Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31353a3a2f34382d3438203d3e203532333433.roa
File: 323830303a36383a31353a3a2f34382d3438203d3e203532333433.roa (raw, json)
Hash identifier: yQAo8dBhVQimzlbZS5VmR5mDrzbRjou8hD5J/rS6tbk=
Subject key identifier: 13:5A:33:9B:EE:90:39:BC:21:F6:AD:BB:5E:74:9A:B1:C4:CD:0C:E2
Certificate issuer: /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial: 0D22C58C44328254FABFBBE6487943F255992C75
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31353a3a2f34382d3438203d3e203532333433.roa
Signing time: Tue 04 Feb 2025 18:16:10 +0000
ROA not before: Tue 04 Feb 2025 18:11:10 +0000
ROA not after: Tue 03 Feb 2026 18:16:10 +0000
asID: 52343
IP address blocks: 2800:68:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:22:c5:8c:44:32:82:54:fa:bf:bb:e6:48:79:43:f2:55:99:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
Validity
Not Before: Feb 4 18:11:10 2025 GMT
Not After : Feb 3 18:16:10 2026 GMT
Subject: CN=135A339BEE9039BC21F6ADBB5E749AB1C4CD0CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:bc:20:16:0c:a4:96:03:bd:96:d2:58:66:
88:be:0e:f7:35:3f:1d:e9:79:fc:46:57:4c:3b:a6:
16:81:c8:92:73:6b:d0:b5:5c:95:16:c0:1a:f0:e2:
d0:c7:7f:7b:7b:fd:f3:a3:0e:6c:dd:a8:b9:f6:f3:
6b:e9:db:86:93:9f:8a:1d:73:a2:f0:72:5d:f2:2b:
2b:d9:67:2e:57:aa:11:33:d5:b8:8a:92:eb:a0:43:
e8:19:eb:bc:68:76:cd:97:fa:6d:fb:f9:34:57:28:
45:f2:d9:66:a2:56:34:6b:a2:22:bc:31:21:75:dd:
e3:ed:41:60:e9:ce:7c:ea:97:21:40:c4:ce:c3:93:
f5:43:38:7f:d4:af:a8:cf:26:41:83:67:5d:23:bf:
81:7c:21:32:cc:c7:82:75:c8:76:8d:c0:55:60:5f:
00:57:d9:93:16:f8:91:7f:1e:d4:b0:76:7c:36:a1:
3a:a8:cc:3e:98:8d:62:aa:ee:67:5c:67:36:3b:46:
77:92:80:c8:ca:cc:4e:52:9a:19:b1:c0:5e:f0:ec:
8c:59:fe:db:2a:4f:d4:a4:3a:d6:47:8b:1a:df:be:
6e:a0:7a:8e:22:3e:0b:0f:f8:6d:64:4c:01:ba:d5:
b1:91:e8:7d:6c:34:ec:09:02:2c:75:ac:80:28:0b:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:33:9B:EE:90:39:BC:21:F6:AD:BB:5E:74:9A:B1:C4:CD:0C:E2
X509v3 Authority Key Identifier:
keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31353a3a2f34382d3438203d3e203532333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:68:15::/48
Signature Algorithm: sha256WithRSAEncryption
22:92:2b:68:07:b8:56:fb:16:88:c6:f1:0b:5c:ec:c4:81:47:
95:d4:21:32:d1:e5:58:a7:1c:e1:1a:89:d2:05:e0:19:14:58:
09:af:72:85:17:12:51:a6:04:f1:88:db:f1:05:07:1f:e4:59:
ac:8a:46:e3:1a:44:1f:06:eb:8f:68:2a:3c:df:b9:64:d1:70:
a2:55:9d:be:74:05:02:c6:74:82:67:ae:a3:c1:b0:41:fe:de:
b1:b5:2d:5b:8a:30:ea:70:28:2b:97:df:bb:ad:88:17:e0:c9:
e0:49:b9:d1:bc:27:fd:a6:d3:73:3b:75:9e:1c:1a:5e:93:7f:
c5:e9:59:84:af:1d:33:8c:f4:4f:7b:2c:ee:61:76:54:0f:82:
df:ca:3a:5a:06:38:69:c6:4b:69:b3:3a:ac:3f:fd:62:c4:28:
a4:c3:fe:30:67:2e:0d:88:0f:41:cf:81:5f:02:1d:d0:c7:22:
bd:e4:1c:41:52:f5:4e:de:28:82:ee:93:69:e3:8b:ea:0d:24:
af:61:9f:f5:a7:31:c0:02:c0:92:3c:45:8f:45:33:e7:c4:f6:
ce:6b:56:af:0b:fc:86:74:3c:bb:93:bb:fa:cb:6e:4e:78:05:
59:a7:5c:36:72:4f:b8:de:63:02:9e:e7:41:ad:3f:fe:8d:93:
f1:88:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:58 2025 by rpki-client