Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa
File: 323830363a3366323a3a2f33322d3438203d3e20323730313830.roa (raw, json)
Hash identifier: DL3yEpzPN38LOlDnvPb8/OL5W515hmNlMYhl9soJBJM=
Subject key identifier: BD:FB:86:BC:D5:B0:9F:42:AF:CA:22:AC:9F:B0:6C:D0:CF:18:10:35
Certificate issuer: /CN=4259D489623ADF982BA06D3BB26A0E0366F952E1
Certificate serial: 0C48CFDF77EA9E10391BC9F7AB57688458073E9C
Authority key identifier: 42:59:D4:89:62:3A:DF:98:2B:A0:6D:3B:B2:6A:0E:03:66:F9:52:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa
Signing time: Tue 04 Feb 2025 18:25:32 +0000
ROA not before: Tue 04 Feb 2025 18:20:32 +0000
ROA not after: Tue 03 Feb 2026 18:25:32 +0000
asID: 270180
IP address blocks: 2806:3f2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:48:cf:df:77:ea:9e:10:39:1b:c9:f7:ab:57:68:84:58:07:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4259D489623ADF982BA06D3BB26A0E0366F952E1
Validity
Not Before: Feb 4 18:20:32 2025 GMT
Not After : Feb 3 18:25:32 2026 GMT
Subject: CN=BDFB86BCD5B09F42AFCA22AC9FB06CD0CF181035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:a1:cb:58:3d:5c:d7:66:9c:b0:8e:ab:e9:
73:1f:2b:c1:5e:a0:ed:d0:77:27:11:b8:2b:ac:97:
a3:ca:2a:3d:03:8d:3f:c4:72:95:de:b1:2b:d1:3d:
8a:57:6b:12:12:20:9b:78:2a:d9:78:f8:41:e2:8b:
ac:3d:70:d3:bc:70:4f:3a:8b:72:c1:92:31:29:62:
35:43:9c:32:07:d7:5d:9e:30:ee:4e:e0:9c:dc:21:
9a:9b:a1:03:aa:3e:e0:ad:62:1d:44:8e:da:f1:0f:
a7:ae:6b:3a:80:00:a5:73:70:48:e6:eb:d0:d1:1c:
52:0c:6c:8d:99:c4:63:67:ec:6b:da:55:2c:ae:f4:
4c:87:88:e5:8b:c5:34:c1:24:f9:33:f7:88:94:f7:
7b:8d:da:8c:09:45:a5:b5:72:71:ad:b5:92:d1:c6:
bd:37:46:b5:60:9c:73:f5:3a:5c:db:e7:92:8c:3d:
9e:5c:04:5b:2e:1d:d4:15:a0:9a:e8:65:f6:2a:5f:
ce:47:e0:f0:61:fd:1f:b4:66:c5:44:71:7a:e1:fc:
dd:ef:ea:0b:8e:d6:54:ea:e9:29:19:08:b6:ec:ab:
c7:76:80:07:9a:44:bc:ec:86:f4:ea:61:94:bc:de:
48:2b:a4:9b:fb:64:39:07:77:86:97:2d:10:9a:4e:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:86:BC:D5:B0:9F:42:AF:CA:22:AC:9F:B0:6C:D0:CF:18:10:35
X509v3 Authority Key Identifier:
keyid:42:59:D4:89:62:3A:DF:98:2B:A0:6D:3B:B2:6A:0E:03:66:F9:52:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4259D489623ADF982BA06D3BB26A0E0366F952E1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E30C7A7BE942994649E7C9663E26A771D5D4C9B17097D326B43AB3930CC5705F/0/323830363a3366323a3a2f33322d3438203d3e20323730313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3f2::/32
Signature Algorithm: sha256WithRSAEncryption
50:01:12:be:7e:42:1d:6a:cb:47:b0:48:19:29:01:d5:4b:fd:
ec:f5:db:ce:74:a9:79:f3:8d:36:37:a4:64:45:07:88:ce:fd:
89:55:57:f4:fe:14:e3:e4:c9:e1:e9:9d:48:e1:86:8e:63:eb:
af:b0:ac:08:69:f2:65:31:15:57:73:0b:67:41:d4:cc:a4:5d:
96:b5:2d:e5:18:1b:49:5e:52:fa:9a:1d:da:6e:62:6e:d7:e7:
0e:d3:ea:c0:8d:3e:a2:f5:a7:d1:53:a8:f5:27:ff:7a:8c:68:
10:67:43:d9:a3:e4:d3:02:6f:44:d9:e4:08:1f:36:b7:2f:6b:
11:a1:72:a0:25:ce:1b:93:64:66:96:75:2f:72:dc:ee:90:6f:
05:44:34:91:b2:4d:12:ec:c7:ff:1f:0b:dd:a2:df:f0:98:74:
8e:c7:06:14:39:6c:d3:5e:98:a8:fa:12:30:25:0d:69:e6:15:
9f:f8:9c:ce:60:bf:c3:c5:ca:3f:61:3c:c3:ec:e5:f6:7d:b2:
25:e0:9c:16:a2:02:40:7c:73:e1:6c:ae:de:bf:9d:8e:06:c2:
d5:0a:88:81:a3:be:36:50:c6:2e:66:ea:07:f1:14:1a:f5:48:
c2:1f:b1:e7:03:6d:9e:54:71:9e:9c:9d:ea:a5:e5:98:9c:ca:
ab:54:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:26:00 2025 by rpki-client