Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa
File: 323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa (raw, json)
Hash identifier: f/iVfumaygL6JONu1dQDdpQwpSO6O1B0v06RAFr8dwU=
Subject key identifier: 0E:AC:EE:F1:78:09:69:95:B6:E4:5D:6A:2A:87:6B:BC:33:22:4C:44
Certificate issuer: /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial: 29CB74DDC81542495D7BC3A5740033497E29A827
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa
Signing time: Mon 09 Dec 2024 13:05:00 +0000
ROA not before: Mon 09 Dec 2024 13:00:00 +0000
ROA not after: Mon 08 Dec 2025 13:05:00 +0000
asID: 266809
IP address blocks: 2803:60a0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cb:74:dd:c8:15:42:49:5d:7b:c3:a5:74:00:33:49:7e:29:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Validity
Not Before: Dec 9 13:00:00 2024 GMT
Not After : Dec 8 13:05:00 2025 GMT
Subject: CN=0EACEEF178096995B6E45D6A2A876BBC33224C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:24:75:a3:12:85:aa:18:92:16:c4:52:a3:
29:45:30:be:28:7c:5a:b0:7b:81:24:b4:79:82:47:
f2:08:29:51:3a:11:e4:5d:4f:02:ac:c8:ab:6b:95:
f0:ad:e0:79:db:84:d3:64:e0:a2:c4:08:bf:0b:af:
59:8e:86:93:2d:39:09:1e:b6:67:7b:d2:44:ae:39:
d5:67:de:e4:3b:ac:a9:84:b6:f8:c6:47:37:32:da:
03:12:64:42:0b:48:b8:7d:76:7f:b7:21:49:d9:d1:
c1:89:f6:cc:46:23:68:d4:d1:96:cf:08:cf:1a:97:
7c:59:da:b0:6c:5c:5f:ea:b3:47:a6:26:47:82:8d:
5f:06:58:09:79:7a:53:76:d5:44:0b:3d:30:af:b6:
ec:dd:cd:86:88:e9:eb:cc:e4:7d:21:9f:0e:ea:a6:
2f:5d:70:7f:c5:28:a2:f4:0d:a7:67:46:3d:c5:9c:
d3:28:7d:7a:3f:e6:aa:1f:b5:2c:93:f2:ba:30:8c:
01:15:50:c8:59:ad:4f:2a:2b:4f:42:f8:83:0d:29:
07:a9:84:84:7d:d4:8b:75:4a:9c:7d:3b:24:d1:6f:
cb:54:dc:eb:62:e2:2f:24:e5:c9:cc:60:c3:d6:91:
2b:8f:8a:16:a1:1f:42:7b:78:a1:5e:25:1b:6b:d9:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:EE:F1:78:09:69:95:B6:E4:5D:6A:2A:87:6B:BC:33:22:4C:44
X509v3 Authority Key Identifier:
keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:60a0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
32:73:58:68:aa:27:99:47:c0:d3:27:6a:65:6a:93:bb:91:df:
94:b7:c4:3b:32:9b:51:ba:20:d5:1e:8d:9d:df:2a:bc:e2:33:
0f:ff:97:4d:5c:a9:a1:aa:74:54:da:13:aa:00:3a:ed:4b:bd:
2c:37:af:15:73:11:16:a0:32:b6:da:25:1e:c7:04:8e:44:91:
0b:8a:e0:a8:f9:c3:12:ac:b5:d9:f6:37:ea:00:85:dc:41:0b:
2c:b8:fb:e8:b0:ac:94:6c:ef:5b:70:fb:12:0b:66:b1:26:a9:
ac:b5:9e:8e:74:73:a3:c0:2c:35:ce:78:f8:a1:62:93:5a:d1:
64:47:78:53:87:0c:27:e1:f2:c3:a0:3a:ef:bd:f5:7d:88:2c:
9a:7d:52:19:2c:04:36:28:d8:56:f7:41:61:0c:77:53:41:8d:
4d:55:e6:4c:f7:c0:e0:70:07:87:ff:46:f8:48:da:79:62:3d:
73:75:e2:df:48:ef:8d:bc:8b:70:a7:e0:35:ea:d9:d6:3e:03:
0b:b2:4a:fa:90:1f:0c:63:d8:f3:51:f0:8e:0a:7c:e8:52:40:
14:40:b4:81:40:84:e2:a7:98:3f:7a:52:ab:e3:5a:3a:aa:0a:
b6:32:ad:90:ae:4d:52:2a:97:6d:01:a1:35:7d:dc:4b:66:ae:
2a:e6:f0:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:09 2025 by rpki-client