Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/323830333a626161303a3a2f33322d3332203d3e20323636383738.roa
File: 323830333a626161303a3a2f33322d3332203d3e20323636383738.roa (raw, json)
Hash identifier: Y0kBmoWb1ZNgAqc1aipgKWOHwgvCQVTmBmRqWi67pT4=
Subject key identifier: 13:05:C8:D4:44:97:D3:67:F9:04:34:6C:F7:B7:F8:CA:1C:2E:90:18
Certificate issuer: /CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
Certificate serial: 0B4C606C7C7A8EC9E0D06724AC95A7DBC79D15F5
Authority key identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/323830333a626161303a3a2f33322d3332203d3e20323636383738.roa
Signing time: Tue 04 Feb 2025 18:40:30 +0000
ROA not before: Tue 04 Feb 2025 18:35:30 +0000
ROA not after: Tue 03 Feb 2026 18:40:30 +0000
asID: 266878
IP address blocks: 2803:baa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4c:60:6c:7c:7a:8e:c9:e0:d0:67:24:ac:95:a7:db:c7:9d:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
Validity
Not Before: Feb 4 18:35:30 2025 GMT
Not After : Feb 3 18:40:30 2026 GMT
Subject: CN=1305C8D44497D367F904346CF7B7F8CA1C2E9018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:fc:40:1d:33:28:d4:fb:ba:1c:3a:e7:f7:
45:bc:62:9c:00:8a:58:f5:5f:50:66:b8:9a:2b:9f:
9c:1b:90:76:0c:96:8b:ec:d8:77:80:07:7d:db:e2:
a6:a9:89:4b:5e:df:59:85:53:be:e5:d8:70:ab:aa:
63:7a:bb:69:86:84:76:9b:88:54:6c:7f:0b:28:96:
bf:2f:0b:d3:50:37:84:af:cf:88:b1:ce:4c:c4:8e:
e8:86:49:96:4c:aa:5f:06:77:62:3d:4c:3e:4f:ee:
a2:d4:ef:55:43:3d:ff:1c:cc:c9:8d:ec:38:92:e9:
ab:a1:94:cd:dd:45:7e:76:dd:eb:1d:2b:3d:7e:26:
99:d5:b6:6a:bf:e1:f4:f9:11:3b:3a:09:77:8f:e6:
eb:03:2b:e2:f6:a6:98:15:46:af:45:11:43:87:03:
d1:64:71:a0:78:d3:b6:c0:e1:4c:13:c2:f6:34:cb:
ee:8b:1b:a6:1d:da:a5:52:1e:0b:5d:59:2c:2a:d6:
f1:ae:84:8a:ca:bf:80:ae:67:c3:65:a0:8b:73:e4:
87:2c:5a:cd:15:94:aa:99:a0:49:19:de:3f:9e:80:
7f:ca:0a:c2:d1:da:cf:1c:77:02:01:e4:db:d7:ba:
94:66:1d:b3:eb:d6:2d:1e:1e:e9:4a:aa:e3:09:f7:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:C8:D4:44:97:D3:67:F9:04:34:6C:F7:B7:F8:CA:1C:2E:90:18
X509v3 Authority Key Identifier:
keyid:4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/323830333a626161303a3a2f33322d3332203d3e20323636383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:baa0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:da:c6:5c:34:7d:af:28:1c:8e:d8:fc:e4:6d:c5:a6:31:d1:
74:65:54:5f:b9:c4:49:5a:0b:32:ea:04:2c:a1:89:4c:1b:fa:
12:0d:77:7c:7f:f5:1a:0b:48:b6:ae:85:2d:36:b7:41:63:a8:
32:c2:2a:e1:70:ad:e9:4f:0d:0b:2a:15:bc:39:af:ec:8a:c7:
be:99:91:c8:57:7c:e2:29:0c:46:fe:c3:ab:75:c5:f1:ea:a0:
4a:d5:df:79:d2:ec:3c:29:6d:7e:be:4b:27:7f:b5:97:75:d4:
1e:96:76:ce:b9:2b:ef:14:3e:ad:56:51:d5:16:1b:87:37:73:
69:18:82:b4:4c:5e:39:10:15:b4:7f:2d:86:aa:68:a2:c7:60:
26:ce:76:a3:6d:e7:ba:06:7d:77:d4:63:e9:99:7b:d2:01:03:
17:2b:f6:6e:6f:a4:d3:16:01:06:f9:00:4f:47:be:65:98:38:
67:96:70:a9:e9:e9:f9:df:87:0d:90:f7:b0:5b:81:a7:9c:0e:
54:41:cd:fb:fa:82:34:0b:4d:c6:3d:f4:9e:93:d3:d7:56:37:
e8:43:fc:6d:34:ff:70:3b:38:47:c5:d6:fe:31:ab:35:f5:08:
f5:c0:b6:c6:13:d6:7e:a9:94:fd:66:6d:88:fb:52:fe:da:ac:
c3:56:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:43 2025 by rpki-client