Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
File: 323830313a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier: dYStwHE15OO6sH3FlOCu1yH1YA03ZlFH6I3eh+FuyLg=
Subject key identifier: BA:87:BD:2B:C2:9E:06:97:88:EC:36:11:E5:03:CF:CA:E4:41:D2:BA
Certificate issuer: /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial: 23FCBA940A43D886BE96CF0F029D132EBEAC5BD6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
Signing time: Tue 04 Feb 2025 18:19:36 +0000
ROA not before: Tue 04 Feb 2025 18:14:36 +0000
ROA not after: Tue 03 Feb 2026 18:19:36 +0000
asID: 52224
IP address blocks: 2801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:ba:94:0a:43:d8:86:be:96:cf:0f:02:9d:13:2e:be:ac:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Validity
Not Before: Feb 4 18:14:36 2025 GMT
Not After : Feb 3 18:19:36 2026 GMT
Subject: CN=BA87BD2BC29E069788EC3611E503CFCAE441D2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:4f:3a:f4:07:a0:88:a1:24:9a:bc:39:95:
c5:4c:57:b6:7e:46:a8:e8:2c:62:90:22:d3:62:d2:
fd:84:8f:b2:5a:71:3a:82:4d:b9:b9:ec:e2:c5:aa:
5e:ef:27:e2:5c:da:c7:51:59:dc:97:bf:e2:3b:c8:
43:b2:9e:ca:f7:ab:43:d0:ec:89:e6:55:28:67:46:
7f:2e:71:7f:a1:d8:e6:3c:8d:c5:36:8d:f3:5c:d3:
b7:76:a5:b4:b8:82:da:a6:2e:7a:3d:9f:3e:46:56:
cf:a9:04:08:35:b2:e4:c3:e3:14:8a:41:b3:04:6e:
d5:05:d7:ff:4f:81:dd:53:f1:93:f1:56:b2:08:39:
da:f2:f6:24:ca:c7:d1:61:76:3f:00:79:4f:58:ca:
b9:54:ae:b9:f3:ba:16:df:fa:33:cf:53:9d:a6:ef:
3d:1d:c7:66:51:d7:4f:fb:0a:26:91:24:96:72:e3:
90:4b:69:a6:1d:7b:fb:e3:82:9e:82:ed:97:de:48:
57:50:11:51:c0:ca:3e:13:59:3f:cc:36:51:79:dc:
93:a8:ad:f5:7c:0a:12:59:b3:9d:d0:0c:03:0e:16:
78:14:51:26:31:a3:27:4e:33:46:88:87:b1:09:0a:
fe:c4:40:6b:16:9c:ba:ec:e6:bf:b7:cf:d5:84:5b:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:BD:2B:C2:9E:06:97:88:EC:36:11:E5:03:CF:CA:E4:41:D2:BA
X509v3 Authority Key Identifier:
keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801::/48
Signature Algorithm: sha256WithRSAEncryption
97:13:e0:55:24:09:6b:c1:19:d3:1e:73:d4:37:e8:9d:0e:bd:
f7:19:eb:f9:69:b7:24:ec:cd:e1:5f:b8:19:24:42:2c:ae:f7:
f6:ba:76:65:df:86:8b:fb:dc:1f:5b:73:33:6a:80:d5:55:ef:
cc:54:09:78:1b:79:fa:dc:31:20:fd:a7:5a:b6:e3:1a:3b:f6:
d5:50:5d:02:83:b6:65:80:d6:84:d8:4a:97:f9:e6:c6:f1:4c:
c7:b2:04:b5:24:61:1a:47:e4:86:71:96:8b:c7:56:c7:76:b4:
7d:5b:47:8c:47:74:70:9b:42:5d:75:4f:b3:e4:8a:90:0b:ff:
f4:6d:32:a1:f7:52:b0:3e:05:02:3e:4a:e6:c9:2a:9a:ee:ac:
12:71:dd:d2:85:2b:9f:b0:c3:a2:35:41:42:3c:39:d9:4a:5f:
6c:6e:07:6d:e0:a6:78:77:03:70:8d:b4:22:a7:04:02:ea:80:
69:2e:7e:c8:c1:fe:9c:f3:5e:37:30:4b:97:39:97:75:cf:5d:
f7:aa:f1:b5:d5:72:37:c4:08:94:6f:58:fe:da:44:fd:6c:6d:
7c:dd:2d:15:e0:d0:61:c1:d7:13:12:25:f5:6e:8f:83:dc:54:
e6:81:22:ef:74:d6:6a:a7:f3:c7:4f:83:35:c4:1c:0a:1d:ee:
d6:0c:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:12 2025 by rpki-client