Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa
File: 323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa (raw, json)
Hash identifier: aR35iec3eptz14B7LeJzmFYTnkD3O5mA8lBxIT82jxU=
Subject key identifier: 31:14:C4:E1:AF:B5:62:E9:B6:BB:C9:74:86:E8:64:12:43:8D:8D:FD
Certificate issuer: /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial: 43E9B83C8A755D0C9FCB620050E4788417C5CEAC
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa
Signing time: Tue 04 Feb 2025 18:18:22 +0000
ROA not before: Tue 04 Feb 2025 18:13:22 +0000
ROA not after: Tue 03 Feb 2026 18:18:22 +0000
asID: 6461
IP address blocks: 2800:870:1002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e9:b8:3c:8a:75:5d:0c:9f:cb:62:00:50:e4:78:84:17:c5:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Validity
Not Before: Feb 4 18:13:22 2025 GMT
Not After : Feb 3 18:18:22 2026 GMT
Subject: CN=3114C4E1AFB562E9B6BBC97486E86412438D8DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:16:4d:a7:6d:6c:7f:84:21:6e:42:66:72:
fa:cd:ce:86:f2:47:5f:ad:ea:82:ad:4f:4a:97:a2:
9d:3d:25:14:a9:8e:47:0a:8f:54:1b:ad:c2:99:65:
d6:9b:57:c3:cf:10:02:9b:af:13:a8:7a:35:6f:35:
9e:55:10:78:78:5b:74:cc:12:f9:5c:9b:a9:5c:42:
d2:d6:d0:c7:94:f4:ba:51:e5:4f:04:02:67:8d:45:
82:58:de:7b:82:9f:10:c7:80:f7:66:63:2c:03:5f:
66:fe:64:8c:8a:bc:a6:de:bc:4e:cc:bd:32:e2:7b:
c7:f7:75:18:c9:a1:87:4b:62:16:41:20:0a:e5:7c:
51:d7:42:92:e8:64:5a:04:64:7f:3d:98:a1:9d:92:
e6:b6:a9:b1:4d:82:2b:61:db:bf:76:e1:83:ae:8b:
1a:ec:2c:77:ff:fd:12:93:89:69:28:4b:ef:c1:78:
be:34:e8:54:29:18:28:f5:a5:7d:4c:d6:b7:f7:c9:
55:00:e9:d6:5a:af:04:40:a4:70:86:9d:27:c1:8a:
da:24:60:35:23:72:05:80:a6:91:e1:82:d5:21:fd:
4e:b7:d5:86:f7:df:d8:ab:2c:5b:c6:be:cb:d8:c6:
bc:f6:f5:7d:ce:e4:36:89:89:1c:01:c8:12:6f:89:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:C4:E1:AF:B5:62:E9:B6:BB:C9:74:86:E8:64:12:43:8D:8D:FD
X509v3 Authority Key Identifier:
keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:870:1002::/48
Signature Algorithm: sha256WithRSAEncryption
92:2a:6f:4d:0e:0c:41:a1:7d:68:a7:47:ea:69:a6:a4:c0:3a:
73:85:a3:f6:31:f0:ba:bd:f8:56:45:53:95:ac:60:e9:2a:20:
d5:d7:e9:23:9c:c7:03:d2:37:59:15:4b:e5:8d:29:36:5d:55:
48:05:1e:0f:99:ba:25:d3:fd:84:2b:d5:85:14:84:6e:29:fa:
e3:9b:73:51:a8:23:76:b7:75:b1:bb:6a:2c:fd:28:b9:53:e2:
b4:b5:16:55:11:fb:05:aa:55:d8:f8:18:79:a8:38:7d:9b:a8:
08:5d:c3:e9:4c:99:50:08:da:31:12:40:0f:ec:a5:ed:65:cd:
30:f0:bf:e9:cf:25:1e:04:d4:c2:ce:8b:d0:5e:45:ab:fc:1a:
ef:a5:cd:09:c4:4a:f2:57:12:3e:f7:86:bd:96:a2:6b:01:19:
32:a8:01:a6:cf:4e:00:c3:f6:0b:98:4f:db:f2:1d:9c:b1:3f:
b8:9f:3e:4b:36:0c:f1:ff:71:0e:c9:00:ed:ce:e9:c0:ff:99:
23:70:ef:18:de:08:24:b2:cc:5f:6c:81:cf:a2:80:93:dd:4d:
db:d2:8c:d8:2f:bc:47:78:29:c0:af:37:b6:52:22:fb:46:1f:
7c:9f:aa:01:69:83:f7:df:1c:dc:64:af:b8:f9:0a:49:7c:dc:
d9:78:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:15 2025 by rpki-client