Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa
File: 323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier: vi7G84z3lGFZEHiF6xDhhAXQ4aU62o/oEnEtBS0X2D0=
Subject key identifier: AA:31:57:BE:D5:F4:8B:42:85:08:FA:6E:57:0B:AF:46:6A:7A:66:FC
Certificate issuer: /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial: 1C1C14B66941B71249F03F4189E80B15AD9F9264
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa
Signing time: Tue 04 Feb 2025 18:14:48 +0000
ROA not before: Tue 04 Feb 2025 18:09:48 +0000
ROA not after: Tue 03 Feb 2026 18:14:48 +0000
asID: 61461
IP address blocks: 2803:d700:8f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1c:14:b6:69:41:b7:12:49:f0:3f:41:89:e8:0b:15:ad:9f:92:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
Validity
Not Before: Feb 4 18:09:48 2025 GMT
Not After : Feb 3 18:14:48 2026 GMT
Subject: CN=AA3157BED5F48B428508FA6E570BAF466A7A66FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:ba:65:2e:8f:a5:df:90:d9:cd:0a:aa:24:
4f:79:37:1d:de:4b:55:16:9a:4b:a7:d0:7e:d7:e6:
36:db:96:17:c6:f2:e7:c4:56:5d:93:b8:4f:d1:bd:
7b:62:34:cc:f1:15:f6:97:32:47:55:33:4f:50:0b:
d0:52:ad:cf:8b:a6:58:8d:c3:da:14:6d:d7:26:3d:
cb:70:e0:94:d2:90:9c:14:f3:9e:bb:1c:58:06:02:
99:d6:55:f5:d3:5d:eb:37:c9:11:cf:f5:28:e3:18:
9f:6a:64:7a:0c:d4:ce:19:6c:e0:1e:99:4f:f5:e3:
47:73:dc:09:cf:dc:90:b2:f8:f0:df:49:f7:05:37:
97:21:89:be:25:7e:fb:03:93:1a:97:89:60:b1:c0:
c8:3b:7f:5b:ac:d7:58:19:59:14:47:5e:46:4f:ee:
97:ec:30:dc:83:1b:12:a4:0d:ae:46:35:ba:52:92:
9e:4e:ae:93:c2:e0:3e:79:ff:e5:96:d2:30:9d:e6:
5e:ec:fb:6d:f2:48:37:4a:8a:5a:8c:74:88:f8:cd:
bd:2e:8e:1d:00:d4:65:a7:64:36:50:6f:ae:b1:73:
56:54:e7:69:bc:08:77:80:a8:78:74:81:d0:fe:9c:
84:09:c2:e9:13:91:c6:cc:da:34:64:94:30:40:76:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:57:BE:D5:F4:8B:42:85:08:FA:6E:57:0B:AF:46:6A:7A:66:FC
X509v3 Authority Key Identifier:
keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d700:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
2c:96:f2:7c:ac:b3:dd:7b:e5:76:5e:6a:17:68:aa:21:ea:bb:
90:b2:7c:f0:e7:69:d8:84:37:9a:12:6e:77:ee:80:00:c1:4d:
e6:59:f1:4b:1d:df:c5:ac:f7:7a:0d:4d:9b:d8:87:d4:b2:35:
e3:bb:17:1c:98:e4:40:d9:59:15:21:c0:24:52:4a:5e:1a:83:
d9:50:b6:0f:11:df:88:5e:53:2b:08:64:92:a6:3d:13:39:6c:
8c:b5:3a:d5:b5:9d:34:4e:2f:01:46:04:7d:2e:a7:d0:ee:d1:
9e:4b:71:c2:e4:de:36:98:7c:e6:32:2e:df:ca:ba:4e:d5:5f:
46:30:01:9b:43:4c:ab:55:c0:d8:2d:fd:6f:84:d2:0c:da:62:
4c:68:09:37:65:d4:81:fd:d1:8d:32:e8:f3:c7:2e:09:de:2a:
aa:06:37:80:db:83:be:2f:ba:52:ba:c3:f9:d1:7c:dc:c8:61:
1a:7d:c0:c0:90:62:bd:7c:fc:d6:82:67:db:8f:33:b4:5c:4b:
a7:10:37:89:8c:a4:89:0b:ba:6b:28:90:57:00:e6:bb:ba:4e:
2f:9d:8b:e8:78:3c:14:f4:dd:f4:9e:62:8e:34:f0:68:49:77:
52:15:d4:8a:61:a0:a9:3b:2b:3e:b0:61:3a:ff:9c:53:eb:e3:
01:61:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:31 2025 by rpki-client