Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa
File: 323830333a613838303a3a2f33322d3332203d3e203237383730.roa (raw, json)
Hash identifier: qf3t5ttQ23dWRU/EKXn5PhNaL+JpK5VT+fWtJUZIetI=
Subject key identifier: 2A:15:70:B7:D9:E5:37:3F:6B:45:EA:C3:A8:E0:BE:ED:73:9A:C1:64
Certificate issuer: /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial: 24B241D3B3C09F4027EAC8E259E07D26CDAEC794
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa
Signing time: Fri 28 Feb 2025 15:10:00 +0000
ROA not before: Fri 28 Feb 2025 15:05:00 +0000
ROA not after: Fri 27 Feb 2026 15:10:00 +0000
asID: 27870
IP address blocks: 2803:a880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b2:41:d3:b3:c0:9f:40:27:ea:c8:e2:59:e0:7d:26:cd:ae:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Validity
Not Before: Feb 28 15:05:00 2025 GMT
Not After : Feb 27 15:10:00 2026 GMT
Subject: CN=2A1570B7D9E5373F6B45EAC3A8E0BEED739AC164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:89:cc:1e:9b:f6:52:3e:5f:ad:fb:5d:99:
8e:ac:bd:4b:cd:2f:8d:1b:dc:4c:da:f9:63:01:ff:
13:40:72:ef:99:7a:58:38:9a:52:4d:80:ca:66:00:
82:9c:ed:21:2c:85:1c:f1:a1:0c:41:5c:dc:06:99:
56:98:bc:ba:f6:35:2e:20:ba:17:29:2b:58:6b:21:
58:ed:a8:ea:91:fd:10:f8:da:4f:9d:be:2d:e7:d9:
2a:0c:01:83:37:fb:14:dc:99:63:31:14:76:b6:bd:
8e:d9:e7:f7:5c:7f:15:22:04:be:c3:48:b9:7c:c4:
13:58:4b:2a:b3:59:a3:b0:90:0a:e3:64:f6:d2:b6:
95:e5:73:0f:ff:65:4f:e1:a3:80:96:c4:0e:1a:cb:
0d:ee:0a:cf:5a:e7:15:79:eb:b7:96:af:55:6f:57:
fd:10:e4:d8:57:46:9e:2a:9c:6c:35:d5:af:0e:4a:
81:fb:c6:23:71:84:d7:3b:a0:ee:4f:32:62:f2:fc:
5f:d1:fe:1b:ba:d3:e7:6f:19:ed:59:4c:4e:c6:52:
38:61:55:8b:14:22:60:dc:b1:f4:71:5d:a1:15:42:
ad:24:6c:49:66:6d:0c:f5:07:af:83:c2:99:66:7f:
eb:91:c9:1d:9a:18:6c:ad:9e:21:bf:c7:cb:27:7c:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:15:70:B7:D9:E5:37:3F:6B:45:EA:C3:A8:E0:BE:ED:73:9A:C1:64
X509v3 Authority Key Identifier:
keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/323830333a613838303a3a2f33322d3332203d3e203237383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a880::/32
Signature Algorithm: sha256WithRSAEncryption
82:65:48:35:31:e6:5e:a9:23:73:54:a6:5a:54:9e:a6:6d:23:
47:4e:78:3c:f7:4b:9b:73:7f:28:c4:94:64:b4:e3:26:7b:cd:
03:f6:93:bd:f3:b6:52:c9:bd:4e:6b:6d:c4:82:da:d9:05:dd:
44:ba:a6:67:12:b6:86:74:11:99:88:6e:30:77:bd:33:04:20:
27:4a:3d:c6:d5:3a:a8:84:e1:54:ff:8b:79:ce:c8:16:3d:8b:
bb:3c:7f:e1:8c:65:3c:4f:5d:64:10:20:38:6c:dc:6a:d8:3c:
96:c1:28:5c:ad:fe:02:e7:82:e4:7d:7a:bb:76:4e:9b:79:ca:
b7:3a:17:e5:f2:64:f1:c3:39:2e:02:38:6a:02:26:ed:9a:30:
f5:e9:b0:1f:58:8e:7a:6c:81:7d:60:2e:5a:4e:63:18:70:da:
69:11:4a:43:c8:1a:91:43:a7:69:7b:af:23:4e:5b:c9:26:a4:
23:45:8f:dc:1e:3a:c2:60:4d:8a:b9:5d:64:c0:1c:9c:36:e6:
b6:da:37:5f:ea:83:19:17:3a:eb:ec:30:7a:50:b0:1c:c4:cd:
fb:9d:56:5c:f8:ba:08:20:43:5b:c4:1f:dd:0e:55:81:fb:a4:
60:aa:34:c6:ba:9e:74:df:a8:23:9a:66:61:37:9e:6c:c0:f0:
83:85:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:51 2025 by rpki-client