Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: JZcGx5Kg1CrX2n+8lFil4Z7qMTemjhY2zbREe+fLNxw=
Subject key identifier: C3:67:A4:27:9E:1C:E6:E9:FC:57:9B:F8:50:86:FE:2A:EE:E1:DE:1A
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 6B62724B22219AAE8AA344E9BF9A59C72FA25672
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 05 Mar 2024 17:54:03 +0000
ROA not before: Tue 05 Mar 2024 17:49:03 +0000
ROA not after: Tue 04 Mar 2025 17:54:03 +0000
asID: 273041
IP address blocks: 2801:1a5:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:72:4b:22:21:9a:ae:8a:a3:44:e9:bf:9a:59:c7:2f:a2:56:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Mar 5 17:49:03 2024 GMT
Not After : Mar 4 17:54:03 2025 GMT
Subject: CN=C367A4279E1CE6E9FC579BF85086FE2AEEE1DE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:8b:90:57:70:93:66:1a:66:23:53:82:78:
07:38:6c:f2:26:95:a9:b2:76:55:07:02:d5:43:30:
de:5e:44:13:bf:9a:02:8d:7d:8c:10:7b:41:97:8c:
ce:65:1b:2c:55:3d:80:6b:6d:b2:19:ba:61:95:c6:
ca:65:75:3a:93:e1:fd:80:87:45:ac:5c:8c:6b:c1:
eb:be:21:23:bf:76:9d:07:d2:3d:d0:e8:a4:bc:f1:
d6:a5:2c:dd:8d:cc:70:65:b4:62:e9:e8:f3:cb:3e:
57:0d:5d:dd:dd:3d:56:5d:3c:de:dc:72:5f:92:72:
a8:b4:dd:49:10:d8:e7:a1:2d:d4:b7:60:b5:12:d8:
23:f7:1f:93:41:a8:1b:ce:89:e3:a2:13:1b:3d:74:
63:d0:59:c5:b6:d2:48:0e:eb:94:61:63:75:c9:cb:
f5:2c:6b:69:63:8e:73:41:fe:75:75:64:4f:27:48:
48:20:73:ae:22:0f:4e:3a:5d:ec:13:52:08:49:e2:
b9:0e:f9:da:21:a1:5d:6f:e3:e9:d1:73:56:a5:a7:
40:46:f6:78:20:90:a0:68:45:bd:b8:e9:43:d9:f7:
47:be:a1:b3:6e:29:c9:16:84:6f:bf:82:6b:76:ec:
86:42:70:20:cc:97:8a:df:75:b3:c3:f2:13:df:62:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:67:A4:27:9E:1C:E6:E9:FC:57:9B:F8:50:86:FE:2A:EE:E1:DE:1A
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:b9:75:28:b4:f8:27:16:bc:bf:04:4e:1f:7b:f4:2f:63:33:
7f:25:2b:c0:4a:b8:9b:9a:cb:e9:18:f4:16:d0:7a:e4:93:8b:
6c:fb:9e:26:f8:ac:7b:a8:40:58:ec:b2:2b:e5:a5:28:d1:36:
aa:dc:61:1d:b1:10:02:f6:96:e3:2e:ef:aa:f4:bc:c3:1a:d8:
e0:43:d0:d1:24:0a:3e:55:30:67:ee:50:4e:20:af:9a:f8:5e:
a7:f0:78:15:18:c7:0d:39:ea:f5:95:7b:f2:cc:4b:90:6d:1b:
73:56:dd:83:45:30:be:c6:03:97:48:6d:4f:61:a6:81:a6:b7:
d3:dc:4c:11:5f:26:1f:d9:b9:1a:3c:a7:9f:18:54:ed:e1:b6:
de:a7:54:8f:ee:bf:ab:61:9b:43:e8:c3:07:11:57:d9:25:a5:
4d:5d:58:d1:59:f7:e7:d9:9b:46:b2:78:55:eb:2e:f0:95:e6:
e9:45:35:99:84:10:e2:cf:d0:ff:0b:83:7c:90:07:67:28:1e:
a6:3b:cf:61:01:a7:f4:b4:a6:d3:4b:92:e0:8c:6d:ae:9b:78:
f6:91:3b:d8:f8:a0:77:e2:58:ea:e6:c9:4c:fb:e3:c6:34:c2:
76:9b:34:aa:c3:7c:f4:3b:b7:2b:37:ad:94:c2:44:ff:6c:aa:
23:91:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:35 2025 by rpki-client