Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa
File: 323830303a3664303a3a2f33322d3438203d3e203139383839.roa (raw, json)
Hash identifier: Qu6S/WTFbM8X/5+T8wrb7FjKmgxsfh1u/Wnw4xIHtSA=
Subject key identifier: 58:53:08:BF:D4:A9:94:CA:07:B6:FA:2C:91:11:24:11:D5:23:92:70
Certificate issuer: /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Certificate serial: 709C49FA651BE1F024A31DAFC2EBD41A79D2A420
Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa
Signing time: Tue 04 Feb 2025 20:06:30 +0000
ROA not before: Tue 04 Feb 2025 20:01:30 +0000
ROA not after: Tue 03 Feb 2026 20:06:30 +0000
asID: 19889
IP address blocks: 2800:6d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9c:49:fa:65:1b:e1:f0:24:a3:1d:af:c2:eb:d4:1a:79:d2:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Validity
Not Before: Feb 4 20:01:30 2025 GMT
Not After : Feb 3 20:06:30 2026 GMT
Subject: CN=585308BFD4A994CA07B6FA2C91112411D5239270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:56:c2:7d:ec:90:ef:b8:59:92:e0:4b:ac:
d8:34:d3:2c:87:f1:05:37:84:6e:0a:f2:e4:81:5d:
82:77:f7:27:3b:62:ec:24:b2:46:dd:a6:8a:49:e4:
10:1c:e9:42:78:fb:dd:33:0d:d8:b2:5a:23:f3:47:
4f:df:8f:d7:99:fc:c0:6c:b2:76:02:f1:d6:e0:97:
db:57:3d:0a:f5:dd:0c:62:28:8f:94:7a:17:53:94:
b2:0c:d4:79:85:7f:e8:e7:58:e7:ff:84:6b:c4:3e:
7e:d1:9f:f3:09:7f:58:d4:91:42:1a:96:91:32:0a:
d4:2d:fe:9e:f5:e4:a9:47:93:e8:7c:e5:13:60:58:
40:8b:02:20:84:fa:c1:19:57:8c:98:04:a6:86:bb:
db:87:b3:f8:2c:bc:2f:f1:21:78:2d:5d:22:fc:90:
04:eb:09:5d:37:49:2e:3f:59:96:8b:aa:ee:2b:a1:
c1:c1:13:d6:6c:b9:fb:93:ab:d4:8c:16:01:4e:21:
55:48:42:31:45:08:09:d7:f5:da:2e:4a:43:53:b3:
f1:23:e4:88:6d:90:20:48:6a:f1:41:bb:28:2b:2f:
f3:66:5c:23:d1:09:a5:c6:a6:eb:a1:1e:3f:2e:b3:
7d:86:55:ef:3d:02:cd:bf:85:a6:99:09:5c:bb:c2:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:53:08:BF:D4:A9:94:CA:07:B6:FA:2C:91:11:24:11:D5:23:92:70
X509v3 Authority Key Identifier:
keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:6d0::/32
Signature Algorithm: sha256WithRSAEncryption
53:96:65:b9:b7:0f:6e:25:db:8f:d7:78:c0:be:a4:ad:af:12:
f4:8b:6e:6c:7a:76:97:05:d5:ea:56:0c:78:cc:a3:dd:ac:63:
f5:b9:23:4b:a6:ba:7f:39:6e:70:b5:2f:7b:79:f1:b1:03:6b:
0a:2c:f8:c5:b0:55:5a:b5:3a:e5:ec:5e:89:0c:e9:22:50:5f:
6b:ff:c5:7e:15:52:74:ce:6c:ef:d1:49:50:b8:57:b3:15:25:
7c:92:78:1e:c7:ee:ae:df:f2:85:66:3d:20:ff:ba:3d:fe:00:
f9:15:c0:17:3f:72:3b:d1:ac:58:67:7e:f7:af:37:0c:6c:c6:
ce:a5:80:89:fc:48:98:3a:de:3f:cd:20:23:82:36:ae:b0:e7:
c6:79:03:64:b7:e3:48:c0:2a:03:7f:fb:b6:f2:e3:11:05:07:
6c:c1:e3:b5:e7:42:f1:97:18:e8:b4:c7:17:d9:47:60:68:81:
9c:c8:70:4e:2c:79:ff:ef:8c:20:dd:fe:73:45:8f:ec:28:67:
5a:b3:40:6e:e9:04:ce:a9:5d:96:2d:31:c5:c0:f1:2a:ef:56:
61:44:92:90:6f:e8:42:4e:ab:f9:08:fe:12:d6:cf:df:89:9b:
04:35:16:59:bb:ba:75:41:1b:69:5e:23:d7:0a:df:77:c0:35:
1d:b7:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:06 2025 by rpki-client