Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa
File: 323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa (raw, json)
Hash identifier: 1wtUMbnLOMBq5oNtn1FuywsbTz5Q1EwM+4Rtv8Pr3Xg=
Subject key identifier: AD:4F:A2:A2:6C:59:4B:80:41:D1:52:6B:2B:05:B4:B2:70:0A:CE:51
Certificate issuer: /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial: 35B5BEAB3CB018757C2632AABCBDC6CED93516E0
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:33:42 +0000
ROA not before: Tue 04 Feb 2025 18:28:42 +0000
ROA not after: Tue 03 Feb 2026 18:33:42 +0000
asID: 52468
IP address blocks: 2803:4580:9200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b5:be:ab:3c:b0:18:75:7c:26:32:aa:bc:bd:c6:ce:d9:35:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Validity
Not Before: Feb 4 18:28:42 2025 GMT
Not After : Feb 3 18:33:42 2026 GMT
Subject: CN=AD4FA2A26C594B8041D1526B2B05B4B2700ACE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:b1:20:c8:41:13:6a:28:2e:5e:97:98:d7:
6e:32:8e:54:b9:e8:04:83:0e:63:92:3b:60:35:cd:
09:23:21:03:df:7d:56:54:e4:6e:54:5d:12:fe:f6:
21:5f:a1:31:63:2b:15:59:95:c2:68:f9:a5:59:37:
ce:03:9e:f6:95:6f:cb:be:1d:92:7b:9b:34:fb:84:
6c:e6:c3:a2:16:9f:4f:f3:05:df:35:72:0f:10:ef:
e4:6d:17:58:2a:c7:2b:a7:9f:2e:06:96:64:0d:c6:
19:47:72:7b:6f:b4:3f:f0:37:98:a4:f5:27:cc:1b:
09:52:72:6c:0f:6a:5e:5e:ad:fe:76:f7:09:d2:51:
d2:26:a4:7b:10:c8:1e:d6:fa:3b:3e:05:67:a5:25:
9c:45:b0:22:af:be:6b:47:31:8a:cb:8c:84:5f:ef:
a0:14:b3:10:55:21:05:e5:2a:68:4c:f5:4f:f3:3c:
c1:ab:a8:53:eb:0f:04:92:ef:3a:8d:f6:90:65:5d:
50:04:b8:dd:3c:0b:06:a7:a9:84:e4:01:15:f4:fa:
91:67:eb:2e:14:1f:a9:ef:13:2f:17:f7:1b:d1:c5:
19:ca:d7:b1:78:31:ab:72:6d:60:f5:32:26:86:18:
c1:76:1d:3d:7c:97:9c:e6:0f:a0:4e:48:e9:46:a0:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:A2:A2:6C:59:4B:80:41:D1:52:6B:2B:05:B4:B2:70:0A:CE:51
X509v3 Authority Key Identifier:
keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4580:9200::/40
Signature Algorithm: sha256WithRSAEncryption
8b:95:30:13:92:23:c6:98:60:9e:8e:ae:f6:76:00:ec:b0:30:
9e:b3:99:52:e7:5a:10:18:c4:cb:f6:05:fb:a4:89:3c:e1:c1:
4d:92:55:aa:e8:61:94:f8:92:9a:de:6e:5b:f8:21:83:50:89:
bc:17:c1:d4:57:18:7f:39:6a:19:31:27:02:b3:40:a4:99:ef:
c4:e5:72:9d:f7:6b:b3:a8:4e:15:ac:cb:b6:52:07:1e:8b:b0:
34:40:27:50:cb:36:7a:ee:9f:70:b7:64:5a:49:83:86:06:10:
29:40:f5:9c:cc:82:db:28:9b:61:66:97:4e:a1:57:f4:df:4e:
9f:6d:d1:62:e7:e3:2b:38:3b:9e:e6:0b:f4:cd:07:e1:05:a0:
00:57:ff:0a:16:53:f8:82:33:c1:de:9a:a7:3a:2c:99:92:05:
28:ec:c1:0b:97:42:8a:33:34:df:f7:a0:ab:5f:8e:b0:67:79:
31:8b:82:53:9d:de:38:6a:8e:b2:46:21:85:43:42:99:2e:4c:
ad:d6:97:fa:08:8f:41:ad:18:10:15:1e:a2:62:c4:c3:f8:5e:
3f:d7:8c:65:72:51:dd:5e:30:6c:78:2b:24:10:71:e6:48:76:
f8:07:c4:70:6b:a8:d2:7f:4c:9a:95:9c:61:56:3b:76:fa:26:
93:5e:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client