Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203238353438.roa
File: 323830363a3261303a373a3a2f34382d3438203d3e203238353438.roa (raw, json)
Hash identifier: 1J/wSGNhZhzSMpbe4TmnYXpuzSQf0Yb2nFR8NzxC0wU=
Subject key identifier: FF:7E:A2:C2:6C:2B:62:8E:23:93:77:2A:08:C1:80:B5:91:17:9C:2D
Certificate issuer: /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial: 3BD49A6E10484ACACC3508597BF7D83F1DE1F293
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203238353438.roa
Signing time: Thu 12 Sep 2024 11:45:01 +0000
ROA not before: Thu 12 Sep 2024 11:40:01 +0000
ROA not after: Thu 11 Sep 2025 11:45:01 +0000
asID: 28548
IP address blocks: 2806:2a0:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d4:9a:6e:10:48:4a:ca:cc:35:08:59:7b:f7:d8:3f:1d:e1:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Validity
Not Before: Sep 12 11:40:01 2024 GMT
Not After : Sep 11 11:45:01 2025 GMT
Subject: CN=FF7EA2C26C2B628E2393772A08C180B591179C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:e2:93:e3:e5:22:c6:93:b5:f0:8d:c8:4e:
e9:b6:fc:1e:78:d7:1a:51:ce:28:81:9f:0b:ff:38:
ce:dd:ce:5f:20:46:b3:fd:68:35:50:b5:e8:85:09:
5d:0e:f8:e9:2d:da:e7:f2:ed:1f:6e:f7:0a:29:a6:
f4:40:29:23:b6:d7:00:80:43:01:99:8a:58:c4:cd:
10:77:0e:62:fe:a3:bc:c6:f5:5d:af:86:05:3b:be:
70:95:91:04:b2:c3:10:68:ee:d1:17:60:72:a6:39:
27:a8:0f:aa:66:f4:11:ba:38:f9:36:9b:ee:e6:8a:
5a:b9:d3:2c:b5:43:ad:4e:ac:95:91:0c:ed:5a:12:
e4:9b:ae:88:f5:fd:54:47:54:2c:56:e2:0f:c2:9b:
2d:fe:a1:45:7a:25:33:64:d8:6a:38:c2:88:27:7d:
76:c0:41:19:17:9f:cf:86:9f:f8:a5:72:6e:9b:94:
2d:b2:da:4c:95:66:ac:f0:9b:f7:b4:a1:a6:4e:6e:
08:f9:a4:ea:92:af:75:bc:4c:a8:c8:e2:ca:30:c9:
d5:ce:56:7e:3d:38:6e:ab:a1:2b:6c:6c:c7:f0:6b:
56:5b:22:11:0d:1a:4b:f9:4a:41:02:3c:c1:28:f9:
c2:bd:23:3d:b3:8c:68:50:6a:12:f3:94:19:96:ea:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:A2:C2:6C:2B:62:8E:23:93:77:2A:08:C1:80:B5:91:17:9C:2D
X509v3 Authority Key Identifier:
keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a373a3a2f34382d3438203d3e203238353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:2a0:7::/48
Signature Algorithm: sha256WithRSAEncryption
9e:ca:d6:d3:0b:22:a7:08:b7:41:9b:04:d1:66:5f:a6:aa:c8:
89:1e:d3:95:18:7d:95:bb:b5:af:af:60:6b:b5:35:7a:85:8a:
aa:ce:c9:1c:6b:77:06:06:d6:b3:8a:db:ee:51:ef:fd:4e:6f:
a4:35:c9:17:d1:b5:1e:ea:8e:2e:55:db:a2:e4:1a:ae:ac:81:
f8:eb:79:66:88:70:82:4e:28:b5:db:37:95:82:41:38:6b:61:
69:4d:2b:06:f4:a5:02:d0:65:cd:64:7d:23:4b:42:d6:85:0d:
69:26:5e:a3:3e:57:52:a0:00:45:0c:d5:ab:1b:57:0d:f1:75:
6d:de:3b:8f:07:41:b4:41:c2:be:13:e5:bb:12:06:76:69:d2:
05:a7:b4:dd:4a:5b:6c:0e:23:9d:86:90:11:6d:15:3f:e2:a8:
88:d5:d7:18:38:f3:0a:56:41:93:0a:05:67:3f:d3:08:58:97:
11:04:d5:3a:93:95:d0:83:af:b2:ac:86:ab:fb:31:59:ee:62:
ca:4a:8f:92:d5:4e:e4:9a:6c:b4:33:b4:8f:d3:be:79:93:1a:
5a:2d:0e:3d:7c:d1:05:eb:a5:39:41:f3:54:fb:90:bd:fa:f1:
98:08:ef:81:06:9f:c2:63:8c:d0:06:13:a7:1e:8c:cc:43:fb:
bb:80:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:56:11 2025 by rpki-client