Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa
File: 323830363a3430653a3a2f33322d3332203d3e20323732333232.roa (raw, json)
Hash identifier: aeb62fOAqepjNhzUW/1XWWTjSFQZXGO5/tfArQOtepQ=
Subject key identifier: A2:58:3A:7C:4B:8B:D7:DE:E4:40:B6:42:2E:C1:CA:AC:0B:04:2B:E1
Certificate issuer: /CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
Certificate serial: 59BF66281B4FC693B700EBA8BD9862EAA50365B2
Authority key identifier: D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa
Signing time: Tue 05 Mar 2024 18:03:17 +0000
ROA not before: Tue 05 Mar 2024 17:58:17 +0000
ROA not after: Tue 04 Mar 2025 18:03:17 +0000
asID: 272322
IP address blocks: 2806:40e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bf:66:28:1b:4f:c6:93:b7:00:eb:a8:bd:98:62:ea:a5:03:65:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
Validity
Not Before: Mar 5 17:58:17 2024 GMT
Not After : Mar 4 18:03:17 2025 GMT
Subject: CN=A2583A7C4B8BD7DEE440B6422EC1CAAC0B042BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:4e:a3:34:94:e7:15:15:66:a9:99:8c:26:
a7:a0:9a:2d:c2:bd:36:b0:7b:6e:9e:a6:f3:60:99:
23:11:74:85:48:b0:15:55:c0:1c:3d:c1:d1:95:e3:
b9:85:f8:da:93:e3:00:d7:95:66:27:24:98:0d:57:
a5:34:f9:13:7c:fc:42:f0:a9:06:b6:cc:7d:03:9d:
75:45:b2:66:d5:b7:d7:35:20:32:5e:40:7b:25:ee:
1d:ce:a1:bf:3d:71:72:83:c3:cd:4f:5d:c9:d2:39:
a0:14:11:56:7f:4e:38:b9:db:bb:2b:72:a0:98:78:
7b:23:f5:0a:36:42:5d:fc:54:2b:fc:e7:03:72:e8:
ca:24:db:07:5b:32:b8:bc:f7:b7:6b:f9:fd:78:6f:
98:15:5e:be:48:7c:86:67:59:01:d0:30:3c:ed:a3:
a7:0a:29:71:64:bb:16:bc:65:1e:b9:e9:b6:12:85:
97:94:d7:1d:bb:04:58:7b:2d:0b:4b:72:7b:ab:0e:
66:f4:94:c8:13:c9:e2:59:17:96:ee:8a:8a:32:7c:
77:02:84:ca:f8:d9:2f:54:3c:69:1b:f0:72:9c:a5:
99:9c:fc:41:2b:1f:3c:94:9f:be:84:fc:b9:1a:be:
6b:9a:75:e7:d8:64:f7:5c:4d:04:a8:e3:0e:07:e2:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:3A:7C:4B:8B:D7:DE:E4:40:B6:42:2E:C1:CA:AC:0B:04:2B:E1
X509v3 Authority Key Identifier:
keyid:D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:40e::/32
Signature Algorithm: sha256WithRSAEncryption
c1:46:b9:4e:76:e8:7a:e6:aa:d8:52:58:30:ab:eb:93:0d:eb:
b5:f3:a0:c0:41:82:71:3e:40:0c:a2:b8:03:36:ff:2f:bf:4e:
67:21:0c:64:ce:05:8d:48:2f:30:eb:a0:34:b5:e8:4b:9b:3a:
c5:c9:72:d5:14:55:72:fd:40:6c:5b:90:d2:af:3f:0b:ad:6c:
ea:46:86:8e:af:37:bf:f0:12:42:f3:e5:44:40:c5:3f:6b:e1:
d8:7a:9b:89:2c:b6:2c:70:8d:35:fe:05:ab:7d:0a:3d:8f:f7:
d5:0a:04:eb:42:9b:57:32:d0:b2:ac:12:68:a5:37:91:f8:af:
c9:ea:94:66:f6:e7:aa:72:55:27:60:e9:0b:e2:30:e7:5b:31:
fb:58:29:b2:67:10:04:81:69:cb:cb:4f:43:69:bf:b6:11:4a:
c9:70:7b:9d:9e:8a:4c:90:2e:2b:0e:c7:9d:6e:8b:cc:4d:9c:
f4:be:e6:bf:32:9e:cd:31:8d:49:dc:08:59:5f:41:48:44:de:
0c:b9:5b:0a:a1:65:e2:ab:c9:48:1c:f3:d0:92:d0:dc:be:68:
1a:5c:86:66:26:f2:4e:e8:15:60:dd:de:42:24:e3:d8:d9:4d:
e3:70:4f:e0:d2:95:40:35:1a:e0:2d:f7:12:f6:83:9b:d1:da:
8c:3c:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:48 2025 by rpki-client