Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: sh0D0dQOj/36BQiJexY+0ULjbhwSwpNvpNg7T8dZYkg=
Subject key identifier: D9:88:EF:8F:88:7A:E6:A3:28:73:BA:CF:23:10:24:73:5E:92:BD:B0
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 69414042BD018AFEE352C52874A937B28F1651D9
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:41 +0000
ROA not before: Tue 04 Feb 2025 19:59:41 +0000
ROA not after: Tue 03 Feb 2026 20:04:41 +0000
asID: 262191
IP address blocks: 2800:b70:801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:41:40:42:bd:01:8a:fe:e3:52:c5:28:74:a9:37:b2:8f:16:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:41 2025 GMT
Not After : Feb 3 20:04:41 2026 GMT
Subject: CN=D988EF8F887AE6A32873BACF231024735E92BDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:77:10:16:c8:a7:91:e3:a8:4f:56:68:85:
aa:22:cb:f3:bf:bf:49:aa:18:2d:25:78:32:1c:90:
81:cf:d2:aa:c8:90:f9:a9:50:de:99:c3:48:e3:30:
9a:42:46:3a:cc:09:3b:b9:97:c6:3a:b6:7e:f2:02:
9e:14:2c:f6:c1:3a:2a:f0:8e:c0:2d:41:68:64:66:
e1:8f:a3:34:01:29:8c:24:30:df:6a:1d:4c:93:c1:
d0:4b:e4:ba:4c:6f:d8:b4:10:85:41:02:cb:4d:a3:
76:f2:48:c5:a6:cc:d2:0a:9b:ad:5b:fa:33:b2:45:
11:8f:c9:b3:6a:f9:15:c1:73:94:58:29:ae:e9:c6:
dd:a0:c0:cf:3a:62:6c:63:03:4d:2d:3c:f4:19:05:
a0:8e:04:ed:4f:f6:7d:2e:0c:7e:36:ce:d5:b7:55:
94:38:d2:43:00:85:26:4a:18:15:86:62:35:2a:59:
43:6b:1c:b7:93:8c:79:fa:18:12:c9:a0:57:c0:de:
b0:a8:d8:7a:ba:24:b6:da:d9:f7:52:2e:c5:bb:6a:
0f:0d:06:1d:97:6a:4b:ec:0c:fc:ae:fa:e5:c4:51:
f0:93:4d:7d:87:45:2c:4b:70:29:cc:ba:13:b0:ae:
e5:65:6d:63:d8:fc:75:8b:c4:6c:a6:c1:76:90:f9:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:EF:8F:88:7A:E6:A3:28:73:BA:CF:23:10:24:73:5E:92:BD:B0
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3830313a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:801::/48
Signature Algorithm: sha256WithRSAEncryption
7c:99:50:dd:c5:2b:a9:92:ad:fd:0b:4b:f8:61:f4:5c:80:4a:
5b:59:b5:ca:75:ac:60:a9:6d:b7:3b:6d:ab:05:31:0b:0a:5d:
a3:65:af:07:0b:d0:f0:1c:18:70:53:57:9f:04:e5:d9:d7:db:
4f:57:72:2c:a7:19:2f:b1:1f:ef:af:5d:63:c0:2d:9f:af:7a:
00:d8:94:43:3b:62:90:6a:43:02:ff:8d:05:b2:db:5a:eb:a9:
52:8c:07:41:76:67:1b:6a:54:c1:1a:30:0a:ac:c1:88:03:6b:
89:a8:9e:1c:c3:85:3b:69:7e:7a:01:28:df:5a:b3:3e:28:5d:
66:18:08:46:1d:9c:1e:e3:9f:87:d4:50:bc:9b:99:fb:3a:c4:
d2:b8:21:60:fb:95:bc:0a:79:5a:d5:e8:af:9c:e0:77:80:cb:
15:3f:ee:47:e9:46:50:71:5b:a4:fd:7b:c9:1e:60:d9:92:c2:
34:75:88:67:83:dc:5f:3d:ad:37:06:bf:c9:b0:4d:dd:27:21:
d0:4c:70:a2:d3:09:83:d7:8e:91:9b:7e:92:ae:c7:3d:62:54:
1d:4f:71:7f:6b:18:0b:9f:51:b9:11:80:64:21:c1:e7:e5:59:
d8:e6:c1:43:83:d8:b2:60:85:11:35:b2:14:b6:f5:79:bf:79:
fa:73:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:12:09 2025 by rpki-client