Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: wYUt76Ysf+o1sRZ/Y6MPqMqUzHLWIzrN8hLXzRcSP/I=
Subject key identifier: DD:29:49:62:F6:4D:75:52:CF:FE:D7:E2:3A:E1:BD:82:ED:06:05:F7
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 611898E47AFB0E80AD1A038862113C3B3C35AA5D
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 04 Feb 2025 18:55:48 +0000
ROA not before: Tue 04 Feb 2025 18:50:48 +0000
ROA not after: Tue 03 Feb 2026 18:55:48 +0000
asID: 273041
IP address blocks: 2801:1a5:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:18:98:e4:7a:fb:0e:80:ad:1a:03:88:62:11:3c:3b:3c:35:aa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Feb 4 18:50:48 2025 GMT
Not After : Feb 3 18:55:48 2026 GMT
Subject: CN=DD294962F64D7552CFFED7E23AE1BD82ED0605F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:23:66:90:9b:56:71:5b:48:57:e0:dc:d4:
2a:14:b7:c1:9d:82:2e:5d:ea:1c:18:0b:ec:b0:b5:
84:dc:2a:91:9f:cc:75:ce:33:13:67:e8:5d:6d:5c:
6c:56:40:6e:d8:d4:be:03:cb:dc:fc:0c:3a:74:e8:
f0:aa:f5:26:ca:92:84:5a:88:b7:d8:7d:19:e3:51:
f9:c1:2d:6c:56:ad:7f:74:7a:88:50:a1:a8:aa:b7:
bb:54:33:92:78:da:78:73:74:d4:8b:0e:65:40:fb:
39:16:7c:19:38:e9:3b:00:63:12:9a:80:a0:8f:13:
2d:a8:53:c3:52:d2:6b:07:47:49:3e:87:8f:cb:aa:
44:5e:2c:e1:47:96:4c:6b:00:3c:05:1c:06:8a:71:
21:e1:fa:89:6a:15:78:ca:85:8a:a4:d9:92:be:0f:
6a:a5:7e:a2:43:52:08:78:f5:f4:07:f2:14:05:04:
5f:ae:3b:4b:05:e3:63:40:b1:03:94:37:3e:a1:92:
fa:f4:34:62:75:03:8d:53:19:25:ee:38:83:22:35:
39:87:ec:a6:5c:c9:bb:9d:61:76:8d:a5:31:c6:5f:
e2:44:4a:d5:d2:90:f5:05:c3:e8:fd:98:f7:b2:e5:
59:9c:ff:aa:85:c1:1e:a6:ed:86:53:3a:b3:ba:4e:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:49:62:F6:4D:75:52:CF:FE:D7:E2:3A:E1:BD:82:ED:06:05:F7
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:3::/48
Signature Algorithm: sha256WithRSAEncryption
04:8e:1f:7b:08:b6:1a:be:4f:e6:55:55:1e:98:71:b4:b4:05:
51:74:4b:dd:22:43:14:85:ce:34:0b:73:cd:9f:0f:86:13:f9:
74:db:83:8e:38:d9:8d:20:e2:1e:95:81:27:07:bc:bb:87:19:
35:b4:f2:43:9a:98:c9:23:00:ab:46:ee:1f:fc:65:f3:8b:5b:
b9:bc:6c:91:af:90:35:e2:a0:c5:44:b1:1f:57:fe:5f:ef:70:
84:21:a0:cf:35:e4:ff:38:7b:60:ad:6e:a3:f7:99:6d:03:7c:
d2:c4:69:63:1d:8f:3f:4c:b7:ef:af:4c:1b:f4:07:7c:57:ed:
53:d6:d9:2e:42:00:a5:6d:59:0a:d1:18:40:73:27:4f:96:c0:
2c:90:1c:ba:5f:bb:b8:dc:53:de:7d:16:52:9c:72:f6:4f:8a:
aa:81:e4:7d:1a:e1:2c:a7:14:c2:14:8c:6b:0e:63:4e:35:09:
7c:69:15:d4:86:d2:58:73:d3:51:9d:91:f0:fd:d9:f5:30:fe:
f0:7a:ef:c9:6c:34:b5:a0:af:98:05:a9:65:5b:ac:13:3f:62:
16:df:92:38:d3:e1:dd:38:0c:04:ca:41:7d:29:8d:ae:5d:94:
24:34:f5:f4:0c:fd:2b:2a:f6:cb:79:f0:60:f1:ce:7a:3f:b3:
50:74:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:49 2025 by rpki-client