Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
File: 323830303a3531303a3a2f34362d3634203d3e203238303232.roa (raw, json)
Hash identifier: hKaa51SLQ2MRo7YjCWo0k60/X3rlx2xhfJgfF0tJQbg=
Subject key identifier: A8:1F:9B:3C:D0:EA:42:19:7F:99:30:15:C5:B9:CB:F6:84:F7:C2:04
Certificate issuer: /CN=2000BFC4CE0B56183990500772974F91AC5629B4
Certificate serial: 3B34F68C071780D0C9965F59F5736DD577150B98
Authority key identifier: 20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
Signing time: Tue 04 Feb 2025 18:32:09 +0000
ROA not before: Tue 04 Feb 2025 18:27:09 +0000
ROA not after: Tue 03 Feb 2026 18:32:09 +0000
asID: 28022
IP address blocks: 2800:510::/46 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:34:f6:8c:07:17:80:d0:c9:96:5f:59:f5:73:6d:d5:77:15:0b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2000BFC4CE0B56183990500772974F91AC5629B4
Validity
Not Before: Feb 4 18:27:09 2025 GMT
Not After : Feb 3 18:32:09 2026 GMT
Subject: CN=A81F9B3CD0EA42197F993015C5B9CBF684F7C204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:de:85:51:30:51:e5:27:cc:6f:62:3f:f6:
08:80:7b:f1:d5:ec:b5:f2:dd:ef:90:52:42:dc:94:
86:40:9f:72:cd:c8:f5:f3:49:21:8f:64:b7:cd:c2:
98:36:80:6a:ab:78:88:97:9b:d5:cb:9c:fa:94:ca:
48:cf:e6:6c:48:9e:71:1e:19:e3:54:5d:37:e7:f3:
6b:b3:21:81:65:f5:2b:10:72:89:e2:08:71:98:af:
32:c5:6c:a6:39:5e:ef:d9:a8:25:c1:49:4c:85:41:
20:6c:74:29:73:44:e9:35:45:a0:b4:ec:cb:70:53:
35:ce:98:1e:82:24:ca:57:23:36:c8:86:49:a0:31:
00:0b:0f:12:d7:72:a2:ba:b1:4f:bb:aa:ab:ca:b0:
cd:60:d7:9b:f9:fc:cc:ef:2a:84:19:1a:e8:65:54:
63:6b:4e:87:39:19:d9:45:01:94:1b:d3:62:a7:40:
bc:c1:13:7e:d8:f2:60:c1:a7:42:f7:be:0d:c4:39:
d1:66:28:c3:4e:b5:cf:e1:3b:32:6f:55:f3:8b:80:
5f:b5:06:35:8e:d7:61:21:ef:95:14:8f:0e:74:6d:
7d:7c:30:3d:78:7b:1f:e8:c2:49:0a:17:ec:e9:14:
9e:35:e7:26:e0:52:55:a5:52:f2:00:74:ad:10:46:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:9B:3C:D0:EA:42:19:7F:99:30:15:C5:B9:CB:F6:84:F7:C2:04
X509v3 Authority Key Identifier:
keyid:20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:510::/46
Signature Algorithm: sha256WithRSAEncryption
00:75:e1:5e:56:63:a2:fb:89:55:23:8b:0e:00:dc:a5:73:77:
41:25:e2:fd:46:d8:77:a9:85:6c:f2:8d:78:8c:c4:09:ed:04:
5a:b4:86:18:e0:d3:c3:4b:09:35:de:ea:52:2d:01:9d:96:5c:
2f:40:d1:86:82:49:88:09:e8:1c:00:b1:04:5a:80:23:65:1d:
cf:16:53:ed:c5:55:77:b6:c1:2d:7f:3c:c1:f0:9e:3d:fe:86:
42:b3:86:0e:5e:ec:2b:18:d9:c9:8b:da:7d:03:ea:5d:ce:c1:
bc:54:bc:ad:d4:de:4d:4f:76:7c:d7:ed:90:b7:2c:21:70:4b:
cf:98:51:ce:f9:70:24:6e:f0:d6:d6:68:1f:58:ec:51:41:b3:
da:f7:fe:c8:29:8a:40:92:c0:43:62:c7:6f:cd:4b:bd:75:f3:
5c:1c:34:88:5b:d7:b3:f0:b1:97:fa:7e:1c:98:4c:8b:35:f6:
cd:42:ab:dd:8a:31:63:40:e4:7a:a3:ee:58:ef:92:a7:8c:4d:
87:87:81:49:a7:46:87:06:74:a1:34:82:32:3b:10:17:57:ec:
5f:b3:56:7f:f7:b9:e4:3e:07:20:a0:0f:35:8a:36:13:2e:a6:
d3:f0:66:2d:e1:9c:a2:df:35:b1:b5:4e:be:a6:42:1e:0c:7c:
01:fd:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:24 2025 by rpki-client