Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/323830303a3161303a3a2f33322d3332203d3e203237393333.roa
File: 323830303a3161303a3a2f33322d3332203d3e203237393333.roa (raw, json)
Hash identifier: Y+fmDh1p+ighYe5OXae4BzGxhz5JEHQatA6I7q5dD6M=
Subject key identifier: 72:71:54:53:4E:29:64:9C:B0:C8:5C:6C:6D:40:6D:E9:13:81:01:EB
Certificate issuer: /CN=5844C567E7B04876831F61CC7D4A348645F6A0F2
Certificate serial: 2AEF194D48AD05A90E3C3F237A0044D1A70B0C27
Authority key identifier: 58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/323830303a3161303a3a2f33322d3332203d3e203237393333.roa
Signing time: Tue 04 Feb 2025 18:04:08 +0000
ROA not before: Tue 04 Feb 2025 17:59:08 +0000
ROA not after: Tue 03 Feb 2026 18:04:08 +0000
asID: 27933
IP address blocks: 2800:1a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ef:19:4d:48:ad:05:a9:0e:3c:3f:23:7a:00:44:d1:a7:0b:0c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5844C567E7B04876831F61CC7D4A348645F6A0F2
Validity
Not Before: Feb 4 17:59:08 2025 GMT
Not After : Feb 3 18:04:08 2026 GMT
Subject: CN=727154534E29649CB0C85C6C6D406DE9138101EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:fa:95:13:f1:3d:9c:b3:ed:67:12:34:8b:
d2:da:25:48:dd:0a:a3:8f:68:0c:b0:82:61:3b:2f:
9a:2d:9c:fa:1f:9c:58:3c:c3:2e:bd:63:6e:ca:d7:
ee:0a:7c:01:d2:55:98:db:b9:4a:14:85:d4:1e:52:
7b:47:74:ff:ec:e9:86:29:71:5d:02:45:0e:77:af:
ce:0c:0e:12:74:fe:29:59:4a:d9:c0:4a:7f:78:eb:
d6:4b:d5:c0:ed:3b:21:df:9b:75:e8:69:10:d5:ec:
16:31:ae:65:a4:63:dc:64:9f:c8:d6:55:fb:8e:e3:
18:af:66:7e:69:c7:51:f5:00:46:75:52:2e:28:12:
bd:37:bb:83:81:8a:6e:33:1b:3c:6a:d9:0d:71:b0:
45:d6:2b:20:15:4e:32:9f:1d:9e:f4:0a:d3:40:bb:
2e:99:2a:da:e8:83:10:ed:70:89:2f:e6:81:98:48:
3c:e3:aa:7d:f2:16:49:4d:3c:65:d3:73:bd:18:49:
76:78:c5:a8:15:da:9b:28:81:66:eb:6e:a0:44:b5:
b2:60:32:53:a2:dd:23:c2:4c:1e:e3:18:08:7b:c3:
80:ce:6a:c6:8b:77:59:da:8d:97:0b:61:aa:cf:f7:
f6:90:54:21:39:05:bf:da:29:f6:ac:06:9a:f8:66:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:54:53:4E:29:64:9C:B0:C8:5C:6C:6D:40:6D:E9:13:81:01:EB
X509v3 Authority Key Identifier:
keyid:58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/323830303a3161303a3a2f33322d3332203d3e203237393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:1a0::/32
Signature Algorithm: sha256WithRSAEncryption
78:79:01:26:0e:7b:23:b9:0f:96:54:d2:7e:84:6d:7b:4f:1e:
01:ac:a7:a5:67:f2:5b:35:84:77:22:d7:77:d5:0f:4b:9e:b1:
2d:9e:05:3c:d4:53:62:71:21:2f:a2:37:28:fd:c0:69:8f:72:
a8:2e:f1:22:1e:97:9b:dc:7b:c0:4d:7b:2b:46:2b:f5:f4:d0:
d7:74:82:96:9f:10:59:02:8c:a9:6f:79:0c:ae:6f:db:77:6c:
2f:cd:63:d1:37:15:0f:0e:be:93:78:b7:f8:f9:69:16:07:c4:
b5:61:ab:b1:3a:77:16:a6:d2:04:10:69:67:04:c4:c6:a3:cb:
fc:05:a5:a6:68:03:e2:4c:87:25:e7:67:6b:b8:ff:3e:69:05:
22:c2:25:d4:cb:8c:c1:7c:a9:59:43:6a:02:b2:66:c3:b1:2b:
66:c4:75:88:e7:df:c1:ae:55:f5:37:6d:03:e2:04:62:82:9a:
e1:04:50:93:9c:09:62:1a:d9:02:5d:7d:8d:68:e9:a6:2e:27:
4f:cb:f4:58:42:78:53:5e:1e:3b:b6:78:30:2b:9c:64:f6:89:
71:92:bf:86:1c:41:99:d2:28:22:84:6b:5a:cf:a8:74:0a:43:
8b:ca:51:b2:ca:b8:3f:b0:6a:ea:8c:86:80:20:aa:6f:e0:58:
5b:14:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:19:27 2025 by rpki-client