Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323030303a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a323030303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: albGxe6evUoPQ8+tsFFMs6oNMM7L7+r1dBFRPYyo3/Y=
Subject key identifier: D6:1D:F8:ED:BB:2F:52:AB:81:2A:7A:9E:DA:97:11:A1:1A:99:F3:D8
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 72325C4E3C076BA1E776F40AD8BFF97893C9124A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323030303a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:34 +0000
ROA not before: Tue 04 Feb 2025 19:59:34 +0000
ROA not after: Tue 03 Feb 2026 20:04:34 +0000
asID: 262191
IP address blocks: 2800:b70:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:32:5c:4e:3c:07:6b:a1:e7:76:f4:0a:d8:bf:f9:78:93:c9:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:34 2025 GMT
Not After : Feb 3 20:04:34 2026 GMT
Subject: CN=D61DF8EDBB2F52AB812A7A9EDA9711A11A99F3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:e2:05:df:33:61:af:37:b5:32:9c:7b:1d:
fc:30:8a:82:8b:fe:1f:39:db:e6:ac:a9:a2:2b:27:
ac:ec:32:ff:53:94:81:67:f0:08:0b:c9:a6:09:23:
f7:e2:f5:c8:88:19:b3:35:78:41:36:79:55:b9:8e:
d9:f7:86:1f:72:0e:c6:7f:da:61:e7:cb:19:e3:4d:
1a:6e:84:27:c6:70:3f:0f:dc:0b:8f:fd:31:b9:42:
22:ae:e3:de:fd:9d:f6:f2:52:24:4e:09:e9:6a:9d:
49:13:58:93:9b:e8:3a:1c:bc:af:9b:be:04:6f:3f:
65:b1:3a:9f:dc:93:3a:76:6b:fd:e8:4f:1a:e0:3c:
cc:30:63:13:f1:1c:13:f2:5d:d0:aa:a4:6a:b7:56:
77:3a:48:4a:06:f7:d3:eb:54:3d:82:29:d4:cd:ef:
b1:ed:6a:f6:ec:18:36:90:ff:22:40:91:29:1a:08:
ca:d9:4e:04:d5:c5:98:fa:ef:8b:14:1e:3b:0b:95:
06:2c:f7:8d:ae:77:75:d0:2f:bc:ec:d2:b0:73:60:
3b:18:fc:85:5f:2e:d5:4b:cd:79:ac:ec:0c:3b:0b:
4d:0c:06:0f:41:86:8c:52:05:ba:77:3d:86:a7:10:
90:b3:c2:1c:d8:65:ec:05:98:f7:08:e3:1e:ea:30:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:F8:ED:BB:2F:52:AB:81:2A:7A:9E:DA:97:11:A1:1A:99:F3:D8
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323030303a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:2000::/48
Signature Algorithm: sha256WithRSAEncryption
1f:2f:7d:18:41:51:94:37:08:f6:27:8e:d3:4f:15:2b:e2:14:
39:7b:df:90:57:61:bf:af:6d:f9:c7:7a:5c:00:c5:10:7d:14:
e5:02:77:35:ea:c0:4c:ed:4f:59:ae:61:18:35:de:78:eb:5d:
06:3a:8b:e0:76:62:a6:2d:2a:f1:7c:37:34:60:39:36:15:15:
b4:2d:d4:c2:4b:e5:c6:17:66:d9:ca:40:32:2b:92:d7:95:29:
69:a2:e9:5b:28:25:f3:4c:fc:7d:c1:7e:e0:45:18:91:75:fd:
20:e8:7a:83:bf:f1:4d:13:38:9f:2c:49:b4:ac:96:06:ce:8d:
05:59:48:74:ee:64:22:21:db:27:ad:7b:e4:e2:1e:42:4a:e7:
99:ca:61:66:2d:bc:fb:99:48:e4:6c:2c:7a:11:86:a0:75:d0:
22:29:5e:4f:11:19:c9:14:66:a3:a7:7b:05:ad:13:28:eb:b6:
fd:2c:bb:9a:fe:72:4f:03:cc:ed:76:86:41:39:a9:5a:6a:ca:
50:f6:53:ef:6b:7d:0a:7f:da:01:9f:1d:ca:e6:2d:24:9d:01:
03:00:d1:3c:18:ff:ef:7b:32:45:48:b4:b8:bc:8d:51:f9:c9:
39:3f:60:c6:aa:fd:fe:9f:bc:89:24:b7:d9:10:f9:cf:4e:f0:
8b:0d:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:47:39 2025 by rpki-client