Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa
File: 323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier: Yfok4D0GJfvkOBYXcl5YTCFS/JHMwoxBE01DI3cAWMQ=
Subject key identifier: FA:7E:8F:BD:2C:AE:9C:60:C7:43:EC:48:64:88:3E:2F:AC:0E:C8:AB
Certificate issuer: /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial: 33006E631C13330017150DDF040AD3215B18E5EA
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa
Signing time: Tue 05 Mar 2024 17:48:58 +0000
ROA not before: Tue 05 Mar 2024 17:43:58 +0000
ROA not after: Tue 04 Mar 2025 17:48:58 +0000
asID: 61461
IP address blocks: 2803:d700:9a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:00:6e:63:1c:13:33:00:17:15:0d:df:04:0a:d3:21:5b:18:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
Validity
Not Before: Mar 5 17:43:58 2024 GMT
Not After : Mar 4 17:48:58 2025 GMT
Subject: CN=FA7E8FBD2CAE9C60C743EC4864883E2FAC0EC8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:a4:a6:10:f5:3a:9e:71:01:7f:04:af:a9:
5b:1c:06:74:e4:00:20:da:aa:59:1e:f9:5b:17:2c:
8b:ab:23:ba:0f:47:35:10:b1:07:af:e8:95:76:88:
15:b2:9b:14:b7:0d:d1:bf:6a:7f:2f:bb:43:05:43:
94:8b:11:4e:e3:8e:a2:57:e9:24:36:97:5b:03:44:
52:f9:60:26:1f:b2:08:cb:fb:22:65:40:1b:10:c2:
a3:cb:af:b8:f2:05:5a:3f:ff:95:e7:56:19:be:c4:
83:5f:d8:21:70:95:e6:5f:91:6a:1d:19:6c:10:bc:
7f:7e:77:fd:9d:e5:be:f3:2c:a6:53:4c:df:0b:aa:
5a:eb:a8:3c:76:f1:a1:38:7c:53:cc:ef:ee:4e:5c:
c0:f4:a0:07:bd:2c:2b:31:90:0f:86:bc:4e:ce:f9:
c8:2a:90:0a:97:43:d7:5d:29:e0:b7:9c:66:47:6b:
3b:31:c1:7c:07:4c:88:56:b6:e7:53:d6:43:5f:24:
55:f9:f6:40:df:10:c8:09:13:25:65:6c:7a:a9:3b:
7c:18:36:36:32:56:f7:c1:5f:dd:a1:d4:15:e4:86:
bc:89:db:87:de:1f:65:f0:7d:f1:75:95:e9:5e:39:
fc:30:e3:76:95:81:69:20:01:7a:04:93:8a:f0:33:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:8F:BD:2C:AE:9C:60:C7:43:EC:48:64:88:3E:2F:AC:0E:C8:AB
X509v3 Authority Key Identifier:
keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d700:9a00::/40
Signature Algorithm: sha256WithRSAEncryption
a2:79:08:ae:38:6d:25:3b:b3:14:a3:0d:7f:67:18:6b:22:40:
48:4a:f7:a5:c9:39:8c:33:93:d4:56:af:3a:41:42:a5:13:b5:
a4:57:e1:e9:de:69:65:ca:ba:a3:bf:e9:61:08:1f:55:71:8f:
7b:ba:9b:70:56:f8:8a:37:5d:3d:65:d9:a0:88:4f:78:59:3e:
cb:42:02:3d:f1:41:ef:c2:5c:e7:7d:51:be:95:d0:66:3c:4c:
d8:63:64:bc:6c:63:22:09:bd:53:6e:53:35:78:4d:c5:91:5e:
71:44:70:b3:75:58:c7:6d:54:ea:cd:bc:c5:d1:3e:f2:fa:d0:
1d:d9:a9:9b:2e:bf:a8:95:8d:d3:9e:c8:23:d0:67:74:48:8c:
d2:a1:7a:78:61:05:b1:73:aa:69:10:57:04:f0:e9:7c:f4:5b:
19:e2:79:d2:40:aa:88:4b:f9:9e:bc:63:5e:65:1a:c9:2d:3e:
9c:eb:ab:31:53:a9:74:55:11:5c:2f:93:ce:14:35:48:75:47:
4c:8d:c6:6d:f6:fb:9c:fa:30:9b:ea:ff:51:ec:42:7e:0f:b4:
fd:aa:1a:7d:16:33:bf:b2:8f:66:9c:27:cd:81:90:8a:85:28:
cd:2a:64:ef:14:79:b7:4d:44:c3:fd:43:75:cb:64:de:9e:d0:
f7:d6:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:12:12 2025 by rpki-client