Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/323830333a343534303a3a2f33322d3332203d3e20323634363538.roa
File: 323830333a343534303a3a2f33322d3332203d3e20323634363538.roa (raw, json)
Hash identifier: JkK8sBo/e6zqi1nA4y/uVOt5JGG6nMK9s86FLEOTouE=
Subject key identifier: B8:B8:66:2B:42:DF:8A:C2:34:50:25:48:C9:19:B7:F1:7B:99:55:17
Certificate issuer: /CN=139F22949A3A148A31827A973EA0FF67A3A095E8
Certificate serial: 65A83177556527DA860332240AEA33CA1C1065D9
Authority key identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/323830333a343534303a3a2f33322d3332203d3e20323634363538.roa
Signing time: Tue 04 Feb 2025 19:58:18 +0000
ROA not before: Tue 04 Feb 2025 19:53:18 +0000
ROA not after: Tue 03 Feb 2026 19:58:18 +0000
asID: 264658
IP address blocks: 2803:4540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a8:31:77:55:65:27:da:86:03:32:24:0a:ea:33:ca:1c:10:65:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139F22949A3A148A31827A973EA0FF67A3A095E8
Validity
Not Before: Feb 4 19:53:18 2025 GMT
Not After : Feb 3 19:58:18 2026 GMT
Subject: CN=B8B8662B42DF8AC234502548C919B7F17B995517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:5d:7d:53:e5:6b:02:b4:1f:ce:1d:ac:98:
cc:71:0c:fa:61:c6:8f:ea:82:f4:e5:93:f5:be:a2:
98:d6:65:70:ac:37:b0:13:6d:68:2d:72:47:5b:2f:
a4:c0:24:2b:2e:26:7b:aa:42:ab:cd:41:50:f8:d2:
73:6d:fa:aa:cb:e0:cc:e3:b3:99:8c:db:31:43:7d:
d0:15:d9:53:e4:85:44:ae:ac:a7:8b:59:ce:ca:18:
3b:28:eb:4b:0c:a6:87:30:03:8b:57:66:a8:ba:43:
c4:df:6f:a7:39:54:53:03:9a:1e:3b:fe:24:f3:80:
c6:a8:b2:e6:76:3a:b8:7e:9d:b3:25:1d:2a:fe:47:
f7:d3:32:ab:78:de:9b:67:f2:a3:ab:55:a3:ec:18:
09:e0:5d:5f:a6:14:bb:69:57:14:cd:7f:a4:e8:0d:
4e:66:61:c3:4b:de:10:e4:1c:2d:7c:7e:39:4d:39:
55:f8:04:4d:90:a0:2c:e2:97:70:14:83:a9:74:89:
d7:5e:72:4d:d2:15:c9:bc:4f:67:03:be:0e:b2:de:
60:62:c8:95:32:61:9b:32:eb:42:95:a9:02:cb:cf:
71:11:83:cb:bf:5a:1f:f0:ff:76:92:8c:e9:05:78:
a8:62:25:fa:e5:88:28:19:8d:09:a7:f5:6f:04:e1:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:66:2B:42:DF:8A:C2:34:50:25:48:C9:19:B7:F1:7B:99:55:17
X509v3 Authority Key Identifier:
keyid:13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/323830333a343534303a3a2f33322d3332203d3e20323634363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4540::/32
Signature Algorithm: sha256WithRSAEncryption
4d:27:e0:35:05:c3:e8:f6:bb:57:8b:62:3b:32:52:64:1a:3a:
42:2a:06:59:73:a4:b0:06:17:5c:5b:99:c4:be:f6:da:37:b3:
d7:8a:12:ee:78:3a:fb:7b:c4:a1:27:da:bc:1c:ab:29:91:6a:
13:4f:9a:a2:1a:ce:07:41:ce:ed:72:68:67:2b:83:a0:00:a0:
e6:90:d0:dd:3e:00:c0:01:01:41:7b:0f:95:69:e4:85:eb:a7:
f1:6d:59:cc:da:36:9d:97:d2:a2:3b:01:6c:95:1e:cb:d3:e1:
3a:37:70:ad:a6:a4:1d:92:db:7c:a7:d1:af:86:53:66:d5:98:
a0:6d:98:11:be:59:b1:a0:4c:8e:a4:6e:22:be:ed:fe:a2:3b:
21:e8:7f:09:ba:4b:d3:b3:2e:58:16:de:27:bc:b9:2c:39:21:
90:7f:22:6c:a8:d0:c2:2b:52:ae:53:6a:ed:70:de:f0:0e:f2:
26:a6:99:51:f1:7e:94:57:85:eb:1f:d2:21:55:d8:f9:4e:81:
74:27:88:95:be:98:ab:cd:71:b8:1b:83:ae:9a:f5:ad:b1:fa:
07:e4:09:40:1d:ab:ce:1b:f5:16:bf:2c:09:2e:a5:da:63:8d:
2f:b0:f8:18:f0:c5:86:fa:ed:e5:52:f7:60:3e:0e:b9:f7:d7:
43:84:1c:51
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZagxd1VlJ9qGAzIkCuozyhwQZdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM5RjIyOTQ5QTNBMTQ4QTMxODI3QTk3M0VBMEZGNjdB
M0EwOTVFODAeFw0yNTAyMDQxOTUzMThaFw0yNjAyMDMxOTU4MThaMDMxMTAvBgNV
BAMTKEI4Qjg2NjJCNDJERjhBQzIzNDUwMjU0OEM5MTlCN0YxN0I5OTU1MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dV19U+VrArQfzh2smMxxDPph
xo/qgvTlk/W+opjWZXCsN7ATbWgtckdbL6TAJCsuJnuqQqvNQVD40nNt+qrL4Mzj
s5mM2zFDfdAV2VPkhUSurKeLWc7KGDso60sMpocwA4tXZqi6Q8Tfb6c5VFMDmh47
/iTzgMaosuZ2Orh+nbMlHSr+R/fTMqt43ptn8qOrVaPsGAngXV+mFLtpVxTNf6To
DU5mYcNL3hDkHC18fjlNOVX4BE2QoCzil3AUg6l0iddeck3SFcm8T2cDvg6y3mBi
yJUyYZsy60KVqQLLz3ERg8u/Wh/w/3aSjOkFeKhiJfrliCgZjQmn9W8E4ZJHAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuLhmK0LfisI0UCVIyRm38XuZVRcwHwYDVR0j
BBgwFoAUE58ilJo6FIoxgnqXPqD/Z6OglegwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wN0U2OUFGOUExNEU1Qjk3MzhEMjQ3OUQ3Qjg4NzMyRjcx
RTI1NUI3N0Q3QkQyQ0JEOTI3MTI2RUI5MzIyRkE5LzAvMTM5RjIyOTQ5QTNBMTQ4
QTMxODI3QTk3M0VBMEZGNjdBM0EwOTVFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzlGMjI5NDlBM0ExNDhBMzE4
MjdBOTczRUEwRkY2N0EzQTA5NUU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDdFNjlBRjlBMTRFNUI5NzM4RDI0NzlEN0I4ODczMkY3MUUyNTVCNzdE
N0JEMkNCRDkyNzEyNkVCOTMyMkZBOS8wLzMyMzgzMDMzM2EzNDM1MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRUAw
DQYJKoZIhvcNAQELBQADggEBAE0n4DUFw+j2u1eLYjsyUmQaOkIqBllzpLAGF1xb
mcS+9to3s9eKEu54Ovt7xKEn2rwcqymRahNPmqIazgdBzu1yaGcrg6AAoOaQ0N0+
AMABAUF7D5Vp5IXrp/FtWczaNp2X0qI7AWyVHsvT4To3cK2mpB2S23yn0a+GU2bV
mKBtmBG+WbGgTI6kbiK+7f6iOyHofwm6S9OzLlgW3ie8uSw5IZB/Imyo0MIrUq5T
au1w3vAO8iammVHxfpRXhesf0iFV2PlOgXQniJW+mKvNcbgbg66a9a2x+gfkCUAd
q84b9Ra/LAkupdpjjS+w+BjwxYb67eVS92A+Drn310OEHFE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:57 2025 by rpki-client