Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa
File: 323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa (raw, json)
Hash identifier: FnwBZ8xEFoGD0YENnXjjxA2dJGY+abe7R0q/b5De/e0=
Subject key identifier: 91:D1:EF:EA:CB:B9:08:F9:57:10:87:24:C6:DF:BA:F4:0F:3E:8E:16
Certificate issuer: /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial: 478871D336748E8D5827836BE44E45A3012881DF
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa
Signing time: Tue 04 Feb 2025 18:46:37 +0000
ROA not before: Tue 04 Feb 2025 18:41:37 +0000
ROA not after: Tue 03 Feb 2026 18:46:37 +0000
asID: 272136
IP address blocks: 2801:109:4::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:88:71:d3:36:74:8e:8d:58:27:83:6b:e4:4e:45:a3:01:28:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
Validity
Not Before: Feb 4 18:41:37 2025 GMT
Not After : Feb 3 18:46:37 2026 GMT
Subject: CN=91D1EFEACBB908F957108724C6DFBAF40F3E8E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:f6:a2:e7:3d:c9:ef:35:bb:fe:ce:30:df:
fc:6a:6f:0a:c4:a5:74:9a:ab:2e:5e:91:bb:59:68:
bd:ae:60:0b:06:db:7e:23:ba:dc:eb:da:df:9a:2f:
2a:d0:85:10:3a:59:39:33:b4:a9:c1:7e:ed:45:16:
79:91:9f:b7:06:15:f5:a1:17:c0:b8:d9:05:69:0e:
33:55:44:7e:d5:14:bb:94:a9:9b:4f:a4:29:e0:ff:
67:10:23:24:c9:9c:70:a5:03:e4:c7:22:b3:5f:a4:
cd:0a:1e:30:b0:35:cf:eb:f0:1e:3d:df:d2:48:36:
4c:75:0a:b6:d7:03:bc:92:91:0f:57:0d:dd:58:ff:
c0:62:4e:1a:6f:6e:48:32:c1:b1:3d:6e:81:ff:0c:
ad:8c:d7:4a:78:08:93:7c:14:f5:0b:9e:11:f1:d5:
ea:7f:f9:7a:f8:72:30:ee:6d:00:43:60:0d:26:ac:
b9:1f:28:a0:a6:4b:79:81:c3:79:b9:9e:8f:0d:d9:
2d:32:49:92:02:19:b1:26:42:bb:a7:27:15:66:f6:
9d:ad:c0:5a:06:45:ce:35:dd:2b:94:33:ea:ac:96:
ca:cf:72:2a:8b:29:2e:03:6a:4a:6f:c3:df:2c:55:
a8:13:4a:06:a1:7c:e8:06:86:09:3e:ad:10:05:3d:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:EF:EA:CB:B9:08:F9:57:10:87:24:C6:DF:BA:F4:0F:3E:8E:16
X509v3 Authority Key Identifier:
keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:109:4::/46
Signature Algorithm: sha256WithRSAEncryption
36:e1:b5:fa:cd:97:d1:fa:33:3e:09:a5:12:09:d0:19:8d:21:
50:b4:0c:8b:b7:91:a2:6d:1e:27:62:ef:ee:03:91:1e:58:6a:
91:77:bf:b7:26:fb:01:b1:4e:75:ff:c1:d4:2c:bb:7f:04:4e:
33:51:21:78:85:13:12:6b:00:a2:1b:42:72:47:92:4d:39:96:
2d:70:2d:31:71:d9:62:fb:70:cb:89:72:42:4f:72:6f:a2:c9:
fd:fc:23:7e:1e:a3:20:c1:21:e5:db:70:7f:b8:76:1a:ff:47:
74:1a:17:f9:2f:64:39:c6:65:08:93:e6:62:90:7b:6c:ab:b8:
1e:a7:d7:47:ac:af:87:88:e2:60:04:2b:14:d5:a2:70:f6:60:
1d:65:33:48:2e:c2:11:2a:14:6b:2d:49:4d:6f:09:f4:b7:e5:
68:73:09:42:fb:0c:af:7e:a3:14:4c:a9:38:85:83:f6:92:34:
8c:17:06:e8:30:dd:7e:78:5f:d0:66:f0:aa:95:48:dc:c0:a5:
84:ce:1d:7a:d0:0f:97:71:ac:75:00:26:ea:f5:c2:da:cd:17:
8f:36:6a:8b:99:1e:55:ca:14:e1:80:dd:2d:0c:5a:71:af:10:
31:e3:31:04:38:1d:48:a3:7a:5d:84:1a:7f:ac:ca:6d:d2:32:
06:65:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:48 2025 by rpki-client