Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa
File: 323830333a373236303a3a2f33322d3438203d3e203532323338.roa (raw, json)
Hash identifier: lDZWw/MI/+apRu1d0DlpQ5oFdNJWmibVmWnsGhugUts=
Subject key identifier: 4E:D5:07:73:AD:A5:49:FF:9B:E9:DF:D2:73:4A:9F:70:C4:53:10:10
Certificate issuer: /CN=648541E68129C9782F979C83A78D0CB38FE6503F
Certificate serial: 10D803B6C9B6C28754C5130B8B296986A3A7B4CF
Authority key identifier: 64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa
Signing time: Tue 04 Feb 2025 18:03:17 +0000
ROA not before: Tue 04 Feb 2025 17:58:17 +0000
ROA not after: Tue 03 Feb 2026 18:03:17 +0000
asID: 52238
IP address blocks: 2803:7260::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d8:03:b6:c9:b6:c2:87:54:c5:13:0b:8b:29:69:86:a3:a7:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=648541E68129C9782F979C83A78D0CB38FE6503F
Validity
Not Before: Feb 4 17:58:17 2025 GMT
Not After : Feb 3 18:03:17 2026 GMT
Subject: CN=4ED50773ADA549FF9BE9DFD2734A9F70C4531010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:a8:71:71:cc:2b:87:2a:6d:3e:10:db:21:
e4:94:c0:07:0f:5d:20:7b:86:14:de:df:2b:77:43:
07:0c:17:54:2a:ea:7e:67:56:fe:8c:a6:d4:f7:1c:
53:d0:aa:a9:89:ce:f0:52:5b:dd:07:07:32:9d:e0:
b3:df:75:db:a6:07:97:cd:46:08:18:c9:bd:3d:c5:
5f:ce:fc:eb:30:5b:36:7c:7e:6b:07:e0:d9:67:df:
80:c3:62:6a:06:04:b9:c7:90:f2:4b:8b:7a:c2:15:
08:cc:75:50:b4:97:7b:3c:3b:97:0d:7d:7d:a6:dd:
04:5a:fa:ce:2d:5a:cf:21:d9:ab:68:4b:62:92:57:
f8:33:14:e8:7d:74:65:de:13:6c:b0:a6:13:db:bf:
45:6f:ba:7d:52:9e:23:86:e9:0d:d7:68:dc:c8:23:
8c:c7:55:65:0d:69:cc:17:ef:fe:23:d5:5b:5c:16:
19:04:56:62:93:20:c7:95:51:74:76:f9:a1:4d:97:
45:17:7d:cc:2f:5d:cc:d3:09:cc:c5:46:76:ae:71:
69:3b:6f:11:a1:b8:ed:ad:79:e8:86:09:54:6a:23:
73:00:8b:81:c1:54:9e:45:84:00:68:cc:db:2c:53:
05:9d:02:8c:0c:db:09:d3:15:35:52:87:37:51:3f:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:07:73:AD:A5:49:FF:9B:E9:DF:D2:73:4A:9F:70:C4:53:10:10
X509v3 Authority Key Identifier:
keyid:64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7260::/32
Signature Algorithm: sha256WithRSAEncryption
20:75:d3:ff:91:92:c9:df:bd:ec:aa:54:7c:dd:f1:97:d0:a9:
e9:40:87:93:44:35:80:8c:5e:00:ca:c4:36:93:45:ed:6a:a7:
cd:fc:9c:64:60:24:bb:cc:28:31:7d:73:b9:10:cc:9a:3f:43:
10:89:ca:d6:6a:cc:83:60:75:5c:31:3f:0b:8c:c9:30:6e:84:
2f:40:4e:3b:59:91:72:ee:8c:1a:91:0b:2d:88:48:36:03:ce:
93:ec:c7:92:6f:0b:69:cb:2b:9d:1f:e6:b4:38:cc:29:2c:c7:
01:d9:d5:3f:ff:10:e4:7b:84:ce:93:c5:86:72:4c:74:93:8d:
81:ae:75:e1:ac:c7:58:74:8a:12:fa:ec:da:bf:62:9a:ce:e5:
b5:8d:36:d0:30:52:9a:b7:ee:43:90:71:84:1e:82:db:60:e2:
e6:94:a6:fc:87:97:73:30:f4:d1:49:b4:12:7c:15:47:5f:63:
e6:ab:24:db:42:2c:6a:e6:1d:83:2f:96:25:34:eb:5f:58:05:
34:a1:b2:aa:9b:97:48:4e:e0:31:28:67:bc:ce:59:f9:29:56:
ed:6c:aa:35:c3:57:cc:13:4a:50:5c:de:1f:09:57:b2:85:7d:
04:dd:82:94:98:07:c2:d4:f5:b9:f0:6f:1c:b9:ec:c4:98:50:
e3:2e:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:22 2025 by rpki-client