Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
File: 323830303a643330303a3a2f32392d3438203d3e20323032.roa (raw, json)
Hash identifier: 1cZ+8mldjvajiReJbd6buJ/qjggy/pkouqazmPaew6w=
Subject key identifier: F9:06:DB:3D:AA:59:8B:D0:1B:55:58:D1:07:39:BB:0B:64:A0:BB:1A
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 070CF08020117909BBC7B4FEFFE8EC8C6C7614DE
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
Signing time: Tue 04 Feb 2025 18:36:30 +0000
ROA not before: Tue 04 Feb 2025 18:31:30 +0000
ROA not after: Tue 03 Feb 2026 18:36:30 +0000
asID: 202
IP address blocks: 2800:d300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0c:f0:80:20:11:79:09:bb:c7:b4:fe:ff:e8:ec:8c:6c:76:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:30 2025 GMT
Not After : Feb 3 18:36:30 2026 GMT
Subject: CN=F906DB3DAA598BD01B5558D10739BB0B64A0BB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:ad:3d:3c:91:08:f5:78:fc:5a:94:96:1d:
82:bc:9e:cf:a2:7a:41:26:eb:3f:d0:b1:94:86:5d:
1f:09:fe:28:27:b2:46:64:f0:a9:6e:f5:9f:39:43:
da:07:43:3c:71:cc:fe:bb:23:1d:35:68:61:82:71:
14:a2:a5:20:66:0d:6b:10:39:b0:52:f4:4f:c4:00:
33:24:24:94:f3:f2:00:8a:9e:33:b0:11:18:74:27:
42:51:01:6a:71:94:ee:34:b6:08:d7:74:05:36:e0:
fa:09:b3:1a:02:4f:79:1b:82:53:94:08:3a:ff:36:
e1:e1:6b:d9:2a:fc:5e:b9:2f:e5:a9:32:ae:06:7a:
54:e2:c5:00:d2:7e:d1:5b:58:15:b2:a9:2e:2c:3e:
a9:4f:7a:25:a5:bf:f3:70:a3:81:2b:90:cd:b1:b6:
f6:bc:0b:b6:17:f9:32:41:88:95:c7:85:97:f8:25:
2b:34:f4:85:69:32:25:99:1e:45:32:2f:17:7a:0d:
7e:83:c0:5f:08:ad:9b:16:07:2b:07:9f:c9:7a:da:
a1:7c:74:ca:20:6c:06:c2:42:04:85:d2:f8:0c:d5:
82:fa:91:a0:c8:fe:38:7a:30:15:fb:2b:8c:01:23:
5c:5b:11:31:4e:04:44:49:27:c8:5a:bc:f3:30:2b:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:DB:3D:AA:59:8B:D0:1B:55:58:D1:07:39:BB:0B:64:A0:BB:1A
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:d300::/29
Signature Algorithm: sha256WithRSAEncryption
64:58:8c:4c:75:6e:51:9f:a6:f8:b8:f5:8a:2b:c5:68:8b:12:
05:94:ac:41:06:93:7f:2d:37:a2:35:28:68:d8:19:eb:83:80:
35:a5:8a:b3:ca:77:02:57:e5:63:9d:d5:a0:19:f9:6a:1f:b4:
a4:92:c4:81:b9:9f:70:f9:ad:da:3d:65:d2:97:8c:53:27:13:
a6:d1:d9:41:4e:c1:85:19:36:b9:22:ad:10:b7:7d:b4:64:4f:
84:39:e3:b9:2e:97:11:42:59:fe:96:a6:f7:fe:55:73:c4:89:
8f:80:23:bb:49:89:6e:21:c8:be:ac:53:c1:9b:f4:27:ad:60:
3f:a2:21:4e:18:ee:c4:ba:6a:16:18:15:2d:d8:a5:9d:8f:b1:
db:08:a0:64:6b:bd:f3:c8:ab:c9:24:1d:09:a4:ba:28:dd:64:
86:f9:38:a2:1b:95:9b:a2:f0:6a:b4:00:22:26:27:90:9c:9f:
a8:6e:15:c8:78:2b:fa:82:51:f9:4c:e2:d9:a4:bf:6d:0e:9b:
6b:14:93:a2:b3:7e:b6:88:db:de:03:7c:04:8d:e5:ce:4f:19:
bb:db:21:8e:6c:d7:2f:6d:e8:cc:13:16:ce:7f:3a:68:f3:dc:
88:6b:02:b3:3d:02:0d:91:b7:d4:ba:84:20:f0:db:be:92:6e:
2e:52:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:19 2025 by rpki-client