Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa
File: 323830333a393265303a3a2f33322d3332203d3e20323639393332.roa (raw, json)
Hash identifier: lp5CSBJtLoC5v6iU8Y88AOWs4MhVCeZbGBeftB/8n7c=
Subject key identifier: E4:F4:74:34:05:52:CD:09:A7:32:AA:37:FC:F0:88:DA:10:72:5B:D4
Certificate issuer: /CN=56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0
Certificate serial: 5DDF51237552296E700ABF8EB644D82961CA4F00
Authority key identifier: 56:C9:5E:C2:74:0D:BF:89:FB:9E:A3:CF:DB:5D:A5:E8:4E:5A:9D:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa
Signing time: Tue 04 Feb 2025 20:07:14 +0000
ROA not before: Tue 04 Feb 2025 20:02:14 +0000
ROA not after: Tue 03 Feb 2026 20:07:14 +0000
asID: 269932
IP address blocks: 2803:92e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:df:51:23:75:52:29:6e:70:0a:bf:8e:b6:44:d8:29:61:ca:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0
Validity
Not Before: Feb 4 20:02:14 2025 GMT
Not After : Feb 3 20:07:14 2026 GMT
Subject: CN=E4F474340552CD09A732AA37FCF088DA10725BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:db:9e:0c:01:5e:08:80:c9:7a:4f:f1:9f:
3d:d4:dc:69:fc:e6:98:9e:83:a5:90:77:d3:70:a1:
16:66:ac:2c:e0:55:03:86:cc:43:28:8c:21:ce:48:
ff:1d:7a:63:fd:61:e3:55:33:ee:57:25:5e:2a:26:
c1:90:44:f0:2f:b5:0b:03:c9:db:cf:e1:59:29:66:
0c:b3:cc:39:14:fa:e4:83:a9:e0:c1:8a:55:9b:c5:
13:4a:60:64:01:b5:7d:86:e3:60:e1:e8:8b:2c:cc:
e0:45:5e:56:48:7d:28:e0:b6:bd:df:59:ae:ef:10:
58:ca:28:6e:8f:e2:07:2d:1a:aa:91:83:0d:06:84:
72:ad:7f:45:77:ad:a9:cf:14:b0:e4:63:ca:5b:f2:
83:3c:4b:6a:c5:bd:bd:f2:9d:98:70:e0:3d:61:98:
8c:6a:df:95:af:47:a9:f3:57:48:53:c8:0e:79:08:
24:00:39:1e:6f:4c:43:5c:8c:12:05:e3:a4:af:45:
cc:89:2e:7c:da:94:08:ec:6f:f9:72:e4:05:d3:cf:
c2:58:a7:57:bb:b2:10:54:e8:b5:18:4b:1f:a5:be:
c0:62:3d:88:2a:7a:d0:d0:8f:b3:2a:21:40:e6:1e:
b5:7e:dd:12:91:67:cd:f9:0a:59:03:61:94:c3:c0:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:74:34:05:52:CD:09:A7:32:AA:37:FC:F0:88:DA:10:72:5B:D4
X509v3 Authority Key Identifier:
keyid:56:C9:5E:C2:74:0D:BF:89:FB:9E:A3:CF:DB:5D:A5:E8:4E:5A:9D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:92e0::/32
Signature Algorithm: sha256WithRSAEncryption
80:a1:5f:b9:a2:c8:4b:96:67:85:55:13:7f:ce:52:9e:8b:13:
3e:48:89:58:3d:e0:42:45:e5:ee:45:37:ae:19:da:c2:e8:b0:
a3:f2:d2:19:22:d4:c3:7e:4d:3f:a5:69:8e:76:72:04:2f:7d:
16:93:20:0b:a9:f7:3e:56:0a:17:5f:62:0d:1b:c5:c1:3c:0d:
65:1a:48:ef:61:d6:9d:a0:3f:4b:81:86:24:40:d7:94:b6:8d:
6a:17:c4:f9:ba:f5:8c:97:cc:90:e0:66:6c:e6:fe:ff:c0:60:
08:6f:ae:de:a7:d8:7c:9d:d2:3e:39:bc:0e:97:9f:74:0a:b9:
af:fd:76:49:23:5f:57:b2:d8:4d:1a:a1:3b:bf:24:f4:16:b5:
70:9a:2d:0f:da:be:0b:32:35:92:0a:ba:94:af:9b:12:eb:60:
af:85:64:88:3c:a7:9c:ce:84:6a:92:a2:74:8d:f8:30:d3:ff:
a5:88:8c:1c:a7:b2:9c:42:b1:21:34:b7:4c:8a:56:e0:0e:5c:
c1:09:e9:bb:74:d5:64:24:83:b5:8e:53:7b:44:0e:b9:59:37:
fe:7e:c3:ff:54:b4:dd:ec:94:dc:3b:ca:ca:58:1d:ec:fe:ff:
d7:56:2d:43:3f:d6:b9:59:3c:07:07:6a:5c:db:d7:7a:3c:a4:
98:0e:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:29 2025 by rpki-client