Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
File: 323830313a3163303a3a2f33392d3430203d3e203532343234.roa (raw, json)
Hash identifier: MvrXPSYnBNEvFOnzGQX3lIUb2HnfnSCkFv8+nVkmtGM=
Subject key identifier: 3E:6C:8D:17:A8:93:87:0F:4C:41:6E:A3:F1:0F:56:94:C9:C2:72:01
Certificate issuer: /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial: 4105CFC08CB8FA83C6850DEC5FD6496BFF06A68E
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
Signing time: Tue 05 Mar 2024 17:53:15 +0000
ROA not before: Tue 05 Mar 2024 17:48:15 +0000
ROA not after: Tue 04 Mar 2025 17:53:15 +0000
asID: 52424
IP address blocks: 2801:1c0::/39 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:05:cf:c0:8c:b8:fa:83:c6:85:0d:ec:5f:d6:49:6b:ff:06:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Validity
Not Before: Mar 5 17:48:15 2024 GMT
Not After : Mar 4 17:53:15 2025 GMT
Subject: CN=3E6C8D17A893870F4C416EA3F10F5694C9C27201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:dc:8c:20:e9:90:ac:e0:d6:1f:a8:0c:14:
74:60:92:45:58:ea:86:05:dd:a2:17:ea:93:ed:72:
47:76:23:33:3f:ed:f5:8c:cf:87:c6:15:db:92:ce:
30:e8:d3:07:a9:90:d9:4c:ec:2c:45:26:cf:4f:54:
54:79:28:6b:e3:7d:e8:e2:32:82:3b:f5:31:7b:1c:
f4:ca:c0:e5:49:0d:ba:e0:b0:bf:7a:28:fc:ca:ff:
a5:0d:0c:6c:41:5a:7d:9f:6b:92:cc:77:19:c2:a4:
56:97:0d:c3:a4:d3:bd:cd:37:8e:62:b9:d1:ea:62:
f9:fc:5d:f7:36:98:f0:87:96:cc:5d:17:96:e3:ea:
f4:bb:72:cd:dd:68:a0:eb:bb:34:f6:04:b2:6a:db:
03:9d:bf:78:76:f2:c8:be:b9:0d:fc:2b:f4:8a:3b:
97:14:8e:ee:77:ea:ff:5b:4a:f7:49:0c:50:56:b5:
5a:60:61:ce:a1:e0:40:be:96:4d:22:0c:3e:8b:34:
4d:34:5f:ff:26:54:2a:c3:30:48:7d:22:4a:31:31:
05:4d:a9:5a:00:86:56:40:63:1c:30:67:2d:9c:21:
fd:5d:c0:f0:6a:13:3e:f7:4d:54:d7:46:4f:b4:27:
af:42:09:50:0e:49:b2:e9:77:3d:7b:38:38:05:76:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:8D:17:A8:93:87:0F:4C:41:6E:A3:F1:0F:56:94:C9:C2:72:01
X509v3 Authority Key Identifier:
keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c0::/39
Signature Algorithm: sha256WithRSAEncryption
72:5d:26:cd:e5:f5:87:e7:21:6f:e0:a8:65:e1:ab:25:fc:ef:
3c:d8:cd:0c:fd:e9:a1:1e:c1:c6:1e:9b:54:e4:d9:69:17:d0:
1f:3a:1e:52:2f:98:33:e5:9c:0c:4b:d3:44:85:9e:31:9d:d8:
00:46:65:88:81:f6:ec:75:ab:1c:5f:c7:fb:6d:f3:c3:43:8b:
c8:f6:84:01:37:bc:88:3a:b1:10:2e:df:13:11:51:3f:e3:ff:
34:85:b8:56:a9:34:92:fd:84:02:ea:22:67:e1:f1:66:cc:6e:
4b:c6:1e:2c:aa:e3:47:b2:d9:c0:e3:25:45:98:b1:09:31:28:
16:9b:1e:76:fb:a0:99:97:a5:cf:18:dc:47:e4:23:e8:1c:0f:
15:f2:e6:c3:4c:fe:1c:02:88:e9:75:09:9e:87:50:4f:6c:dc:
1f:0c:d5:29:c0:e7:d2:3c:22:43:b8:6e:bb:e4:a3:97:a4:db:
1a:b5:d4:f7:4e:a7:bb:68:53:52:6b:04:54:49:20:55:7b:3d:
1a:f8:0d:62:a5:67:58:29:2f:ba:cd:26:25:64:52:84:7d:72:
1f:00:b2:88:e9:8d:6e:fa:1f:bc:7d:ce:e5:a7:b2:ab:f9:52:
4c:0c:8a:7f:b5:11:44:fa:6a:25:26:98:28:57:d8:7e:ee:88:
41:83:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:25 2025 by rpki-client