Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
File: 323830303a3131303a31303a3a2f34382d3438203d3e203432.roa (raw, json)
Hash identifier: 85/7p24r+fjtvjkQTQ3DtI8s0tx0VeQCAuQ3kKbGteY=
Subject key identifier: 21:2D:B4:49:2C:9A:B9:A1:A8:F3:46:82:38:64:57:38:E7:F6:69:74
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 4605E83ADD0C6FAFC29ADF814C7A5B2DD093E337
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
Signing time: Tue 04 Feb 2025 18:26:58 +0000
ROA not before: Tue 04 Feb 2025 18:21:58 +0000
ROA not after: Tue 03 Feb 2026 18:26:58 +0000
asID: 42
IP address blocks: 2800:110:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:05:e8:3a:dd:0c:6f:af:c2:9a:df:81:4c:7a:5b:2d:d0:93:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:21:58 2025 GMT
Not After : Feb 3 18:26:58 2026 GMT
Subject: CN=212DB4492C9AB9A1A8F3468238645738E7F66974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:f8:bd:d5:f1:c8:a5:a3:ed:3a:22:dc:31:
63:14:80:74:31:8f:82:68:67:dd:50:8b:6f:73:e0:
0e:e9:30:22:8d:45:c2:f9:38:4a:c2:a0:a0:3e:08:
c1:02:96:59:76:88:b4:dd:f0:dd:0c:4d:2c:87:83:
28:f7:22:30:74:d6:eb:04:43:79:41:f9:6b:21:e2:
7d:c7:50:5c:a0:18:63:f4:46:d1:4a:54:06:d8:b2:
3b:11:a8:ba:38:86:e4:76:e8:3e:ca:88:48:29:7e:
51:f4:01:5d:bc:f1:ca:2a:fc:e8:0a:b5:37:48:74:
84:92:18:c1:a6:e2:3a:19:34:c6:09:e6:eb:2a:5a:
c0:0c:95:d3:c5:66:6c:bd:d3:7a:4e:bd:3a:30:44:
64:e6:eb:52:a7:47:be:5a:9e:a7:52:1d:44:5b:d3:
e7:72:c4:e4:32:84:a4:37:e6:68:bf:a3:3a:4f:47:
eb:6b:87:ea:6f:e2:96:ac:4d:cc:e1:b0:33:af:c7:
26:99:2e:c6:72:ce:aa:f9:13:31:75:cb:ea:51:f6:
e9:b0:d8:6c:9f:72:8e:c7:fb:1b:9d:27:e4:72:b9:
fd:a6:79:a7:a7:46:95:c9:4a:c2:85:95:c5:94:45:
11:38:17:0a:76:d7:fd:46:74:13:2d:b0:e6:c0:24:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:B4:49:2C:9A:B9:A1:A8:F3:46:82:38:64:57:38:E7:F6:69:74
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:110:10::/48
Signature Algorithm: sha256WithRSAEncryption
49:c1:68:a7:fc:ea:04:3d:ac:9d:44:9d:6a:70:5a:c4:91:4b:
e3:37:80:61:cc:32:e4:9f:96:6f:51:c6:e8:bf:5e:fb:2a:ed:
68:72:dd:b3:6f:fe:4f:a5:6a:b1:fa:3f:fc:de:37:d8:ea:9b:
df:b4:ea:68:bf:e2:7f:9a:c3:9b:19:e8:61:c7:b0:c2:11:9c:
2d:cb:6e:eb:57:3a:92:1e:37:ec:c2:cc:5d:f1:e1:ab:ba:54:
a2:25:62:73:20:83:4a:88:02:43:fb:cd:3f:db:eb:28:fb:ed:
67:50:34:04:10:fa:77:5a:1a:39:28:a8:43:ef:23:95:e6:26:
bc:99:32:9a:cf:19:3d:de:0a:c4:17:00:06:ac:c3:37:23:f5:
e5:74:9f:e2:e1:72:f2:41:b1:b6:4f:b1:ab:c4:03:24:6f:e1:
9e:00:c2:42:68:63:c4:b3:2a:8d:82:4d:3f:25:18:b7:3c:e4:
f2:28:59:1f:5d:95:bc:49:0c:25:22:bd:77:88:ed:49:f3:41:
b7:ef:fd:04:10:2f:38:01:c0:68:f8:5f:ff:b4:c9:aa:d1:1e:
d3:d1:30:92:82:a7:61:79:cd:96:4c:a2:9a:bf:b4:e8:9e:a3:
ed:f5:9f:fc:ad:0a:9c:d7:00:cf:61:0d:64:e9:f1:08:0a:f8:
87:70:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:36 2025 by rpki-client