Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/323830313a303a3238303a3a2f34382d3438203d3e203236363035.roa
File: 323830313a303a3238303a3a2f34382d3438203d3e203236363035.roa (raw, json)
Hash identifier: lbItSp9CW/bE1Lk9HhfuXhYp3KdynzKCYzDPSYbVCMo=
Subject key identifier: 39:E6:5F:21:65:61:A9:77:22:52:F8:C3:27:16:B5:9B:83:54:7F:BF
Certificate issuer: /CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Certificate serial: 5BB0731E93C2E84075267604FE4F81CD3FF35A66
Authority key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/323830313a303a3238303a3a2f34382d3438203d3e203236363035.roa
Signing time: Tue 04 Feb 2025 18:40:11 +0000
ROA not before: Tue 04 Feb 2025 18:35:11 +0000
ROA not after: Tue 03 Feb 2026 18:40:11 +0000
asID: 26605
IP address blocks: 2801:0:280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b0:73:1e:93:c2:e8:40:75:26:76:04:fe:4f:81:cd:3f:f3:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Validity
Not Before: Feb 4 18:35:11 2025 GMT
Not After : Feb 3 18:40:11 2026 GMT
Subject: CN=39E65F216561A9772252F8C32716B59B83547FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:13:61:d5:b6:ab:54:6f:bd:ec:32:1f:3a:
50:00:43:9c:78:c5:a3:15:3b:cd:a2:cd:05:3a:87:
8f:65:3b:c2:3a:25:e7:f6:c2:b5:0d:cd:fc:aa:1f:
98:53:9e:aa:5c:c7:8f:3b:b3:91:86:45:e8:d2:01:
f5:2b:02:46:f5:47:e3:34:a7:8b:4e:7a:09:71:5d:
30:4f:ab:f2:8a:e4:43:13:f3:27:20:0b:96:51:dd:
0a:71:f4:18:ab:fc:b7:9c:3d:af:f8:af:26:d6:9a:
f3:b8:0e:ad:c4:d8:44:59:2c:a3:a5:c1:f5:e9:68:
a5:75:d2:0d:70:84:82:59:31:8a:7d:b8:e4:18:8f:
a3:b8:3b:bf:e4:31:71:b4:b8:03:76:36:32:22:79:
b8:03:d7:fc:cc:d7:7c:2a:39:6f:37:b0:41:f7:af:
fb:11:ab:22:2b:12:92:c8:20:61:ab:2a:70:c6:df:
43:f0:48:68:bd:60:ad:51:7c:42:99:1f:f0:56:72:
cb:95:60:cf:4d:f4:c7:59:b9:c5:29:ad:29:a3:66:
ac:0a:8a:b6:02:7d:3f:83:9b:6f:30:05:53:43:67:
ed:19:44:b1:00:d0:79:7f:76:6f:8b:e7:de:cd:51:
91:f8:2a:ff:b7:ad:4f:af:c3:81:af:bc:ff:a0:76:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E6:5F:21:65:61:A9:77:22:52:F8:C3:27:16:B5:9B:83:54:7F:BF
X509v3 Authority Key Identifier:
keyid:B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/323830313a303a3238303a3a2f34382d3438203d3e203236363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:280::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f1:4e:2a:8d:a9:8e:ce:d4:75:b0:51:41:75:32:16:05:b5:
5f:0f:c2:98:1f:9b:0d:59:52:2e:95:0b:73:5d:bc:69:dd:19:
cb:75:9a:96:de:f0:02:0f:3f:1d:68:8d:67:29:03:9d:bd:fc:
62:88:6b:2c:a2:f5:16:11:35:5e:cc:89:0c:69:61:81:95:73:
87:1f:41:67:69:8e:a0:41:05:d1:b8:8a:8e:d5:a2:b4:d6:19:
11:1c:95:62:df:ed:f3:1f:a1:16:93:37:81:56:c5:37:a7:20:
85:dd:4a:19:be:6a:00:8b:c2:e0:99:06:be:77:69:75:72:c3:
05:7f:6b:f8:9c:d9:9f:39:d0:8f:4a:c6:bc:8f:13:bd:68:19:
78:f0:08:0c:3a:1f:b8:25:9f:d9:86:34:9d:92:3c:be:62:c9:
eb:af:7a:b3:e7:e4:f1:96:f8:b7:f2:b2:20:90:85:92:b0:77:
e6:52:a5:be:8e:de:14:d2:b7:24:7d:63:0b:55:5e:ce:65:bb:
5d:88:ad:86:42:60:50:89:5d:4f:a4:a0:cc:79:35:33:13:b7:
6b:3f:c0:69:bd:91:eb:91:33:cd:46:e4:30:9e:df:73:3e:82:
d5:2d:1c:ee:28:00:ab:1d:50:56:1b:ab:e8:4f:2f:b7:9f:9c:
8e:85:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:57 2025 by rpki-client