Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa
File: 323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa (raw, json)
Hash identifier: dtrdaK1VMxIWsduE1SMrFsQ7oma1n9BZE38UnRz0Sxo=
Subject key identifier: B2:28:DB:3B:B8:F8:1F:73:E6:05:D4:01:A6:D7:BE:1E:71:15:9E:1F
Certificate issuer: /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Certificate serial: 20FBD3DC19EEB833A77BE386647A14A43601CCBD
Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa
Signing time: Tue 04 Feb 2025 20:08:19 +0000
ROA not before: Tue 04 Feb 2025 20:03:19 +0000
ROA not after: Tue 03 Feb 2026 20:08:19 +0000
asID: 272146
IP address blocks: 2803:d090:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fb:d3:dc:19:ee:b8:33:a7:7b:e3:86:64:7a:14:a4:36:01:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Validity
Not Before: Feb 4 20:03:19 2025 GMT
Not After : Feb 3 20:08:19 2026 GMT
Subject: CN=B228DB3BB8F81F73E605D401A6D7BE1E71159E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:83:b3:34:d9:7f:36:95:e0:85:61:fa:25:
8f:4d:0e:97:2f:f8:08:75:5f:e9:71:43:e7:bb:32:
c4:2f:95:9f:20:d2:ed:5e:3f:c4:83:64:b2:65:db:
f4:f6:8f:6a:91:31:71:69:b3:aa:6e:d9:2c:0e:b9:
a6:6b:e7:6b:18:f2:27:3f:fd:df:50:ff:98:7c:af:
d3:69:69:98:fb:81:ee:e9:30:81:ec:85:14:3d:b4:
e7:5f:4e:26:4b:5c:b9:e5:a2:c0:62:4f:89:88:81:
54:2c:0f:d3:6d:65:4d:8a:18:90:84:5d:5d:15:68:
02:7b:b0:c2:ec:7a:e2:46:00:12:20:cf:7b:d0:67:
20:ad:88:da:11:51:1a:be:61:bb:1d:15:30:9f:ee:
b5:3a:88:3d:3a:c1:71:b1:b6:c0:de:3c:86:37:44:
a2:09:15:fd:40:ce:42:09:96:0f:76:bb:22:ef:c1:
f9:6c:54:ee:22:2e:04:25:38:c2:96:b8:b1:e7:e8:
09:1b:35:42:c1:c1:d7:5a:71:37:4c:dd:82:26:34:
c2:87:dd:92:69:d8:ba:7a:4d:b6:e0:02:da:07:cc:
c5:cb:f4:d4:38:dd:c0:68:3d:64:04:c5:c0:44:46:
a0:65:60:4c:f1:11:55:e2:94:13:4a:8f:39:bf:ed:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:DB:3B:B8:F8:1F:73:E6:05:D4:01:A6:D7:BE:1E:71:15:9E:1F
X509v3 Authority Key Identifier:
keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d090:2000::/36
Signature Algorithm: sha256WithRSAEncryption
49:b1:94:68:e6:a3:77:12:f4:f5:87:0c:2e:b0:ec:78:d1:55:
7e:27:82:0d:c2:6f:bf:87:75:3b:c5:ac:b3:21:dd:d2:17:54:
fe:dd:11:bc:6c:87:91:a5:9d:de:85:7d:e9:11:51:f4:05:a5:
c6:e1:a7:f7:e9:6e:8d:16:38:19:c8:8b:31:41:89:06:5f:11:
31:fd:51:12:75:d5:49:ca:bd:73:61:85:23:51:db:14:4e:26:
f2:ac:6c:84:f9:10:6f:78:00:15:3c:2a:d4:3a:34:6a:b4:e1:
f3:81:c8:b3:4b:e3:34:8a:b0:a0:54:f1:52:51:e1:fa:ab:ac:
e4:fd:f3:90:aa:31:47:67:76:4b:47:e8:42:23:fb:fd:e4:90:
4b:3d:26:50:99:f8:e4:d3:a2:74:cd:01:64:5d:19:ab:e4:88:
61:05:30:43:06:55:14:e0:4a:95:74:f5:cf:e7:95:7b:55:0f:
af:8d:3a:7f:b1:9c:68:b5:4b:49:3a:72:04:b9:a9:a7:7f:23:
8e:1c:dc:1e:b1:35:3c:05:21:d4:1e:99:d2:70:d9:ee:2b:b7:
24:63:1b:3d:a0:dc:b1:3e:2d:c0:0c:d8:99:16:22:c6:69:52:
d4:99:a2:18:40:fe:d7:9d:16:89:2b:b6:55:a2:1e:67:ec:98:
78:7a:6b:fb
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUIPvT3BnuuDOne+OGZHoUpDYBzL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUREOTUxNkM2OEEwMkM4OTgwRjkyMzNBQkFDRDk4MzRD
N0MzN0M3NDAeFw0yNTAyMDQyMDAzMTlaFw0yNjAyMDMyMDA4MTlaMDMxMTAvBgNV
BAMTKEIyMjhEQjNCQjhGODFGNzNFNjA1RDQwMUE2RDdCRTFFNzExNTlFMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKNYOzNNl/NpXghWH6JY9NDpcv
+Ah1X+lxQ+e7MsQvlZ8g0u1eP8SDZLJl2/T2j2qRMXFps6pu2SwOuaZr52sY8ic/
/d9Q/5h8r9NpaZj7ge7pMIHshRQ9tOdfTiZLXLnlosBiT4mIgVQsD9NtZU2KGJCE
XV0VaAJ7sMLseuJGABIgz3vQZyCtiNoRURq+YbsdFTCf7rU6iD06wXGxtsDePIY3
RKIJFf1AzkIJlg92uyLvwflsVO4iLgQlOMKWuLHn6AkbNULBwddacTdM3YImNMKH
3ZJp2Lp6TbbgAtoHzMXL9NQ43cBoPWQExcBERqBlYEzxEVXilBNKjzm/7VcpAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUsijbO7j4H3PmBdQBpte+HnEVnh8wHwYDVR0j
BBgwFoAUndlRbGigLImA+SM6us2YNMfDfHQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTZEMjRBMDlENEM2M0E2MzBENkM0NkQ5QTVFOTdFQTgw
MjVENjcwM0JGNUMwNTlBQzFGMTlGMDczQzI0ODNGLzAvOUREOTUxNkM2OEEwMkM4
OTgwRjkyMzNBQkFDRDk4MzRDN0MzN0M3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REQ5NTE2QzY4QTAyQzg5ODBG
OTIzM0FCQUNEOTgzNEM3QzM3Qzc0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU2RDI0QTA5RDRDNjNBNjMwRDZDNDZEOUE1RTk3RUE4MDI1RDY3MDNC
RjVDMDU5QUMxRjE5RjA3M0MyNDgzRi8wLzMyMzgzMDMzM2E2NDMwMzkzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMTM0MzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA9CQIDANBgkqhkiG9w0BAQsFAAOCAQEASbGUaOajdxL09YcMLrDseNFV
fieCDcJvv4d1O8WssyHd0hdU/t0RvGyHkaWd3oV96RFR9AWlxuGn9+lujRY4GciL
MUGJBl8RMf1REnXVScq9c2GFI1HbFE4m8qxshPkQb3gAFTwq1Do0arTh84HIs0vj
NIqwoFTxUlHh+qus5P3zkKoxR2d2S0foQiP7/eSQSz0mUJn45NOidM0BZF0Zq+SI
YQUwQwZVFOBKlXT1z+eVe1UPr406f7GcaLVLSTpyBLmpp38jjhzcHrE1PAUh1B6Z
0nDZ7iu3JGMbPaDcsT4twAzYmRYixmlS1JmiGED+150WiSu2VaIeZ+yYeHpr+w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:05 2025 by rpki-client