Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
File: 323830303a36383a3a2f33322d3438203d3e203237383431.roa (raw, json)
Hash identifier: ASMJcpmbsB9R3f+lv95USi+WRXqMlRzrmuP7S6suVDk=
Subject key identifier: 0B:9D:C2:02:FD:9E:6F:E4:7D:E4:7E:74:19:D4:80:20:72:A9:A1:35
Certificate issuer: /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial: 554F8C7CAB77B4D4020E9606905280E4F6DEEC59
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
Signing time: Tue 04 Feb 2025 18:16:07 +0000
ROA not before: Tue 04 Feb 2025 18:11:07 +0000
ROA not after: Tue 03 Feb 2026 18:16:07 +0000
asID: 27841
IP address blocks: 2800:68::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4f:8c:7c:ab:77:b4:d4:02:0e:96:06:90:52:80:e4:f6:de:ec:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
Validity
Not Before: Feb 4 18:11:07 2025 GMT
Not After : Feb 3 18:16:07 2026 GMT
Subject: CN=0B9DC202FD9E6FE47DE47E7419D4802072A9A135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:a7:f4:1e:e5:4a:70:62:28:45:d9:c6:72:
07:f4:e8:25:20:e3:ab:ab:b1:df:1d:e0:9e:92:c6:
e8:94:ab:c5:81:7a:4f:71:75:3a:5f:29:bc:da:f1:
a9:60:bb:01:c9:be:87:cf:06:3e:78:83:a8:e6:42:
40:0e:4e:e9:55:b0:83:b4:82:f8:95:0e:1c:1e:db:
62:d8:6e:e9:54:e3:9d:90:16:a7:ef:91:c0:f5:75:
83:52:1c:68:12:27:b7:ad:a8:d3:0b:ff:30:ef:20:
90:d4:11:fa:4f:86:ce:64:d0:53:d7:c1:77:dc:d9:
24:7a:ed:44:8c:a6:3f:16:28:00:7c:64:3b:6b:49:
28:42:20:3d:32:27:70:3a:52:e5:8c:1c:25:c5:4d:
f0:6d:97:b5:57:35:3d:61:07:31:a5:a0:dc:fe:5e:
0a:4f:64:cf:66:99:82:64:6b:a7:58:ec:6d:02:31:
59:56:0d:9b:a4:36:3a:c7:bf:2d:d6:18:45:29:b8:
dd:08:e5:3f:48:45:dd:7e:6c:3f:7b:7b:16:98:70:
b1:eb:64:27:49:fa:d2:bf:34:b3:46:b3:cb:e7:ba:
b8:9b:9f:0b:e5:97:3e:51:aa:5f:1b:95:df:37:12:
98:fe:36:71:15:d1:7d:c1:ac:95:6f:4d:46:6c:ed:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:C2:02:FD:9E:6F:E4:7D:E4:7E:74:19:D4:80:20:72:A9:A1:35
X509v3 Authority Key Identifier:
keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:68::/32
Signature Algorithm: sha256WithRSAEncryption
5a:38:e7:83:31:4d:74:a7:c9:dc:a7:06:62:12:d3:e0:b5:f7:
8e:f7:a9:b9:a2:29:67:78:ce:c3:7a:95:83:4d:4a:e5:1c:f8:
98:77:04:f4:c1:00:cd:b1:52:4e:63:3c:66:00:d9:c4:00:54:
e1:a7:10:c4:24:47:a7:db:c1:f3:38:75:9c:bf:75:44:5f:4d:
e7:d7:b9:07:8b:b8:ae:8a:91:f5:09:44:77:c4:42:4f:fe:d5:
aa:af:7c:1e:f9:44:04:86:2d:a0:88:e1:84:19:d3:f9:c7:fd:
4c:5b:c6:bd:06:a9:c8:f8:91:04:8d:78:b7:46:7f:ad:12:e3:
dc:b3:da:89:01:3b:43:9a:e5:c1:95:fd:44:10:f8:fb:66:84:
e1:49:e1:0d:01:2a:e0:92:df:d4:68:e2:78:ef:3a:43:ae:5e:
54:76:43:b7:03:79:b1:07:97:56:5d:52:b5:98:7a:0e:76:f2:
0c:d8:dc:65:3b:d9:18:f2:92:a4:2e:f2:3c:54:76:d1:4b:9f:
b7:10:9a:9c:c7:fd:6d:24:a3:89:03:98:a1:57:db:2d:0a:42:
74:fd:0b:01:db:8e:f6:85:db:0a:e0:98:47:e7:ce:18:e6:80:
21:c0:7e:c9:7c:ef:3f:3c:d5:d5:0e:3e:86:08:b3:e8:d2:3f:
dd:23:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:17:44 2025 by rpki-client