Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961343a3a2f33362d3430203d3e203134353232.roa
File: 323830303a3961343a3a2f33362d3430203d3e203134353232.roa (raw, json)
Hash identifier: MfRoudCZCO385XARbOZN/ER7YQtVHyB5CyNNYwZF+zk=
Subject key identifier: 86:A9:FD:D1:1B:2F:45:62:F3:72:2F:4F:6A:85:45:1D:38:00:C0:2E
Certificate issuer: /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial: 54150E5F812BC25B88293288DF67956E89A89308
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961343a3a2f33362d3430203d3e203134353232.roa
Signing time: Tue 04 Feb 2025 20:08:42 +0000
ROA not before: Tue 04 Feb 2025 20:03:42 +0000
ROA not after: Tue 03 Feb 2026 20:08:42 +0000
asID: 14522
IP address blocks: 2800:9a4::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:15:0e:5f:81:2b:c2:5b:88:29:32:88:df:67:95:6e:89:a8:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Validity
Not Before: Feb 4 20:03:42 2025 GMT
Not After : Feb 3 20:08:42 2026 GMT
Subject: CN=86A9FDD11B2F4562F3722F4F6A85451D3800C02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:af:5c:87:76:42:22:04:e1:95:70:69:71:
3d:cf:4a:15:ca:ce:b6:ae:0e:a6:4b:09:c6:6b:93:
a9:e9:cd:8c:ce:0a:cb:50:2e:67:0d:dc:86:72:eb:
e0:64:65:4f:c6:7c:a6:da:ab:c0:12:4a:96:77:7e:
12:e1:cd:55:37:df:a6:f0:18:0b:e7:d6:fc:12:2a:
a8:8a:d0:ea:99:4c:ac:75:02:d4:d5:67:d9:2f:3a:
c6:9d:43:14:64:10:f7:3b:d1:99:e3:8d:d5:47:52:
d0:30:db:ed:6b:02:94:05:bc:66:de:93:c5:9b:f0:
e1:df:07:bd:b9:2a:59:4e:3f:7d:01:fb:64:8c:96:
b8:8b:c0:7f:49:c6:cd:01:ac:57:32:98:7b:cc:da:
29:f2:ee:31:af:88:82:31:e2:5a:60:1b:c9:d3:13:
a4:61:bb:ab:a8:ea:ac:a5:6d:e0:61:65:73:9c:b7:
82:0f:db:52:6f:d3:f0:d4:71:6b:cf:28:ae:24:5f:
92:4e:5e:5b:18:1e:c1:64:a6:3a:24:53:2c:c7:e3:
b4:c8:04:a1:c6:05:07:85:3e:1c:68:4d:bf:67:5b:
06:12:4b:6d:b1:dc:38:e8:15:b4:2b:0e:4d:9e:78:
42:dc:5c:70:31:73:4f:11:25:34:de:b7:27:b6:75:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:FD:D1:1B:2F:45:62:F3:72:2F:4F:6A:85:45:1D:38:00:C0:2E
X509v3 Authority Key Identifier:
keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961343a3a2f33362d3430203d3e203134353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:9a4::/36
Signature Algorithm: sha256WithRSAEncryption
5f:3d:09:87:15:1d:f9:31:83:c5:65:25:ba:1e:d6:7c:81:3a:
35:15:3f:3a:ff:a1:1b:6f:cb:bd:95:ca:07:1d:02:73:dd:4d:
4b:ca:cb:1c:87:72:47:94:1b:4b:d0:df:26:49:e9:54:60:2c:
d9:6b:51:fe:f3:03:d5:b8:46:8f:76:f8:e4:1e:b9:1d:1b:2a:
d3:4f:3b:e6:e2:12:6b:76:6a:08:9b:ae:3a:db:84:72:98:3e:
d4:18:55:32:69:87:63:7e:f6:8d:83:a0:ee:32:f3:5b:ca:98:
99:57:40:16:66:e6:bf:4a:3d:7b:fc:4e:33:b7:71:14:53:19:
22:aa:75:18:f5:c2:31:63:71:d4:8d:6e:63:f7:59:d0:14:99:
05:c5:26:5d:83:54:e4:ea:5d:4c:2c:45:a0:c2:48:98:24:92:
e6:80:a0:c2:10:be:69:42:17:65:c4:10:93:d0:ff:2b:32:0a:
ce:6a:23:c3:4a:4d:5a:2a:23:63:bd:46:09:3d:b6:5e:ca:45:
b1:02:8d:a9:4a:fe:53:fa:5c:f4:2f:ce:fa:06:34:fa:0f:d9:
71:64:f1:0f:7c:73:f1:6f:5c:25:e8:1b:bb:8e:b5:26:ac:99:
df:cc:fc:74:1b:40:f7:23:6f:82:69:a7:9c:71:f0:73:a3:fc:
0b:72:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:22 2025 by rpki-client