Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
File: 323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa (raw, json)
Hash identifier: Aq0Epf1L8Udbv/NzWmoVOsapEqGRiZYG3ffraLoPvtI=
Subject key identifier: C4:85:DA:A5:45:0A:5E:81:F7:6F:41:77:CB:CA:C5:31:00:40:88:17
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 52CF8F1AF762B8CF941C304F1142AD288895A4D2
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
Signing time: Tue 05 Mar 2024 18:02:50 +0000
ROA not before: Tue 05 Mar 2024 17:57:50 +0000
ROA not after: Tue 04 Mar 2025 18:02:50 +0000
asID: 269836
IP address blocks: 2800:490:e000:f200::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cf:8f:1a:f7:62:b8:cf:94:1c:30:4f:11:42:ad:28:88:95:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Mar 5 17:57:50 2024 GMT
Not After : Mar 4 18:02:50 2025 GMT
Subject: CN=C485DAA5450A5E81F76F4177CBCAC53100408817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:24:44:50:4a:08:61:f3:a2:58:1e:62:0a:
cd:d2:16:da:7e:63:4f:d5:ee:8b:02:2d:3b:4b:36:
13:36:74:62:c1:80:97:c0:4d:51:1d:f6:8e:74:b7:
f9:7e:5c:29:47:5f:10:61:48:d2:7d:02:0d:80:a9:
c3:88:ee:24:e9:7e:0a:bf:af:50:53:02:e5:2b:30:
2d:d4:09:16:a8:78:6c:b1:34:91:f1:63:88:48:01:
0f:c7:40:96:00:ff:3d:eb:ea:73:3f:aa:f5:1b:c5:
f5:71:bd:a9:af:f6:11:5c:b5:39:89:38:9d:68:c6:
66:e4:0e:4e:7d:db:58:80:54:13:94:e6:0b:a6:df:
c4:3e:70:f2:0e:5d:a0:b1:6b:79:34:de:46:3d:ff:
9d:fd:05:f3:f8:a2:09:06:59:e8:3d:c6:b7:fb:9a:
4d:9b:21:95:37:6a:3b:1f:1a:4b:7c:4e:6f:41:3e:
62:f7:b6:fc:94:8a:56:e6:ef:cd:31:38:c0:77:79:
cd:61:8a:e8:ca:a0:84:94:a2:cc:89:75:9e:d5:a1:
c6:ff:3e:d3:13:a7:d2:93:08:1c:4b:1a:5d:6f:ab:
22:53:37:19:4c:8d:0a:62:24:e0:cd:f8:5f:84:57:
ad:d0:de:7c:92:8c:af:a0:2c:8e:e1:4d:80:6a:fb:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:85:DA:A5:45:0A:5E:81:F7:6F:41:77:CB:CA:C5:31:00:40:88:17
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:490:e000:f200::/56
Signature Algorithm: sha256WithRSAEncryption
5f:6b:11:63:49:c9:8b:80:91:8f:90:a7:ad:2f:b1:e9:64:66:
b3:46:2e:5f:e2:d3:8f:68:ce:55:45:8f:91:d2:5d:61:40:ff:
aa:0b:86:d1:a9:ed:af:f9:bc:29:c8:f9:fe:96:c5:23:c9:41:
97:0f:bc:58:a3:c9:e9:86:de:f5:53:c5:40:2e:ea:d8:ae:e4:
a9:90:84:4c:36:1a:8a:eb:7b:0f:dc:c0:b0:de:91:87:0c:29:
64:a0:fa:30:01:6a:1e:34:f0:a0:0b:d8:73:2b:34:78:14:be:
e9:87:7f:56:13:ab:bf:a4:12:ab:45:cc:d6:9a:f5:a5:61:fc:
d5:30:6f:29:f5:47:2a:9e:6d:75:d9:09:a7:ad:1c:bc:63:5c:
56:f7:39:91:67:66:21:2b:7b:f5:ef:c3:5d:e6:4f:71:f4:03:
d6:3e:7d:cc:e4:6b:49:1b:3a:17:80:52:7b:fb:33:53:9a:3e:
94:30:68:b7:2a:9e:dc:f3:f1:06:64:75:11:7d:f1:f3:33:01:
14:4d:01:65:96:b6:90:83:c1:17:8f:ca:91:fd:4d:3a:f3:c4:
a8:f6:32:12:eb:73:30:80:2f:7f:83:f8:20:6a:80:69:9a:02:
1f:45:cf:92:f4:fa:5d:3b:02:fc:91:a6:24:fc:47:17:11:a1:
ce:88:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:57:27 2025 by rpki-client