Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a313a3a2f34382d3438203d3e203238343538.roa
File: 323830363a3230323a313a3a2f34382d3438203d3e203238343538.roa (raw, json)
Hash identifier: N8aB4BAVLocT6uJSHaQ5Rj8FgAOeIaX86/WFsqPBRT8=
Subject key identifier: A8:7C:DD:BE:8C:B7:91:29:30:FE:AD:83:03:79:B9:C4:52:E3:C2:67
Certificate issuer: /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial: 443F0BA3535E387F76E2C2F0CBD835B7EE9F4B5C
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a313a3a2f34382d3438203d3e203238343538.roa
Signing time: Tue 04 Feb 2025 19:58:06 +0000
ROA not before: Tue 04 Feb 2025 19:53:06 +0000
ROA not after: Tue 03 Feb 2026 19:58:06 +0000
asID: 28458
IP address blocks: 2806:202:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:0b:a3:53:5e:38:7f:76:e2:c2:f0:cb:d8:35:b7:ee:9f:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Validity
Not Before: Feb 4 19:53:06 2025 GMT
Not After : Feb 3 19:58:06 2026 GMT
Subject: CN=A87CDDBE8CB7912930FEAD830379B9C452E3C267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:0b:72:a9:86:85:e0:31:1f:55:67:72:08:
b9:aa:12:55:bc:fd:4f:43:a9:6c:ce:86:b1:14:d4:
89:30:e0:e2:e4:42:9e:68:8f:9a:a8:9e:94:d2:f8:
2b:c4:fb:17:26:16:31:00:ee:82:c9:f7:ae:04:4f:
89:f4:ee:28:44:78:65:c9:1a:9d:83:79:81:06:53:
75:d3:ef:1e:27:9b:6f:23:9e:48:0b:30:5d:5e:83:
db:70:b0:7b:47:e3:55:9e:2a:f3:07:24:b6:ad:2e:
b5:d4:b7:72:8d:d2:2b:30:d4:b0:23:c8:69:1f:66:
79:f6:a0:ec:e5:ce:f9:74:af:56:53:f4:54:30:89:
a4:65:c3:9d:ae:a1:f8:23:74:30:92:fb:fe:c8:a5:
f7:f0:e9:1d:2e:0e:b0:4f:f2:f8:c3:cf:91:32:a2:
77:b0:20:4e:b4:13:aa:37:f8:07:0c:db:3b:7d:7c:
9f:30:a0:69:09:d3:77:f5:e1:ba:f6:64:67:a9:69:
e5:0b:2d:66:89:1a:7d:c4:45:a8:af:bd:35:69:85:
d0:f8:36:fa:46:ae:8e:93:f2:0b:7f:23:0b:5b:51:
1e:9b:41:c9:a8:e4:0a:21:18:41:fe:a6:86:3f:99:
1f:42:5f:3b:bf:19:ac:87:47:ea:79:c5:9d:8c:00:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:DD:BE:8C:B7:91:29:30:FE:AD:83:03:79:B9:C4:52:E3:C2:67
X509v3 Authority Key Identifier:
keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a313a3a2f34382d3438203d3e203238343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:202:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:d2:df:b3:85:62:ec:8c:62:ef:56:97:55:b3:b3:f4:c0:72:
fc:55:72:c8:12:77:4e:e1:0e:cd:62:2b:39:d8:b6:6c:e7:16:
8a:17:93:b2:b3:7c:5e:fd:bc:cd:b8:b0:ac:71:b8:79:07:ec:
c2:c2:23:44:3c:3c:7f:9d:85:66:d1:9f:de:0e:21:4c:03:55:
f5:ac:39:8e:fc:e7:34:da:8f:71:6d:75:2d:20:15:a4:62:f2:
fa:13:bd:da:96:e0:76:8f:c5:c5:0e:41:c6:c3:30:85:34:78:
dc:86:36:6c:1a:94:b2:13:ba:5e:8b:67:78:f0:ed:66:a0:0e:
da:d4:9a:50:c7:2e:a8:65:16:7c:ba:0c:2e:82:98:6b:ab:d8:
8e:a1:3e:64:79:e0:d1:8a:f4:b6:de:70:17:41:bc:6d:3c:b5:
c0:17:fe:54:fb:9b:ee:2a:28:15:63:0c:43:e6:8a:f3:84:90:
11:f5:b3:ae:60:8f:ef:a7:55:c4:2e:2f:31:13:9a:b3:e9:f8:
a9:08:8b:87:9e:19:ab:bf:64:e6:43:14:95:bd:45:b8:a6:9d:
f7:0c:29:79:62:61:2b:96:e6:f3:54:19:56:76:a8:1a:96:d1:
09:1b:86:9c:4b:98:7e:43:02:83:f4:05:c7:11:38:07:23:11:
e2:c3:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:10 2025 by rpki-client