Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961313a3a2f33362d3430203d3e203134353232.roa
File: 323830303a3961313a3a2f33362d3430203d3e203134353232.roa (raw, json)
Hash identifier: espJRvPH2e0onG509jbsM/e+in20JDm3MuXyNl4SS2Q=
Subject key identifier: CD:1E:35:9E:BC:75:C5:E1:47:09:27:6C:BF:D5:21:01:D1:A7:FB:61
Certificate issuer: /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial: 1D6C7CFE10875AD9CEB99CE18B47922980920655
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961313a3a2f33362d3430203d3e203134353232.roa
Signing time: Tue 04 Feb 2025 20:08:46 +0000
ROA not before: Tue 04 Feb 2025 20:03:46 +0000
ROA not after: Tue 03 Feb 2026 20:08:46 +0000
asID: 14522
IP address blocks: 2800:9a1::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6c:7c:fe:10:87:5a:d9:ce:b9:9c:e1:8b:47:92:29:80:92:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Validity
Not Before: Feb 4 20:03:46 2025 GMT
Not After : Feb 3 20:08:46 2026 GMT
Subject: CN=CD1E359EBC75C5E14709276CBFD52101D1A7FB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:4a:64:97:c3:7a:e9:10:9d:7a:6d:34:6f:
51:e7:33:5d:98:b2:26:7f:4e:11:47:42:5e:da:fe:
e3:17:2f:a6:1a:9e:8a:c6:06:84:ee:8a:6e:30:2c:
2b:c1:0e:3a:7f:01:41:51:e1:d3:ab:a4:32:6c:85:
da:6f:ad:0d:2a:2b:29:a3:47:c1:24:3e:b0:5a:48:
2c:ca:04:60:1a:10:25:88:25:3d:ba:ec:0a:35:8c:
3b:de:09:36:d9:60:22:36:b4:80:e7:3c:8c:1a:e5:
aa:14:e7:c7:18:88:e6:a0:1b:c8:d2:e1:a7:4c:2d:
a8:2e:24:3e:21:d6:37:fe:b8:0f:4a:50:49:c1:c0:
10:b3:df:01:a9:56:b6:ba:f1:a7:06:00:6f:d5:d2:
b2:67:0b:63:8e:c3:02:9d:3a:e4:33:4f:fc:01:0d:
84:50:7f:68:01:12:cf:c1:0c:ea:7f:5d:7f:a9:15:
fc:95:99:42:ef:94:aa:ea:30:96:2c:f4:be:27:7e:
fd:b9:c4:60:0c:b0:aa:46:d0:33:35:93:26:41:25:
2f:3b:cb:59:16:3f:c5:76:3e:66:b0:42:8f:26:22:
4c:2c:21:ee:03:d5:31:b4:1e:87:ab:61:92:63:22:
ae:76:eb:e8:2a:7e:40:c1:43:fb:fd:7a:58:91:55:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:35:9E:BC:75:C5:E1:47:09:27:6C:BF:D5:21:01:D1:A7:FB:61
X509v3 Authority Key Identifier:
keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961313a3a2f33362d3430203d3e203134353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:9a1::/36
Signature Algorithm: sha256WithRSAEncryption
69:33:ba:db:51:12:12:a5:60:fc:fe:cc:af:56:38:99:e9:52:
39:c1:59:90:d7:d5:af:c5:08:25:2e:0f:88:60:2c:1d:a9:95:
cb:49:dd:ab:b5:22:22:f5:5b:8e:4b:45:d1:6a:aa:84:60:3d:
98:b1:b4:2d:e1:73:50:18:14:d1:42:6f:90:9e:e3:e5:3c:74:
43:f2:f0:c7:3c:f9:31:49:01:73:fa:1e:52:1f:ca:bd:19:60:
9a:69:bb:3d:e2:29:dd:8d:fb:f3:36:1b:4b:7d:7c:c0:a4:b1:
45:cf:c1:ec:05:55:6b:6a:08:ff:96:f7:e0:9a:46:92:89:f9:
81:f7:9b:e7:35:ca:1e:b9:3b:0b:aa:de:22:28:86:75:ef:7a:
61:d3:71:9b:00:00:6f:51:7f:3f:66:c9:e5:2b:69:75:28:66:
df:bc:3b:1b:66:6b:11:3c:d6:ec:87:c5:79:84:83:86:54:47:
33:7d:c9:8b:57:8a:e1:7e:a4:2e:c5:ca:27:72:c7:2a:fe:6e:
7d:60:87:f9:8f:65:66:4e:2f:d5:5d:6f:84:28:5c:f8:38:a3:
a3:a9:14:18:0b:a1:8e:4d:9b:52:bf:55:6f:51:88:70:40:f0:
13:dc:0e:a2:55:ee:59:76:90:3c:09:cf:24:41:28:56:a9:25:
76:c8:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:38 2025 by rpki-client