Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3231302e3231312e35362e302f32312d3234203d3e20323634383235.roa
File: 3231302e3231312e35362e302f32312d3234203d3e20323634383235.roa (raw, json)
Hash identifier: 5E/cenK9QopBMgtuWNnd7B1mDbOaIZwVgIGUc+0p3J0=
Subject key identifier: F8:68:C9:B2:2C:CA:0D:09:77:0C:31:C1:0C:4E:1D:42:A0:2F:6E:0F
Certificate issuer: /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial: 31A35C8B5210AA519DD6481DCED21EF9965D2E9C
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3231302e3231312e35362e302f32312d3234203d3e20323634383235.roa
Signing time: Tue 04 Feb 2025 18:45:25 +0000
ROA not before: Tue 04 Feb 2025 18:40:25 +0000
ROA not after: Tue 03 Feb 2026 18:45:25 +0000
asID: 264825
IP address blocks: 210.211.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a3:5c:8b:52:10:aa:51:9d:d6:48:1d:ce:d2:1e:f9:96:5d:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Validity
Not Before: Feb 4 18:40:25 2025 GMT
Not After : Feb 3 18:45:25 2026 GMT
Subject: CN=F868C9B22CCA0D09770C31C10C4E1D42A02F6E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:c3:0f:d6:64:65:4c:eb:dc:8c:c3:a6:12:
74:69:d3:c5:49:d7:65:80:b0:da:5e:71:31:39:20:
46:d0:9f:20:e7:e3:ca:ab:7c:01:49:02:c7:ab:75:
71:89:6d:7d:23:1a:00:76:10:c4:da:14:9c:80:19:
a7:7e:57:9d:0b:7b:08:5d:69:ed:2b:38:68:ff:43:
13:93:89:7e:27:fb:8a:41:51:9c:7f:5c:fe:7a:c3:
2d:11:0d:28:c5:62:96:2e:2d:15:a4:5c:66:4c:b2:
04:ed:6b:ba:4d:ef:c4:44:be:e2:eb:9c:7e:af:2c:
14:3b:ac:d7:a7:fd:90:35:9d:f5:c7:75:a1:9e:d6:
1d:e4:d1:e6:4f:a1:1e:0c:42:82:1b:ba:0b:24:bb:
df:0a:21:6d:ea:c4:63:b4:6b:06:7a:60:e1:5b:d7:
82:f5:e5:8e:57:2e:42:b3:13:b1:1f:34:20:e7:93:
74:f6:75:ce:62:69:c8:92:90:7a:5f:b0:1c:d4:35:
39:1f:ca:15:36:43:09:0a:11:d5:3b:17:e2:19:37:
14:94:67:92:7a:7a:cf:26:aa:3a:0b:4b:47:2a:ba:
30:88:c2:95:83:4d:21:6c:7d:aa:44:45:16:11:b5:
b9:21:67:d2:8c:eb:29:9b:db:50:4b:ef:f1:18:cc:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:C9:B2:2C:CA:0D:09:77:0C:31:C1:0C:4E:1D:42:A0:2F:6E:0F
X509v3 Authority Key Identifier:
keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3231302e3231312e35362e302f32312d3234203d3e20323634383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.211.56.0/21
Signature Algorithm: sha256WithRSAEncryption
76:da:9f:28:2e:0e:d7:23:ef:7c:58:55:e9:51:6e:e0:f5:7c:
bf:e1:f3:b2:ee:21:bd:79:a9:fc:cd:a3:18:b5:3b:ab:f7:e2:
8b:9e:de:fc:58:c5:96:fd:1d:70:7c:52:af:db:4f:4b:a1:82:
a6:7c:72:2e:37:6a:eb:ff:55:3c:80:20:57:ff:42:e5:f6:26:
21:d0:57:59:91:16:6b:23:98:37:91:1e:93:16:8d:0b:b5:db:
dd:a3:8d:dd:06:94:ff:10:47:c7:84:a7:7a:ac:9e:ac:60:8a:
1a:b3:7b:a1:ba:bc:1c:e6:3f:1c:08:f7:65:d1:28:d8:73:7b:
0e:be:95:7f:2b:fb:4d:a0:4b:74:dd:ff:7e:75:f2:8b:de:0c:
52:93:47:d6:85:c0:b9:71:2c:b9:f2:3a:79:96:55:31:b2:1c:
71:f2:bc:4b:3c:c8:ec:10:f8:ea:3b:a7:0b:39:48:2b:a0:8c:
e4:40:1c:1b:22:49:99:73:21:a2:e5:de:e0:76:34:0f:f5:1f:
a8:f3:89:13:64:c7:ad:f4:03:a2:15:16:88:c0:a7:62:eb:a9:
57:0f:a5:fe:23:bc:c6:d5:a1:df:1e:38:85:39:32:c0:69:e9:
cd:13:f8:19:cb:2b:fd:1c:e7:1a:8b:cd:e8:ac:b5:f2:3f:1c:
1d:c4:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client