Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
File: 323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa (raw, json)
Hash identifier: /UH9vWiGAPEF8eS++Oska4MZabFLnaW0NzY4V2TEktk=
Subject key identifier: E1:7E:54:FE:23:4A:B9:17:94:0C:CD:7E:7A:29:1D:39:81:C3:5A:0B
Certificate issuer: /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial: 3AECE5FA999FB8FED87A287D920F67730F205CB9
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
Signing time: Tue 05 Mar 2024 18:01:50 +0000
ROA not before: Tue 05 Mar 2024 17:56:50 +0000
ROA not after: Tue 04 Mar 2025 18:01:50 +0000
asID: 61471
IP address blocks: 2801:11:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ec:e5:fa:99:9f:b8:fe:d8:7a:28:7d:92:0f:67:73:0f:20:5c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Validity
Not Before: Mar 5 17:56:50 2024 GMT
Not After : Mar 4 18:01:50 2025 GMT
Subject: CN=E17E54FE234AB917940CCD7E7A291D3981C35A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:35:56:15:e2:05:a6:15:04:c8:42:6d:1c:
71:bd:6c:ea:b5:e9:ec:62:cc:20:0c:d9:50:b0:9b:
e5:01:ab:e2:52:21:3b:39:2e:d7:48:c0:c4:b1:ab:
84:69:4f:1d:16:ee:47:05:d5:93:22:a8:73:33:8f:
7a:40:8f:b7:f0:d1:d4:0f:c1:1c:38:96:22:5b:7c:
80:aa:ec:11:d7:8f:ac:cc:f1:cf:a8:b5:5d:c7:2a:
12:5a:93:e4:73:b4:46:fd:00:da:81:77:ba:88:d9:
ad:f9:1a:e2:2b:bc:bb:ac:05:65:e9:53:55:2c:0d:
41:30:91:fb:3c:7d:4c:f1:8a:c8:61:b7:26:5c:14:
67:ab:a5:bb:af:e9:82:77:ce:0d:d8:e2:68:eb:05:
f9:b3:71:36:b5:77:fa:60:ca:ef:f3:4e:50:e5:57:
19:f6:c5:97:0d:37:0d:31:8b:76:cd:04:e8:a2:5e:
f4:f7:3a:49:77:d0:e8:a3:ec:4e:03:3c:10:41:37:
d1:52:b7:0b:c8:71:02:1a:98:a9:06:2c:fb:5d:f3:
e0:6a:79:8c:fd:96:cf:cd:4b:28:1c:11:2e:3e:5e:
ca:a8:f0:19:b1:b5:0f:c2:e5:60:ae:4a:5c:65:0c:
00:92:0d:cd:ba:bc:9f:0c:a8:b8:c0:ee:9f:b5:8c:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:54:FE:23:4A:B9:17:94:0C:CD:7E:7A:29:1D:39:81:C3:5A:0B
X509v3 Authority Key Identifier:
keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11:a000::/48
Signature Algorithm: sha256WithRSAEncryption
a5:81:d0:35:43:81:d9:33:cf:1b:7a:11:f9:1e:60:a4:23:7b:
84:a5:31:b5:f9:95:98:df:af:dc:47:ec:1d:7d:08:4d:8e:c1:
d6:b8:ca:02:fe:a3:c8:81:9d:cf:f4:e5:1f:9d:27:c4:27:a1:
cf:19:f6:bb:6a:f3:41:98:98:fc:cc:bb:7f:06:5c:8a:81:c9:
88:13:d0:b1:54:8c:33:77:36:23:8d:75:40:1c:8b:18:d8:d7:
4c:6a:95:ef:e4:3e:b0:48:7b:57:65:47:53:2b:4e:3e:9f:4a:
c1:6a:b8:48:9f:3b:4f:d5:69:8c:e3:b9:95:c1:14:0e:4c:fc:
54:b5:35:d9:c7:c3:99:d3:8e:55:55:be:5d:31:6d:2e:54:74:
1c:d2:44:e9:03:aa:af:bb:d6:06:04:c2:d1:66:2a:a7:7c:79:
bd:10:54:0a:86:0a:fa:8c:6f:db:e6:be:95:db:d3:58:c9:00:
98:55:e0:65:71:5c:11:93:1f:ef:f4:56:ee:5d:b3:f3:22:43:
c3:90:a1:e2:ac:d9:82:ff:e0:cf:2e:ef:ed:30:d4:8d:1e:b4:
82:c0:08:1f:09:95:a1:d4:ef:b8:b7:92:ae:cb:12:51:06:7e:
2b:50:51:11:73:b9:77:62:be:cb:a1:f8:fa:5d:67:5e:b2:b1:
da:53:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:58:19 2025 by rpki-client