Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa
File: 323830303a37303a3a2f33322d3336203d3e203237373839.roa (raw, json)
Hash identifier: k+Qa4LsqoXKbMRq5x4uv7+I2MgWPGG1taHwtLMq615s=
Subject key identifier: 0C:AE:8C:E7:31:52:33:59:D3:D0:97:62:FF:EA:49:EA:5F:8F:55:7F
Certificate issuer: /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial: 1E712601D17FB8E485D66045560C5C7E8AEFC7C7
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa
Signing time: Tue 04 Feb 2025 20:08:33 +0000
ROA not before: Tue 04 Feb 2025 20:03:33 +0000
ROA not after: Tue 03 Feb 2026 20:08:33 +0000
asID: 27789
IP address blocks: 2800:70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:71:26:01:d1:7f:b8:e4:85:d6:60:45:56:0c:5c:7e:8a:ef:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Validity
Not Before: Feb 4 20:03:33 2025 GMT
Not After : Feb 3 20:08:33 2026 GMT
Subject: CN=0CAE8CE731523359D3D09762FFEA49EA5F8F557F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:93:0f:26:b3:3c:69:0b:38:c8:f2:f9:af:
bd:51:ca:f4:14:13:e8:5a:61:b4:f3:34:fd:f8:9d:
f2:76:5d:e5:c6:d8:93:59:cf:89:05:f6:58:d9:70:
0f:6e:db:7b:10:58:24:c6:2e:22:97:70:28:0d:84:
0c:24:83:5c:5c:ec:07:62:b8:c2:c9:db:76:de:66:
88:03:2b:06:0b:e5:29:4b:32:02:c4:e7:4b:7e:5d:
69:f9:72:b2:86:f5:0c:88:fc:dc:48:bd:8e:99:e3:
be:c1:c9:c0:f4:47:3c:01:e6:db:8b:25:8e:cd:40:
72:a9:d4:ae:70:79:fb:05:56:a9:b5:6c:8e:25:d0:
ce:53:07:e8:82:09:5e:02:8b:09:8b:dd:59:ed:2d:
aa:0d:35:8a:71:e5:7b:e7:30:22:15:3f:c9:1a:eb:
b2:e5:10:ba:33:3b:b6:41:59:da:a4:28:3c:e3:76:
4d:e6:31:61:3e:2c:00:65:16:68:c8:e9:73:82:61:
fa:62:56:af:c9:0d:06:a9:64:91:3a:a1:75:e5:6a:
80:3d:a3:d9:fa:12:01:28:9e:b9:b9:b9:ea:9c:ff:
06:ca:ae:4a:22:b7:7f:07:50:15:d3:3e:a7:5a:0b:
35:77:b3:f5:b8:f2:50:bd:28:ee:94:9d:14:3f:e8:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:8C:E7:31:52:33:59:D3:D0:97:62:FF:EA:49:EA:5F:8F:55:7F
X509v3 Authority Key Identifier:
keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/323830303a37303a3a2f33322d3336203d3e203237373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:70::/32
Signature Algorithm: sha256WithRSAEncryption
96:71:ae:70:cc:0a:4d:b3:64:40:81:fa:bd:04:e7:39:31:6e:
5e:04:4a:0b:9c:1b:c4:31:40:53:96:80:08:2e:33:ec:e7:6a:
75:f3:f6:d7:ff:9b:5d:c8:1f:43:62:60:ee:88:39:5f:55:c3:
09:35:97:b9:2a:3d:82:fe:5b:56:ad:e2:c5:9f:6f:2a:0c:77:
9d:9c:14:86:59:0b:b2:4a:18:f4:44:e2:30:53:8f:75:cc:97:
11:49:d7:8e:04:ab:67:b8:d1:b8:21:99:62:39:cd:15:43:6f:
15:ac:2e:de:3e:0f:63:c4:27:19:4b:0b:1f:46:74:de:38:fc:
fc:0a:ae:7d:8a:67:ae:d7:ee:7b:2a:49:85:db:e0:8e:4a:26:
14:37:f9:28:a6:f0:8a:4a:93:46:8a:45:6f:ac:e9:b1:90:a9:
b4:1f:4c:9d:01:6e:0a:3f:8e:6d:77:d0:49:59:50:82:d3:a9:
b8:41:dd:db:18:a2:ac:4f:de:68:57:e8:c2:de:5a:04:aa:b6:
09:e4:ca:ff:71:09:58:0c:e0:56:37:86:6c:bb:70:a8:54:82:
ed:f4:8f:78:de:b8:19:50:7c:f6:ef:be:90:1a:fb:11:be:cd:
65:58:fb:a0:82:4c:6b:d0:60:a1:91:be:9a:f8:d6:40:09:39:
c8:73:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:50 2025 by rpki-client