Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/323830333a656663303a3a2f34382d3438203d3e2033353439.roa
File: 323830333a656663303a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier: RUYuSqL41mh6JLc6A/Lgzm6//aNMRYvEkAlcQhccqxM=
Subject key identifier: D3:DE:81:9E:D4:E3:69:18:81:F0:08:66:93:C1:7A:FD:91:E8:97:AF
Certificate issuer: /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial: 5AE872E5B3C1C58C545D26533F919D2F17CB3877
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/323830333a656663303a3a2f34382d3438203d3e2033353439.roa
Signing time: Tue 04 Feb 2025 18:38:25 +0000
ROA not before: Tue 04 Feb 2025 18:33:25 +0000
ROA not after: Tue 03 Feb 2026 18:38:25 +0000
asID: 3549
IP address blocks: 2803:efc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e8:72:e5:b3:c1:c5:8c:54:5d:26:53:3f:91:9d:2f:17:cb:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Validity
Not Before: Feb 4 18:33:25 2025 GMT
Not After : Feb 3 18:38:25 2026 GMT
Subject: CN=D3DE819ED4E3691881F0086693C17AFD91E897AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:7c:13:f4:4c:31:bd:b7:7e:eb:7d:01:ba:
7c:6d:29:e1:43:92:0d:4d:d9:88:65:59:91:ab:89:
fd:87:3d:26:22:88:aa:cb:dc:ad:a4:cf:b8:f1:67:
95:56:ff:dd:84:3f:0f:45:cf:7b:2f:6f:a3:cd:4c:
0c:97:25:bf:df:6f:4f:0b:13:13:fa:a7:ee:b8:2f:
c3:19:f0:86:7c:bc:c2:6f:e1:2b:2a:4e:b3:0f:73:
e7:30:a1:7d:24:91:fe:eb:b5:72:8c:d1:67:c1:fc:
a7:6b:7d:4e:5c:d4:94:fc:9e:a6:f5:ff:07:4b:bb:
47:47:64:0c:b3:ea:de:22:f7:39:3d:d0:17:32:e2:
11:77:83:0a:c7:60:ae:aa:bd:f7:f9:a5:6a:48:bd:
88:84:21:76:4b:67:3a:15:a8:63:de:15:67:e6:9b:
83:cd:30:ac:54:f3:49:ea:76:13:3a:a2:22:8f:1f:
f0:a6:63:e3:7c:f5:2c:eb:50:82:3c:ca:43:b7:fc:
e3:69:5a:b7:9a:c6:8f:ed:58:c9:87:bd:3a:88:d0:
6b:1c:86:b9:06:d2:27:5a:86:fe:14:d9:1c:fa:17:
e1:ad:dc:16:0d:b9:87:d3:68:fa:ea:e0:7c:04:6a:
e3:31:f7:93:09:77:0b:c8:02:2d:da:4a:9c:07:fc:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:81:9E:D4:E3:69:18:81:F0:08:66:93:C1:7A:FD:91:E8:97:AF
X509v3 Authority Key Identifier:
keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/323830333a656663303a3a2f34382d3438203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
d3:64:61:95:66:f2:d8:f7:11:52:fc:eb:b1:5a:0b:f2:b8:0c:
56:55:44:ec:6d:88:b7:1a:f5:c8:50:11:aa:97:29:9b:40:58:
3c:03:ad:3a:68:99:c9:da:08:9d:e0:4b:f8:c2:b0:f0:d4:7f:
f5:37:bb:ab:ee:9a:dc:03:8b:70:21:5b:55:2d:ac:a2:72:28:
e1:58:a6:d3:de:91:b2:85:30:1f:0c:de:df:ff:02:b7:a3:01:
a1:b3:b1:98:be:f0:b3:09:7e:13:87:83:8f:68:1a:21:9d:fb:
5d:bd:95:7b:51:5a:d9:e6:e2:54:53:48:a0:cb:30:9e:ce:b8:
e8:8e:a7:38:f4:1a:92:3c:8a:cc:10:b8:33:1a:80:2e:7f:04:
1d:4e:1e:01:f3:b4:bd:0b:4f:44:e9:c2:64:40:03:d4:94:5c:
0f:03:0d:d0:1f:ca:0f:cf:b6:02:72:43:c5:2b:e2:e4:9b:78:
64:ec:5f:93:56:2d:eb:8a:74:35:31:fc:54:43:94:95:a9:9d:
82:68:9c:6b:f1:8f:b2:0c:bc:0c:e9:66:8f:e8:43:d3:18:e3:
9e:e4:f6:a2:8f:54:e3:8c:88:b2:31:a7:96:be:f8:c3:ca:71:
a8:8c:23:58:22:10:96:e9:ad:7a:30:c7:81:b4:f4:83:fd:88:
7e:3b:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:10 2025 by rpki-client