:FB:A9:D1:79
Certificate issuer: /CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
Certificate serial: 7438CA9628BDC6D126B7C4CF123E5C3FFEF3BFFE
Authority key identifier: B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa
Signing time: Tue 04 Feb 2025 18:52:54 +0000
ROA not before: Tue 04 Feb 2025 18:47:54 +0000
ROA not after: Tue 03 Feb 2026 18:52:54 +0000
asID: 10620
IP address blocks: 2801:15:4800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:38:ca:96:28:bd:c6:d1:26:b7:c4:cf:12:3e:5c:3f:fe:f3:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
Validity
Not Before: Feb 4 18:47:54 2025 GMT
Not After : Feb 3 18:52:54 2026 GMT
Subject: CN=AEC7F85524896A684CD46B7D8164844EFBA9D179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:34:43:04:b6:00:22:63:8c:09:40:fc:31:
fc:cc:8e:fe:e2:6a:4e:54:b9:29:88:5d:00:cb:3b:
10:f6:ba:ff:66:8c:bb:af:86:ba:b3:fc:24:26:ec:
49:30:95:c0:18:5f:4c:7a:64:ab:c1:7c:e9:d4:f0:
7e:82:5f:5c:83:a1:b4:4b:d5:5b:8f:f3:1a:97:78:
59:c0:98:2d:dd:0a:30:5d:e3:3d:ee:a4:eb:58:ee:
03:8e:95:4f:ea:51:24:3a:60:09:9d:d6:e2:07:69:
f5:e5:55:dd:1f:78:c2:4f:c0:dc:90:d6:96:4a:d0:
1f:2b:32:03:9a:28:2a:29:98:2c:fe:25:43:f5:1a:
53:d1:d1:c5:c1:89:d4:3f:84:9a:2d:f6:4e:99:b3:
c8:c9:7f:fc:b5:f3:ac:b4:f3:97:de:99:a4:b8:5e:
5b:c9:4c:9f:8a:91:a4:55:f9:ac:c8:96:6f:23:13:
8d:13:d9:c7:88:e4:e8:2f:5b:87:7e:b2:0a:0b:50:
5c:80:7f:c8:3c:2b:b9:98:cb:01:d5:ca:0a:5b:37:
8d:4e:30:e0:42:40:01:8f:45:df:53:c7:56:09:d0:
59:6d:fd:1e:43:cd:cf:89:6a:33:b2:fb:0f:60:48:
c1:70:e8:d2:9e:16:2a:73:d2:1c:13:5a:81:76:a2:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:F8:55:24:89:6A:68:4C:D4:6B:7D:81:64:84:4E:FB:A9:D1:79
X509v3 Authority Key Identifier:
keyid:B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:15:4800::/48
Signature Algorithm: sha256WithRSAEncryption
70:09:65:36:cd:83:fb:54:49:87:64:e4:25:d8:09:3d:c4:e9:
5e:e7:46:9c:11:6e:fe:a1:81:ed:51:4f:c0:ab:35:83:16:f2:
9c:a2:b5:12:20:25:e0:6d:34:06:cf:92:41:5b:82:ea:d4:08:
51:9d:60:98:c1:71:3d:06:c3:82:46:3a:75:ad:85:ef:52:79:
eb:b9:57:ba:25:31:bc:51:23:e7:89:9d:f3:ab:4a:69:56:25:
43:c6:4c:41:b4:78:7c:96:99:0e:9e:be:12:74:05:1c:d8:7a:
74:fc:a7:01:cd:9e:25:c5:66:0d:8c:a6:f6:4c:09:40:9f:59:
51:10:48:98:9c:ff:24:48:62:e1:4e:2e:b8:5a:33:98:86:6e:
a1:de:7c:f2:f9:42:2d:89:7c:dc:55:ee:13:1f:c2:df:2a:04:
2e:09:87:52:27:d4:2c:bd:34:da:7b:a9:70:2d:de:b7:e3:2c:
34:02:41:f2:af:fc:2b:c1:00:8d:da:ea:af:84:90:a2:0b:98:
f5:55:0c:87:2f:ef:df:d6:3c:db:2c:c3:70:52:b6:67:78:05:
5f:b1:fd:3c:91:e8:2c:65:52:33:ff:a1:58:91:1f:1c:90:a8:
9e:83:23:86:36:12:2c:02:e6:14:8d:af:e9:d3:cb:78:ac:fd:
28:06:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:08 2025 by rpki-client