Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: spVojjQQMAGhFYhvnlQpsQUvMbjPLyS0kk0l6Yil1rs=
Subject key identifier: FA:83:B3:B5:7F:DA:66:77:42:F8:E0:7C:23:6F:BF:36:95:BD:60:5D
Certificate issuer: /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial: 3B48E0AB49B2CB30E64D350C2C30FD41885DEC8C
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 05 Mar 2024 18:18:51 +0000
ROA not before: Tue 05 Mar 2024 18:13:51 +0000
ROA not after: Tue 04 Mar 2025 18:18:51 +0000
asID: 14080
IP address blocks: 2801:11:c800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:48:e0:ab:49:b2:cb:30:e6:4d:35:0c:2c:30:fd:41:88:5d:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Validity
Not Before: Mar 5 18:13:51 2024 GMT
Not After : Mar 4 18:18:51 2025 GMT
Subject: CN=FA83B3B57FDA667742F8E07C236FBF3695BD605D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:82:e0:9c:6c:41:b6:da:bf:c0:36:43:df:
fc:b5:94:95:45:1c:51:1a:29:a9:d7:0f:f1:1d:c0:
5d:5e:40:a4:1f:36:9e:b2:6f:8e:2d:4b:f7:ca:2d:
e2:0f:67:af:45:74:81:50:2d:d7:be:e2:43:46:4b:
40:d6:a5:c5:6d:00:54:9d:c6:09:c0:f9:b8:7e:a7:
a2:a1:a2:b4:ae:2b:d0:65:c9:19:49:bd:5a:1a:15:
56:c9:f4:e5:ef:d5:79:d4:da:44:29:38:a6:86:b0:
74:a5:34:8b:1c:d6:ca:7f:c6:6e:dc:53:4d:ee:fb:
40:37:89:a7:1a:41:93:75:1c:71:a1:65:cb:e7:20:
b6:42:41:f8:e0:e9:b6:c6:6b:05:8e:ac:85:7d:d0:
93:c4:68:c0:0e:d2:5c:e1:2b:b5:a3:a7:9a:d6:ff:
26:da:e6:dd:86:7b:42:74:cd:fe:a1:c9:d9:dc:7f:
3d:35:20:4b:3e:e3:27:81:27:d4:1e:9d:a3:5c:01:
2f:fe:54:ff:26:34:d3:b4:05:ba:dc:4b:a7:04:61:
cf:27:eb:99:93:de:8d:61:d9:4a:1a:6c:c1:b8:a8:
92:c3:56:bd:82:48:ee:1c:f1:74:a4:5c:ab:2d:ff:
00:0a:31:24:73:48:aa:0e:35:1c:14:39:8d:b0:5e:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:B3:B5:7F:DA:66:77:42:F8:E0:7C:23:6F:BF:36:95:BD:60:5D
X509v3 Authority Key Identifier:
keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11:c800::/48
Signature Algorithm: sha256WithRSAEncryption
49:98:5f:da:ad:76:2d:25:ee:e7:4d:e2:ea:86:18:13:67:0f:
43:d4:c1:22:a9:c9:eb:b9:28:59:45:f9:04:92:e9:56:d9:45:
b6:c1:6e:4d:3c:ed:0a:d2:ee:f5:c1:50:b6:f8:90:bb:48:88:
c5:c1:a1:5d:df:78:18:4d:29:99:1f:ce:ec:d1:0c:39:61:1b:
4c:00:c0:a4:eb:91:a9:8c:a8:b3:af:bb:ed:3f:12:4a:e3:13:
9e:d8:12:3d:43:48:e3:bc:c2:7c:0e:a4:e6:38:fa:23:41:1f:
19:b3:d2:52:54:32:07:d9:17:f3:ed:26:0f:df:56:c6:e2:1d:
1a:c9:db:d3:e2:46:05:22:55:f0:a2:6d:75:19:2b:ef:fb:b8:
de:68:c3:83:7a:60:84:2e:59:96:e1:67:b1:b6:01:ab:a0:31:
a9:aa:18:87:e2:94:a6:85:9f:e4:2c:c0:18:de:26:6f:d3:e9:
b5:70:2e:f8:b1:e5:74:33:b9:ee:1a:23:21:f5:86:a6:bd:b2:
b0:b7:7d:aa:bc:ab:d9:9c:00:3b:73:67:2c:4d:f1:be:39:8b:
6a:14:7b:bc:37:c6:b2:bd:e3:a2:65:e6:b7:82:6f:bb:b9:c0:
15:7c:2d:b3:a5:25:df:4d:eb:68:2f:15:e4:c5:f6:66:a4:39:
11:7f:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:12:48 2025 by rpki-client