Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa
File: 323830313a3161653a3a2f34342d3434203d3e20323632353839.roa (raw, json)
Hash identifier: cJ1XQx8VoQ3d6GpgcjlCwSKXbR+ghnC6al5a98p+qHY=
Subject key identifier: DC:49:E0:BC:DD:A7:C2:0D:3D:FC:27:13:C9:90:3A:57:7D:F8:9B:0F
Certificate issuer: /CN=CF477A09FD00FCC1096160610330797C70454FCB
Certificate serial: 5D285FD53D4649864018D9EAC5101ED219EAEFEF
Authority key identifier: CF:47:7A:09:FD:00:FC:C1:09:61:60:61:03:30:79:7C:70:45:4F:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF477A09FD00FCC1096160610330797C70454FCB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa
Signing time: Tue 04 Feb 2025 18:28:15 +0000
ROA not before: Tue 04 Feb 2025 18:23:15 +0000
ROA not after: Tue 03 Feb 2026 18:28:15 +0000
asID: 262589
IP address blocks: 2801:1ae::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:5f:d5:3d:46:49:86:40:18:d9:ea:c5:10:1e:d2:19:ea:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF477A09FD00FCC1096160610330797C70454FCB
Validity
Not Before: Feb 4 18:23:15 2025 GMT
Not After : Feb 3 18:28:15 2026 GMT
Subject: CN=DC49E0BCDDA7C20D3DFC2713C9903A577DF89B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:49:8d:23:a1:68:7a:a0:c6:23:f6:e8:c1:
c3:bf:0b:b0:72:26:c7:e0:6e:e2:e1:66:38:4a:09:
c2:a6:1b:22:af:8c:a3:81:83:fb:db:76:a1:89:da:
19:74:bc:8a:6a:43:85:12:54:b5:81:b3:64:34:3a:
5b:3f:e8:83:ef:9a:46:a4:e4:36:d1:1a:ef:39:83:
57:d3:ca:fd:40:b4:79:b1:9a:1d:dd:4b:ce:5e:44:
c3:9b:36:7c:25:b9:d5:49:54:fa:6c:6c:11:1c:5c:
56:da:1f:c3:c8:9d:cf:a9:1b:86:6e:0b:e3:4c:86:
f0:c2:83:70:1c:e0:73:b5:8d:c4:bc:8f:1c:42:29:
4e:29:9d:d6:35:ce:77:01:90:cb:84:f5:6d:ef:22:
79:aa:f8:55:5b:7f:f7:71:97:db:f2:27:0a:59:2d:
e5:7f:76:97:46:9c:f1:32:a8:89:47:5b:fe:45:dc:
7a:f8:1f:0f:61:03:24:b0:e2:18:0c:02:c2:d6:86:
70:d5:52:07:53:9c:c5:e9:c8:f8:99:00:aa:a0:2d:
69:ae:6c:c6:e4:7d:6f:65:c1:c9:65:aa:af:3a:b6:
6a:9f:ae:91:8d:ec:66:e4:dc:a5:1b:71:99:69:5c:
3e:9b:1c:c6:e3:a9:50:9b:ce:df:ad:a3:e9:e1:ba:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:E0:BC:DD:A7:C2:0D:3D:FC:27:13:C9:90:3A:57:7D:F8:9B:0F
X509v3 Authority Key Identifier:
keyid:CF:47:7A:09:FD:00:FC:C1:09:61:60:61:03:30:79:7C:70:45:4F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/CF477A09FD00FCC1096160610330797C70454FCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF477A09FD00FCC1096160610330797C70454FCB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1ae::/44
Signature Algorithm: sha256WithRSAEncryption
24:0c:5c:f1:d6:65:91:aa:88:08:72:f7:fd:bd:e1:5a:74:e1:
85:eb:b5:6a:1a:54:f7:0d:cd:e4:b3:90:2a:80:98:31:17:4f:
80:d9:4b:1e:57:da:eb:b6:e5:35:8a:9c:c1:ce:53:ed:97:33:
39:81:1d:1d:10:03:1e:09:d4:aa:87:69:5a:f3:e8:ff:85:d9:
3b:0d:90:74:79:4a:65:61:04:ed:9a:13:d0:3d:75:49:4f:a2:
02:d7:3a:d1:5f:85:70:c9:2c:ba:07:81:d5:a0:65:7c:e6:cb:
c3:d7:c1:bb:37:69:b5:58:2b:92:0c:99:24:26:1c:19:b1:a2:
26:6f:fc:0f:50:88:18:37:29:55:0b:8d:1b:41:1a:e1:86:a9:
fa:7d:52:62:a8:d9:a9:eb:e6:55:a9:83:be:fe:9f:3b:87:b5:
c1:90:a3:31:db:26:99:92:f3:fa:d3:6a:82:13:0d:39:2d:ce:
e6:3f:15:ee:fc:c6:a4:ef:a8:d1:b4:3a:ff:38:3f:56:4f:3f:
31:4b:35:dc:60:9f:8a:6c:05:4b:64:55:6d:ce:aa:b3:58:5c:
df:87:2d:35:7f:c7:5c:63:46:6c:61:4e:f5:64:20:01:00:d3:
de:53:8f:21:1b:87:83:89:63:3f:0f:c6:20:eb:b3:e4:31:77:
c2:53:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:49 2025 by rpki-client