Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa
File: 323830303a3632303a3a2f33322d3634203d3e203131353632.roa (raw, json)
Hash identifier: i1nG7tEOo8p+D6GlXOMjrMMbg2UwcpaIzoEa5SI13z4=
Subject key identifier: 87:C8:A6:2B:60:51:A8:C4:44:9D:1B:F1:76:FB:DD:E7:43:1E:29:3D
Certificate issuer: /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial: 03DB805D073E4087CE954273DC4F8C29B0490702
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa
Signing time: Tue 04 Feb 2025 18:00:51 +0000
ROA not before: Tue 04 Feb 2025 17:55:51 +0000
ROA not after: Tue 03 Feb 2026 18:00:51 +0000
asID: 11562
IP address blocks: 2800:620::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:db:80:5d:07:3e:40:87:ce:95:42:73:dc:4f:8c:29:b0:49:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Validity
Not Before: Feb 4 17:55:51 2025 GMT
Not After : Feb 3 18:00:51 2026 GMT
Subject: CN=87C8A62B6051A8C4449D1BF176FBDDE7431E293D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:8a:cf:38:0a:12:62:41:31:d3:71:f1:9d:
2d:fd:18:05:5b:23:15:81:08:41:f4:bf:33:6d:83:
6f:d5:b7:88:2f:c7:1d:90:a8:5c:b6:f8:2b:d0:76:
d3:2a:bd:c0:04:1f:e3:02:d6:89:f5:c9:5f:0d:53:
bb:66:1b:63:d7:25:8e:1f:41:b6:34:78:3c:99:63:
f6:5c:fc:33:c8:24:b9:39:62:06:ca:fb:d1:60:e9:
bd:22:e6:94:b1:af:75:3d:83:5e:83:62:7c:ed:b4:
95:49:ee:36:d8:81:2b:b3:44:e4:ef:53:41:34:f6:
7a:ba:16:48:c0:21:e4:98:0d:ab:39:18:62:5f:8f:
b7:28:66:14:cf:44:f9:68:86:eb:bb:e5:20:7b:34:
22:57:ee:75:5f:84:47:1a:6e:fd:0e:60:31:a8:43:
89:e8:5b:22:6c:2c:8d:3a:a4:2d:22:a9:cb:81:b3:
23:05:80:b2:3b:83:61:d6:6e:d7:77:cf:5f:ec:ce:
14:9c:c6:c6:8b:89:8b:54:8e:17:81:e4:49:dc:93:
fb:31:91:7e:68:36:c7:7b:76:06:0b:ba:13:45:d8:
94:6a:75:7a:94:18:00:d8:d2:42:99:3d:4e:20:5c:
b3:11:ac:73:ae:0f:49:66:44:31:e5:0a:49:fa:69:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:A6:2B:60:51:A8:C4:44:9D:1B:F1:76:FB:DD:E7:43:1E:29:3D
X509v3 Authority Key Identifier:
keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:620::/32
Signature Algorithm: sha256WithRSAEncryption
10:d6:d7:a8:f9:61:96:3e:df:ea:be:a3:b3:c1:ae:4d:95:ad:
f0:85:b3:51:5f:4e:c8:50:9e:43:c9:a0:3c:12:64:97:b1:d5:
e6:9b:03:35:9c:af:2c:7e:9b:6f:60:f7:87:32:6b:2d:13:e3:
ad:e9:77:c3:e0:1f:e2:02:d0:38:4a:87:cb:a4:cf:9a:f6:9f:
af:63:f3:24:1e:08:ad:50:27:c0:44:5a:5b:c2:8e:1f:30:e8:
e4:8b:07:73:c4:fb:22:7c:1c:80:49:15:48:01:06:46:58:0b:
ac:d3:33:6f:7b:fc:fb:bc:5d:d9:1a:42:cf:3c:91:9e:2e:31:
f1:64:f9:1f:51:7b:16:df:49:73:e5:ea:15:fd:b3:53:6d:a0:
65:11:61:5a:1a:24:4b:4c:af:e5:b2:67:ea:2b:96:b7:f4:dd:
13:83:cd:34:18:56:8f:74:90:65:18:89:9b:9d:29:ba:09:0e:
b5:df:f4:e9:30:f2:13:c5:b6:f1:a8:f1:70:f0:a8:f1:84:60:
ec:8f:ff:f4:21:a9:e6:9d:55:c1:5b:ce:4c:9b:20:b1:79:13:
4e:8e:0c:11:b9:0c:9e:7b:70:e6:f3:56:40:5c:57:1b:79:b2:
d4:ca:6c:02:53:2d:27:1c:88:03:36:d5:4f:ab:72:ab:8e:e4:
43:90:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:08 2025 by rpki-client