Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/65e1aa021c13e387e8b4cb40416043e2520f7f5f.roa
File: 65e1aa021c13e387e8b4cb40416043e2520f7f5f.roa (raw, json)
Hash identifier: 5F2Wsbr52TuwrjdqIP+fZC8zUgzjJJf2+T5/7f4HidI=
Subject key identifier: 16:D4:F5:B3:DD:7B:EE:71:2D:33:0A:5A:F2:9E:58:E4:51:4B:4E:2B
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1FF83F
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/65e1aa021c13e387e8b4cb40416043e2520f7f5f.roa
Signing time: Tue 25 Apr 2023 02:22:54 +0000
ROA not before: Mon 24 Apr 2023 02:22:54 +0000
ROA not after: Fri 25 Apr 2025 02:22:54 +0000
asID: 3549
IP address blocks: 2803:dd80::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095167 (0x1ff83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 24 02:22:54 2023 GMT
Not After : Apr 25 02:22:54 2025 GMT
Subject: CN=65e1aa021c13e387e8b4cb40416043e2520f7f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:56:4e:06:b2:b9:40:54:7a:37:3c:3d:a5:
a6:63:42:77:c9:ab:12:82:ec:51:e0:ca:d3:a9:86:
9b:a5:f7:65:1e:c9:7d:46:b0:e2:c8:39:50:0c:a6:
a3:bb:bf:9b:86:37:57:b8:50:cb:76:7b:bb:fa:db:
d1:3e:96:3f:8e:4e:42:86:21:29:ff:20:a0:34:0a:
f7:b2:c6:8d:c8:f2:ee:98:3c:61:30:8f:54:90:d6:
35:59:65:33:8d:aa:52:02:54:8d:ea:af:94:21:e0:
92:0a:4c:7f:1e:7c:c4:0d:ef:d2:1a:3f:56:f7:3d:
fe:fc:41:56:02:5c:42:9a:78:2a:33:62:bf:f7:94:
db:8f:7a:9d:7b:93:b6:6f:88:81:0f:cd:b3:ab:9d:
12:0c:a8:f3:7f:b9:b7:01:85:5a:f4:99:fa:33:a6:
d0:fb:36:cd:99:c8:cf:18:de:25:75:5f:7d:f1:44:
03:28:a4:72:c4:51:8e:14:8a:13:8e:49:67:19:28:
8a:5d:8f:cb:d2:38:c2:46:a7:c1:ef:ea:9c:29:ca:
30:b0:55:a1:50:34:79:ba:29:50:79:95:6f:f7:1f:
4b:03:0b:7c:74:f0:6f:7b:29:2c:4c:36:22:22:24:
18:c2:54:b1:2e:9d:d5:91:1b:67:d8:ab:2a:e7:35:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D4:F5:B3:DD:7B:EE:71:2D:33:0A:5A:F2:9E:58:E4:51:4B:4E:2B
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/65e1aa021c13e387e8b4cb40416043e2520f7f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
5d:35:39:87:79:2e:c2:58:24:c1:68:0e:5b:26:a7:ac:2b:7d:
dd:89:d2:8f:65:73:7a:d0:e1:7f:84:be:70:e9:59:30:7d:71:
e2:52:9c:de:67:ca:44:05:11:91:d0:0c:09:42:11:fa:85:75:
42:a5:aa:99:8e:48:80:35:9f:a2:86:89:2b:17:0c:01:41:b2:
61:b4:f5:87:fa:2a:0f:99:cc:b6:1f:32:e9:fa:23:dc:90:46:
56:2b:3c:45:6d:ad:6b:89:67:c6:01:6f:0e:be:4c:94:d9:dc:
9c:c5:9e:c3:42:98:c1:68:69:c9:63:b5:93:9c:00:e9:51:ff:
9c:82:5d:0b:58:e5:cf:da:92:e3:8a:9a:c0:33:fc:b8:29:16:
d0:19:44:de:24:f1:4c:e0:54:ef:7d:55:af:63:b9:d5:ec:8e:
47:18:11:b3:74:71:df:08:8d:d0:e2:36:c8:58:ad:20:11:0c:
62:1a:d7:34:e5:31:20:bc:aa:e4:69:25:47:26:4c:26:0f:f7:
3c:f0:85:c5:07:81:a9:3a:67:20:02:53:2c:0f:43:24:75:2c:
76:21:4e:ae:3a:2c:e8:4c:72:88:18:93:89:5f:45:40:54:0f:
ae:14:cd:32:cb:22:98:9e:b8:2d:94:c2:89:a6:c2:c7:47:8d:
ff:a2:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:16:40 2025 by rpki-client