Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203238313138.roa
File: 323030313a313366303a3a2f33322d3332203d3e203238313138.roa (raw, json)
Hash identifier: l1GRJnrKRLwbFsvx8Irp0BSYfu1C7JO05lo78eFj+VM=
Subject key identifier: 8D:81:43:73:56:F3:CD:35:00:C2:3F:A7:D1:75:FF:97:0E:36:AF:63
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 2936DCF362FD8774CD56CF31F61FC50CE933EE36
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203238313138.roa
Signing time: Tue 04 Feb 2025 18:46:56 +0000
ROA not before: Tue 04 Feb 2025 18:41:56 +0000
ROA not after: Tue 03 Feb 2026 18:46:56 +0000
asID: 28118
IP address blocks: 2001:13f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:36:dc:f3:62:fd:87:74:cd:56:cf:31:f6:1f:c5:0c:e9:33:ee:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Feb 4 18:41:56 2025 GMT
Not After : Feb 3 18:46:56 2026 GMT
Subject: CN=8D81437356F3CD3500C23FA7D175FF970E36AF63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:e2:41:03:db:74:08:ed:08:28:ef:b7:a0:
6f:50:6b:da:e5:14:08:60:af:d1:0f:c2:50:3b:40:
c5:82:20:a6:30:03:26:27:6f:9e:22:7e:85:85:e0:
17:5d:4a:64:5d:f5:ff:df:84:65:5e:a5:43:c0:8f:
d9:10:67:f6:a4:81:3f:4d:02:d9:75:39:5f:2c:cd:
c7:7c:b5:e3:f7:13:d0:b1:e2:11:52:6e:25:64:f9:
d4:61:8b:12:7a:67:73:29:a0:c9:2a:64:d2:f6:ee:
fd:02:e3:57:cc:06:d3:79:20:ed:22:c3:3b:b6:0f:
f1:d8:ae:7d:71:a9:81:cd:23:da:61:a6:4d:ab:95:
c3:74:72:3c:39:17:a2:ae:92:43:22:21:07:62:cf:
2b:28:00:05:79:84:f2:8d:2e:f2:ab:3d:34:ac:97:
0f:b4:dc:37:88:67:a6:e0:3b:2a:30:7c:90:68:a8:
96:d7:ae:03:1d:51:a4:ea:d0:02:9e:5e:1b:27:7a:
4e:7b:e8:b3:79:d9:74:08:de:1f:cf:17:a1:bc:47:
f5:ad:c8:d4:d9:f6:fc:ed:8c:61:93:28:18:c2:52:
31:8e:06:59:91:ed:39:11:ed:64:36:18:4a:c2:2a:
63:7d:5a:7f:6e:f5:de:2f:1c:71:72:cf:21:c4:b2:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:43:73:56:F3:CD:35:00:C2:3F:A7:D1:75:FF:97:0E:36:AF:63
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323030313a313366303a3a2f33322d3332203d3e203238313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:13f0::/32
Signature Algorithm: sha256WithRSAEncryption
67:12:2a:a3:35:09:b5:92:74:50:e1:03:8c:aa:89:b5:8a:ff:
cb:57:f7:49:55:c4:34:99:90:4c:22:51:71:38:1f:e5:18:4c:
d5:b6:bb:38:d3:a1:4f:37:0c:d4:70:d4:6c:78:56:a8:4d:b0:
b7:08:f8:8d:4e:70:28:24:1f:c2:0f:3a:a0:80:07:8d:83:93:
eb:dd:fb:1e:b9:f0:81:6b:64:30:a1:1f:88:ff:e6:55:fb:39:
6b:51:6a:3a:37:70:c3:8c:1b:ea:1c:e2:b7:31:a4:5e:ca:8d:
ba:c5:f6:68:08:d4:69:e6:82:67:ef:2e:db:27:d8:33:35:34:
00:86:ec:70:f2:57:f6:83:59:d6:e8:8b:bb:37:db:95:87:79:
1e:dd:95:64:1d:90:5f:ac:7b:5a:1c:d5:83:2f:c7:9f:ca:a3:
8e:08:52:39:5c:11:c3:9e:af:74:cf:4e:0f:db:27:47:4b:83:
35:6e:50:35:18:fd:30:a8:41:fb:68:c9:fd:47:be:b2:18:d2:
ca:66:f6:63:06:8d:fe:23:fd:6b:70:11:f2:a6:3f:e3:52:0b:
3c:70:9d:26:d4:81:fb:fd:c6:4d:c9:fe:14:41:49:3e:7f:49:
16:e8:f3:68:75:dc:da:2e:39:60:fe:4b:bb:0a:00:7d:77:31:
97:07:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client