Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: iK/dICrXLxZZkGkNxOa/lLRa+Y+5dgRZWMW/kvmEALo=
Subject key identifier: B5:10:C7:8D:70:4F:55:76:BF:EE:38:40:07:C4:1E:0E:0E:0F:D6:09
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 244E2A6D5B04B335D6B96F32C136E24A64D853F1
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:32 +0000
ROA not before: Tue 04 Feb 2025 19:59:32 +0000
ROA not after: Tue 03 Feb 2026 20:04:32 +0000
asID: 262191
IP address blocks: 2800:b70:401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4e:2a:6d:5b:04:b3:35:d6:b9:6f:32:c1:36:e2:4a:64:d8:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:32 2025 GMT
Not After : Feb 3 20:04:32 2026 GMT
Subject: CN=B510C78D704F5576BFEE384007C41E0E0E0FD609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:42:ec:da:0d:93:10:9c:ad:17:b8:e9:fb:
50:c9:d8:88:c5:70:b4:df:a4:93:4c:6e:e7:cd:34:
35:77:73:45:bd:fc:1e:9b:7e:b3:15:e9:67:6c:ea:
9e:06:c3:4b:fb:2c:b8:35:2b:44:72:71:49:31:bd:
1f:a6:81:98:48:c5:a7:3b:ca:34:16:59:f4:47:3d:
c6:e6:ea:69:6e:0e:09:a9:4b:9d:fa:8d:d4:c6:00:
9f:1b:ef:02:da:36:0a:19:06:5d:3a:d5:0d:3a:78:
00:49:ab:2c:c6:1e:ae:9c:f9:a8:74:97:2f:38:42:
11:0f:8d:e3:48:be:e5:61:fc:f9:cb:aa:0c:55:3c:
57:d1:9d:f3:77:ff:82:ba:3c:d9:48:56:20:54:5a:
02:42:6b:a3:c8:75:ec:96:8d:43:95:12:da:6e:d5:
29:3c:41:71:b5:43:98:09:df:50:d4:18:46:78:30:
d1:ee:1b:58:64:2a:cd:b6:6f:3c:41:6e:8c:05:9a:
ad:bb:1e:c8:22:2e:38:2a:f6:9f:15:95:b9:da:76:
87:5f:da:b9:4a:52:62:e9:f0:05:9e:72:05:06:5f:
1f:94:e0:c0:22:15:4b:15:b8:51:ed:be:92:0b:0c:
d0:eb:b6:33:59:69:00:82:f9:67:9b:5a:9e:f9:d2:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:C7:8D:70:4F:55:76:BF:EE:38:40:07:C4:1E:0E:0E:0F:D6:09
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3430313a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:401::/48
Signature Algorithm: sha256WithRSAEncryption
47:08:66:ec:ad:6c:c7:59:6b:5c:05:a6:c9:2f:8b:0f:11:21:
78:25:93:ba:c0:a1:c4:7c:b2:68:cc:46:90:14:75:2e:a2:80:
f7:12:23:3b:cf:d0:03:88:2a:1c:cb:2e:a8:a1:e4:b8:3a:11:
fc:54:17:ae:0f:b7:33:11:47:e7:d3:66:93:05:3d:5a:b9:c4:
b3:df:26:f4:23:35:09:3c:98:7a:b4:bb:d6:2b:2e:31:71:ac:
e9:f1:ba:c1:fe:1f:a5:fb:0d:08:4d:78:7d:17:db:cf:20:55:
6e:95:ac:3a:7b:49:ba:14:cc:4f:7a:4c:aa:48:97:77:ac:d2:
29:23:6a:9f:d8:dc:a8:cd:ae:f3:bb:ef:0c:63:e6:58:fa:97:
72:e2:52:f7:f8:00:79:89:8e:fd:3c:6a:c9:97:c1:b8:e3:86:
26:10:81:48:1e:bb:ff:1b:4d:07:a8:99:6b:51:d8:fb:d1:45:
ea:c8:66:eb:46:4b:c2:96:73:fe:ff:ea:0b:08:d6:11:47:b5:
5a:68:fd:f8:e7:f3:da:3a:1c:36:f7:6e:7b:89:ef:a9:b8:80:
ea:41:2a:3e:1a:b9:25:94:db:a1:fa:66:fb:8c:64:da:8d:df:
89:22:b5:83:b2:58:bd:98:7e:ba:67:30:e4:69:90:c8:6b:22:
be:29:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:36:17 2025 by rpki-client