Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: KRtF47N9a/jzoPy85ITpUt0ZO6hMsAUevqP5JVE+lXc=
Subject key identifier: C0:48:F2:BE:C5:73:89:3A:22:17:BD:F3:27:71:7E:20:30:26:C7:53
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 695209F8A737B19E1CA4D6514195DF004279BF70
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:38 +0000
ROA not before: Tue 04 Feb 2025 19:59:38 +0000
ROA not after: Tue 03 Feb 2026 20:04:38 +0000
asID: 262191
IP address blocks: 2800:b70:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:52:09:f8:a7:37:b1:9e:1c:a4:d6:51:41:95:df:00:42:79:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:38 2025 GMT
Not After : Feb 3 20:04:38 2026 GMT
Subject: CN=C048F2BEC573893A2217BDF327717E203026C753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:b9:1f:99:5c:e2:3e:2c:b8:f0:ee:05:8f:
0c:76:39:ef:d8:22:d7:9f:75:00:61:e2:66:a9:87:
45:8e:91:e6:06:f3:97:8c:26:a6:dd:13:96:fa:fd:
c0:6b:f9:02:e5:31:c8:94:47:4f:81:98:14:4b:77:
4b:de:6e:04:91:75:4f:74:05:6b:56:02:88:ee:d0:
86:cb:94:04:92:20:86:d2:89:01:e3:90:4f:d7:fa:
d9:b8:6d:f8:04:a6:e1:bf:ac:49:1f:05:bf:35:fe:
cb:67:ec:c9:fd:4e:3d:65:27:57:93:61:39:03:0b:
6d:8a:36:58:75:9d:ab:41:db:06:94:94:55:44:33:
5a:0d:07:2b:1b:96:d7:82:05:d2:1a:04:47:75:7c:
9b:30:44:a3:fe:b4:ac:e1:85:10:0d:32:d4:cd:be:
a8:b2:dd:a4:1d:eb:2f:86:ed:32:1e:3e:c6:c5:03:
a9:f2:d6:ba:de:c2:5c:90:3b:53:39:0c:a2:55:11:
d2:8c:86:71:5d:69:b0:ef:f8:00:79:30:d4:c9:1d:
5d:67:3b:db:a8:49:e3:95:a0:9f:f9:53:44:1f:da:
d9:a3:d1:ab:e4:f6:6b:77:76:e5:5e:ee:0c:c2:4d:
f5:23:07:56:7d:36:4d:d4:d6:89:1b:84:22:62:2b:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:48:F2:BE:C5:73:89:3A:22:17:BD:F3:27:71:7E:20:30:26:C7:53
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:20::/48
Signature Algorithm: sha256WithRSAEncryption
60:2c:43:06:e4:53:f3:97:76:64:94:60:a3:c8:a3:53:30:ff:
ad:4a:26:ca:1e:9a:92:c7:bf:89:08:73:d4:89:e8:b7:0b:5c:
a6:80:08:b3:5d:14:71:bd:36:ce:0c:60:e5:a3:01:17:5b:ab:
fe:b4:36:3c:ea:b0:a0:20:cf:f9:b8:07:2f:37:57:51:6a:d0:
15:60:13:55:48:b1:4c:87:b4:71:cc:10:e5:7c:5e:8b:5c:8c:
00:da:7b:b5:18:78:bb:bc:3b:02:74:f8:2d:35:6d:e6:d4:be:
9b:c0:88:59:bf:7a:3c:46:54:05:24:58:34:f0:83:e6:13:81:
20:3f:ca:28:05:c2:f7:dd:0b:3f:41:24:86:02:5b:06:f8:61:
0c:62:84:45:92:4d:c2:f4:70:90:8f:b2:58:f6:33:4a:3a:e7:
b9:f5:22:41:8f:3f:b9:9a:30:6f:1c:4a:45:02:65:57:b8:15:
58:bb:80:01:ac:ee:ab:ef:4a:e2:ac:cc:b4:b7:a7:9d:84:f8:
67:52:2c:7f:21:8c:ca:d7:de:e2:fc:e3:1e:9d:bc:43:8f:c7:
d6:fd:a0:a7:4d:7b:3c:ac:82:fc:08:51:41:93:8f:90:0e:93:
64:90:ab:b5:b5:a2:da:cb:87:d7:9f:92:e4:b3:6c:dd:53:0f:
77:54:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:29:48 2025 by rpki-client