Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa
File: 323830303a3431303a3a2f33322d3336203d3e203130323639.roa (raw, json)
Hash identifier: VzHd1Xg7vk4FYKWtrO0VwrTMVPraGX51jDAwnX0PPHM=
Subject key identifier: 0C:A3:D2:B1:05:28:C0:78:E2:0A:8F:ED:71:EA:2F:01:04:F3:DB:C3
Certificate issuer: /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial: 5D9DA4F879905EEA3BAFE888D0A16E7827DF1F27
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa
Signing time: Tue 04 Feb 2025 18:12:16 +0000
ROA not before: Tue 04 Feb 2025 18:07:16 +0000
ROA not after: Tue 03 Feb 2026 18:12:16 +0000
asID: 10269
IP address blocks: 2800:410::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:a4:f8:79:90:5e:ea:3b:af:e8:88:d0:a1:6e:78:27:df:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
Validity
Not Before: Feb 4 18:07:16 2025 GMT
Not After : Feb 3 18:12:16 2026 GMT
Subject: CN=0CA3D2B10528C078E20A8FED71EA2F0104F3DBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:c2:32:f8:3f:f2:ab:b8:8c:75:94:33:db:
50:29:e8:65:21:cd:25:58:ae:0c:6a:c3:fd:6a:89:
53:09:df:15:48:ca:e1:a1:bd:6b:7f:2f:4d:bd:49:
7c:7d:79:64:1a:9e:7d:06:d8:5b:65:2b:0a:fa:95:
c0:9c:92:21:5e:ec:a3:a7:ff:79:0b:3c:5f:04:9e:
89:58:86:66:47:22:d7:8f:94:ee:c5:83:c8:8d:a7:
12:a3:0f:36:10:65:81:62:e6:c1:20:60:47:ff:40:
2a:50:9e:c1:84:3b:e8:77:b7:ff:f3:3f:75:fa:78:
61:e7:f7:90:47:c8:bc:31:29:71:c6:f2:78:6c:af:
ad:2d:09:f3:50:07:b4:24:86:ca:18:8f:f1:2e:5e:
ca:b4:0e:27:6c:ce:6d:7b:21:4b:e2:7c:79:1c:31:
9e:99:a3:c5:8e:f2:36:96:5a:44:4b:11:22:a1:22:
f1:e3:13:52:f8:20:8c:ad:a2:01:3f:22:d3:f5:9f:
6a:8f:c2:5c:39:51:9e:1e:de:7a:25:b4:bd:3c:c0:
8b:e8:14:ef:ba:11:db:e0:40:d6:97:e1:8d:ec:21:
ae:60:7b:94:31:be:85:81:66:85:36:2d:0c:f8:62:
9a:9b:06:0d:d3:68:c0:10:50:bd:cb:d1:b6:57:3e:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:D2:B1:05:28:C0:78:E2:0A:8F:ED:71:EA:2F:01:04:F3:DB:C3
X509v3 Authority Key Identifier:
keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:410::/32
Signature Algorithm: sha256WithRSAEncryption
84:34:8a:91:c0:04:be:b9:c6:9f:82:35:e3:93:c5:ec:07:8d:
d4:19:af:ad:3c:99:9d:91:94:f0:ae:36:07:28:05:a4:bc:84:
bc:ec:38:5b:68:19:ac:da:4e:78:d5:d7:f8:2f:c9:a2:0c:6b:
0c:a3:80:fc:66:ec:8d:c0:b4:c0:d6:b8:b5:3d:ee:cd:c7:18:
10:f7:f5:15:5c:17:cb:6f:91:ac:47:3f:0b:fd:0a:5b:b0:5c:
11:b4:9e:e2:21:e6:eb:ff:ac:2c:44:e0:a2:5f:0d:2c:a7:a6:
64:da:7a:c4:b5:9f:d3:18:bd:27:2b:5a:e1:db:2d:dd:1c:29:
a0:6a:94:21:b2:7b:bf:f6:1e:97:b8:56:1a:41:a3:2c:d4:91:
68:21:05:ab:6e:e3:b0:d4:e7:d0:fa:4d:1a:f6:2e:6e:d2:9f:
5c:52:d3:60:a7:94:b5:62:10:d3:0e:23:78:8f:97:c1:a6:75:
36:f2:7e:58:26:05:31:8a:e2:82:8a:ca:12:99:ac:1a:7f:0e:
1b:b4:ca:88:bc:2e:ca:3c:f2:dd:3b:95:f1:53:c2:ed:6b:c7:
ee:c5:0f:5c:70:8b:22:c3:a5:05:ac:00:84:61:48:40:3e:7f:
c3:7b:31:24:eb:56:78:b6:9a:c3:90:f3:4e:c7:78:62:28:eb:
d9:8f:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:20 2025 by rpki-client