Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa
File: 323830303a3465303a3a2f33322d3438203d3e203136363239.roa (raw, json)
Hash identifier: Oc25VsVEM2M3vCVZNM4cAZf7H84WgwTf+D+kEVV08fI=
Subject key identifier: 60:0C:38:03:12:9F:B1:51:67:90:AE:A0:16:1F:31:F2:E6:D4:99:0B
Certificate issuer: /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial: 2B5BBD107ADAB6A1DC52E4169FF921704AF089BE
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa
Signing time: Tue 04 Feb 2025 18:32:06 +0000
ROA not before: Tue 04 Feb 2025 18:27:06 +0000
ROA not after: Tue 03 Feb 2026 18:32:06 +0000
asID: 16629
IP address blocks: 2800:4e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5b:bd:10:7a:da:b6:a1:dc:52:e4:16:9f:f9:21:70:4a:f0:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Validity
Not Before: Feb 4 18:27:06 2025 GMT
Not After : Feb 3 18:32:06 2026 GMT
Subject: CN=600C3803129FB1516790AEA0161F31F2E6D4990B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:60:12:88:68:f2:ff:f9:3f:40:1a:57:21:
49:04:01:cc:9f:1c:0c:e4:60:e3:c0:62:af:91:9a:
4e:c0:c5:3e:0a:5c:17:27:40:23:01:57:32:27:cb:
68:ac:8c:41:85:c9:6b:a4:5f:37:68:1b:19:9b:58:
0b:99:50:89:dc:14:22:2f:97:d0:bb:f5:bb:51:0d:
68:56:ac:f8:40:07:25:c4:05:26:c4:f0:71:7d:1a:
fa:69:2c:fd:dd:b4:cc:8e:9b:62:be:a5:dc:3a:b0:
fb:29:ec:a7:9d:c9:5e:c3:10:81:4a:96:ef:7e:cd:
1c:f0:25:fe:05:68:61:da:95:2c:7e:ee:6f:87:4f:
11:02:57:6f:13:94:69:d6:7e:d1:22:23:f4:bc:97:
8f:f0:e6:68:a5:7a:bc:70:6d:a9:37:e4:c2:70:52:
f8:47:b7:9c:c7:7f:b7:f9:45:b5:b5:4e:1e:63:80:
77:60:7d:1b:91:f9:a5:40:3f:9d:9f:d7:31:5e:d8:
dc:e6:e5:94:41:be:12:b6:94:84:a2:ec:68:37:f8:
ec:e8:10:c8:ec:f9:f9:3d:c4:1b:6d:98:05:45:ba:
aa:d7:4c:e2:0f:1d:9f:65:e5:af:59:f2:64:cf:cf:
2a:ec:8b:2d:78:9d:22:c0:22:e3:b3:f0:80:9e:71:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:38:03:12:9F:B1:51:67:90:AE:A0:16:1F:31:F2:E6:D4:99:0B
X509v3 Authority Key Identifier:
keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:4e0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ed:d6:5d:b4:40:b7:ff:22:d5:f9:5a:58:b6:19:fd:6c:dd:
f9:f9:06:95:fe:34:26:74:1e:7d:89:c0:d2:d8:c2:c6:30:ca:
2a:c2:f1:e0:bb:43:7b:b4:d8:09:8a:4f:1a:13:b2:f9:cb:d5:
14:cc:de:13:e3:8e:75:3f:bb:fc:c8:65:d1:4a:c5:2b:cf:42:
f0:f9:8f:97:ce:39:e5:0e:72:0e:f4:c3:42:3d:bb:44:62:73:
fd:4b:e9:ff:c1:0b:3a:54:50:5b:cb:ba:89:45:43:7b:72:e6:
30:6b:36:fe:16:f0:4f:36:fb:fb:12:3c:a4:df:cf:58:e9:82:
90:a3:d4:19:1f:bd:46:32:c8:4c:18:8a:a9:3a:07:55:cb:a4:
26:97:3c:77:37:ff:f2:ce:d9:57:4b:44:63:de:40:3c:10:0e:
2d:73:3f:43:fb:4f:e2:55:5b:18:84:42:bb:3f:c9:9b:6d:14:
ef:44:5f:ea:4e:57:40:25:80:95:69:3d:87:f4:49:ff:cc:93:
61:6b:65:18:6b:52:56:3e:2a:f2:8a:8a:1c:29:e8:67:ae:f0:
5b:03:fb:2f:d1:0a:80:c7:a8:2b:df:dc:a6:3d:91:f3:38:ea:
63:c3:70:d2:a0:8b:25:a0:08:ca:17:1f:33:f1:85:85:b1:2e:
c5:1b:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:52 2025 by rpki-client