Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e203237393531.roa
File: 323830313a3161653a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier: IOCj6onKUZ2t0VwZMDCR5eDmwzMnd+EQtQvB29FH4wc=
Subject key identifier: B5:C7:45:8E:F1:EC:51:F0:53:26:FE:46:F4:AA:FB:23:5D:1B:76:72
Certificate issuer: /CN=37D87FD980A584F704F25736ED716C9DEDE52987
Certificate serial: 141AAF80104A69EC8D50189915266715B2A161BC
Authority key identifier: 37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e203237393531.roa
Signing time: Mon 10 Feb 2025 21:00:00 +0000
ROA not before: Mon 10 Feb 2025 20:55:00 +0000
ROA not after: Mon 09 Feb 2026 21:00:00 +0000
asID: 27951
IP address blocks: 2801:1ae::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:af:80:10:4a:69:ec:8d:50:18:99:15:26:67:15:b2:a1:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37D87FD980A584F704F25736ED716C9DEDE52987
Validity
Not Before: Feb 10 20:55:00 2025 GMT
Not After : Feb 9 21:00:00 2026 GMT
Subject: CN=B5C7458EF1EC51F05326FE46F4AAFB235D1B7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:a3:fd:66:51:7a:31:20:66:8b:88:34:e0:
93:6b:76:57:a9:8b:a9:e2:8a:e2:ec:bd:2b:08:04:
6a:b1:af:87:29:66:53:ae:c0:ee:a6:72:67:f5:8f:
3e:f1:98:63:ee:e7:84:4e:c6:f6:a6:95:f8:a0:6c:
c6:bc:5c:ca:56:b7:2a:e5:af:7e:e0:8b:dd:a5:96:
f1:ca:db:36:9a:a7:14:4f:36:33:7b:01:a2:81:1d:
f1:2d:bf:fe:ed:cc:c9:cb:aa:ad:09:ff:2a:de:17:
7a:81:e9:d5:55:66:45:e2:09:be:b0:4b:7a:b7:66:
4e:c9:02:8e:1b:8b:1a:f0:f7:81:d1:56:59:9b:41:
07:bf:c2:21:a9:9f:ce:e3:d8:7a:9d:07:7e:ec:d1:
47:ea:41:43:46:12:50:6d:8e:10:73:ed:61:f7:9c:
92:d7:31:e6:07:c0:75:c4:0b:61:a9:c0:f7:bc:6c:
0c:1a:e2:1e:89:a5:8b:a1:96:91:ac:68:2b:ec:5c:
a9:cf:ea:95:d1:12:a5:25:21:5d:b4:08:66:77:06:
06:2e:d8:30:5f:83:2e:34:81:15:62:e7:72:90:18:
a7:a4:c6:3c:dc:a1:1b:24:05:17:c0:70:8f:ad:94:
96:17:ea:6b:84:7d:6f:82:ab:0a:cc:e6:96:9f:4a:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:45:8E:F1:EC:51:F0:53:26:FE:46:F4:AA:FB:23:5D:1B:76:72
X509v3 Authority Key Identifier:
keyid:37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1ae::/44
Signature Algorithm: sha256WithRSAEncryption
69:25:3b:e7:fd:b5:57:fc:42:e8:ac:57:6f:07:03:56:36:e3:
91:5d:88:07:e1:b7:16:6f:e4:91:de:60:58:f4:3f:9a:bf:70:
c0:95:18:b5:2b:e3:a6:7f:f3:c9:87:d9:95:dd:40:c1:97:de:
34:46:35:a9:86:2b:dc:e1:41:5c:a5:c9:b0:16:b2:38:32:51:
a7:ab:65:21:2f:1e:a2:60:58:46:6f:df:7b:14:18:c4:06:0e:
20:61:f5:53:b4:18:94:83:a4:99:1f:15:be:21:05:71:f3:94:
8a:8b:5b:fd:0a:95:88:ba:45:5b:b6:a7:6a:25:78:bd:47:57:
46:a5:02:b5:83:b3:b6:3f:eb:95:10:ad:21:02:34:38:07:42:
26:5b:a2:c0:79:28:10:ea:6e:b1:c3:77:b5:85:28:5b:23:d5:
da:79:a4:1f:7c:75:02:b9:7e:24:48:31:08:e0:a8:ad:0b:d3:
c5:74:66:b9:8c:e8:bb:94:f3:3b:6d:cf:0e:56:13:f5:46:41:
14:07:6e:36:72:26:25:ff:d4:5d:db:ec:75:1f:16:09:93:6b:
f8:67:b6:66:2b:be:8b:a7:f9:da:10:c8:cc:02:37:15:fc:ce:
ef:af:05:dd:e7:3f:20:ef:24:03:6a:2c:3f:e9:c2:37:4c:c2:
21:31:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:15 2025 by rpki-client