Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa
File: 323830333a643138303a3a2f33322d3438203d3e20323633323435.roa (raw, json)
Hash identifier: jqKQHbfrFy/l+5oOAcSiDqIPujMdEpn+8I/VCM5ZOs0=
Subject key identifier: 58:C9:B1:DF:C8:CE:65:E9:5B:D1:4B:AB:03:95:3C:51:9E:6E:63:87
Certificate issuer: /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial: 52249A23242B837DEDD63E7AC467D3378970D150
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa
Signing time: Tue 04 Feb 2025 18:51:09 +0000
ROA not before: Tue 04 Feb 2025 18:46:09 +0000
ROA not after: Tue 03 Feb 2026 18:51:09 +0000
asID: 263245
IP address blocks: 2803:d180::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:24:9a:23:24:2b:83:7d:ed:d6:3e:7a:c4:67:d3:37:89:70:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Validity
Not Before: Feb 4 18:46:09 2025 GMT
Not After : Feb 3 18:51:09 2026 GMT
Subject: CN=58C9B1DFC8CE65E95BD14BAB03953C519E6E6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:29:bf:72:58:28:71:20:e4:c0:34:0b:a6:
5f:a8:57:1e:ca:d3:05:b4:9a:f1:ed:ef:49:17:0b:
90:65:f9:42:96:9a:1a:c9:ee:c0:11:76:a4:75:31:
ee:24:a7:d0:94:0e:37:7e:60:28:0e:bd:34:10:1a:
0d:db:4e:f6:50:83:39:a8:ee:5e:1b:99:a3:1d:fd:
60:1b:b7:5e:8b:69:f2:7a:df:5d:5c:e1:99:9c:22:
f6:1f:a0:5e:c9:06:14:30:3b:72:b2:df:30:86:be:
9b:ac:9a:9d:65:44:8a:a2:18:e6:ca:7b:46:bf:91:
07:9c:fc:6a:41:34:1a:b8:90:c6:47:24:f9:da:fc:
d5:c1:0c:d6:e1:48:10:4d:1d:ae:af:fd:b8:81:55:
89:a2:26:63:b0:de:f5:d4:90:29:d2:a8:1b:f4:cb:
25:50:ed:96:6d:29:3e:40:36:58:21:f7:50:c1:5d:
ef:05:63:b5:aa:0c:81:8a:17:c3:f3:12:11:ef:c6:
3b:11:59:d4:d8:13:df:36:81:26:87:07:93:85:e2:
c2:b4:76:81:46:5f:4e:14:7b:21:6b:8a:c2:38:c0:
af:9f:5f:c9:58:fd:76:48:e6:f5:d6:ea:dd:20:95:
48:85:7e:3f:77:41:5d:cb:b6:95:5e:bd:a8:8f:5f:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C9:B1:DF:C8:CE:65:E9:5B:D1:4B:AB:03:95:3C:51:9E:6E:63:87
X509v3 Authority Key Identifier:
keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3438203d3e20323633323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d180::/32
Signature Algorithm: sha256WithRSAEncryption
9f:41:f5:5e:44:45:e3:85:57:b5:35:9c:0d:ef:f9:1a:24:bc:
38:92:c9:e1:10:bb:61:15:74:92:f4:4b:86:fa:f2:e2:52:2c:
ab:e1:00:14:6a:22:4a:90:22:52:fc:d4:21:29:a8:cb:25:74:
cf:7b:2d:f6:c3:ec:f2:b4:35:1e:83:af:d4:41:04:65:fb:da:
b2:34:94:8e:80:c6:0a:7c:75:ff:a7:39:b9:8d:64:5c:cf:5d:
59:46:08:92:05:ff:b2:d4:a1:91:f8:29:56:65:36:8f:82:dd:
66:f2:28:aa:d6:e9:f8:d7:27:a7:17:6c:55:d1:c3:8c:94:5c:
7b:80:74:be:f4:10:5d:7f:87:4e:85:de:64:7c:4c:ad:6f:8e:
99:75:2c:74:b1:20:26:4c:f8:3c:05:b5:79:e9:ae:2e:a3:08:
93:90:8d:21:a6:b0:ef:75:5c:a1:1a:82:1d:15:d4:1e:33:2e:
bb:50:92:27:ee:2e:0f:ee:d6:32:82:5d:c7:a9:f0:75:c5:a8:
6f:dc:d7:1a:17:20:88:30:37:4c:5b:65:eb:09:f5:7f:75:5e:
cf:27:f0:e1:46:23:82:d0:9c:14:38:71:7f:e8:a6:c5:4f:a2:
c9:13:5d:e3:a8:66:44:04:2a:ca:cd:6a:55:da:ab:40:41:b7:
86:16:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:39 2025 by rpki-client