Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/6acd466487e7177cff86166d0a6b61b2c5837d9b.roa
File: 6acd466487e7177cff86166d0a6b61b2c5837d9b.roa (raw, json)
Hash identifier: JDw+520f92qEMv82txUl+gJBqSytFHpd0lc1uzuNsD4=
Subject key identifier: E1:93:C2:24:59:6B:5F:F9:67:39:C2:D2:79:68:08:BD:A7:1B:B4:D8
Certificate issuer: /CN=f59034a47bc7b32a68881b8889be41399703be74
Certificate serial: 1DAD4F
Authority key identifier: 28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59034a47bc7b32a68881b8889be41399703be74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/6acd466487e7177cff86166d0a6b61b2c5837d9b.roa
Signing time: Fri 10 Mar 2023 12:35:00 +0000
ROA not before: Thu 09 Mar 2023 12:34:46 +0000
ROA not after: Mon 10 Mar 2025 13:34:46 +0000
asID: 265749
IP address blocks: 2803:cbc0:1000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944911 (0x1dad4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59034a47bc7b32a68881b8889be41399703be74
Validity
Not Before: Mar 9 12:34:46 2023 GMT
Not After : Mar 10 13:34:46 2025 GMT
Subject: CN=6acd466487e7177cff86166d0a6b61b2c5837d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:d8:dd:d0:fd:2c:7f:62:74:f7:ec:80:08:
92:56:58:2e:76:dc:1e:39:2b:db:4f:31:2f:a7:58:
15:d4:65:56:b8:c6:ee:27:7b:90:3a:d6:1e:28:81:
1c:78:70:2b:dc:74:5d:8a:ec:eb:69:3b:9a:8f:be:
eb:6d:97:7d:90:31:e8:f2:6d:fc:24:d3:2c:d7:63:
59:1a:a2:1e:b9:94:9c:cb:10:07:01:b6:88:9e:b6:
39:af:54:31:d5:77:44:ad:a1:9d:74:d7:c0:46:a4:
87:86:13:99:56:4b:a4:01:a3:d7:6a:ea:87:09:6c:
08:1b:f3:44:d0:1f:59:fe:63:98:da:28:87:c3:07:
a9:bf:4d:63:bf:4f:c7:d3:6d:58:9f:5b:56:67:d2:
2d:44:5d:96:b6:9e:62:a9:9d:d5:f5:31:2f:ae:94:
65:ab:38:d0:6e:b5:5f:23:ce:03:ba:9d:69:56:de:
15:3c:19:66:67:ce:fc:57:a3:58:b7:40:f3:92:a7:
aa:00:95:7d:9c:9a:40:c2:d9:f3:59:35:57:d8:eb:
bf:c8:73:63:4f:3e:21:9f:68:07:5a:dc:61:ab:7a:
8a:23:ee:22:ed:b4:e2:a2:6e:15:2a:7a:c8:2e:9c:
44:ed:87:40:77:12:be:4e:d8:eb:4f:88:ef:1b:ff:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:C2:24:59:6B:5F:F9:67:39:C2:D2:79:68:08:BD:A7:1B:B4:D8
X509v3 Authority Key Identifier:
keyid:28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59034a47bc7b32a68881b8889be41399703be74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/6acd466487e7177cff86166d0a6b61b2c5837d9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/f59034a47bc7b32a68881b8889be41399703be74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cbc0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
46:fc:13:33:6a:0a:39:bb:e6:ed:0e:d1:2f:fc:e6:1d:af:7a:
32:2f:b1:4b:7f:53:c7:24:f8:91:ef:01:1d:1a:60:2d:bc:3b:
cf:95:85:b5:ee:05:75:f3:92:c1:11:a6:4b:aa:5d:82:4d:5f:
c2:07:bf:f7:1a:e0:d9:62:2e:d4:25:3a:f4:70:67:6c:ec:2b:
02:3c:11:21:a3:08:2f:5f:ba:58:f5:d4:04:dc:8a:4d:31:0f:
f0:59:15:96:04:d9:81:9c:88:e1:c6:63:29:d1:75:a6:ec:8d:
72:01:93:a2:08:ea:27:93:83:f9:52:57:a1:8a:44:2c:aa:d8:
2d:9d:8a:da:8e:e0:b3:df:b7:23:b9:b6:7f:09:42:28:d2:c8:
27:00:86:db:19:38:27:bf:9c:0f:14:b0:fe:e1:d0:f5:03:f2:
a0:46:f3:ce:b8:7c:47:d5:01:00:4a:4f:5c:07:bf:77:f0:c4:
3c:7c:ca:cb:7a:76:cf:54:fa:67:f8:f1:7a:91:58:f9:23:93:
4a:04:3f:77:98:38:51:b8:ee:3b:ce:6f:2e:33:42:e4:9b:85:
0d:b6:02:85:09:0f:34:0c:5d:21:a6:a6:b5:f9:ea:59:8e:52:
ef:ad:6f:53:8c:73:8a:0b:07:c5:8d:2c:a2:74:39:dd:06:f6:
fc:81:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:38:22 2025 by rpki-client