Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31323a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a31323a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: T17lW4PRaotOPmCRyDlHWzapNHdgTjqtUTQYa5qdh2U=
Subject key identifier: 38:CE:EA:F6:5F:0B:1D:17:9D:D4:2B:8C:41:DB:FC:D1:57:B2:7D:9A
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 225753D0140B2CA865D1CC8FB8E912D3F9C9B5EE
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31323a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:41 +0000
ROA not before: Tue 04 Feb 2025 19:59:41 +0000
ROA not after: Tue 03 Feb 2026 20:04:41 +0000
asID: 262191
IP address blocks: 2800:b70:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:57:53:d0:14:0b:2c:a8:65:d1:cc:8f:b8:e9:12:d3:f9:c9:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:41 2025 GMT
Not After : Feb 3 20:04:41 2026 GMT
Subject: CN=38CEEAF65F0B1D179DD42B8C41DBFCD157B27D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:9b:ca:5c:7e:03:62:7b:ff:7e:fd:15:6f:
71:82:95:74:58:67:20:2e:b9:91:f2:5a:ef:f1:17:
06:e4:df:51:ef:07:f5:33:20:ce:35:d3:35:d0:20:
22:5a:7e:ac:ef:7c:ac:d5:50:d7:0a:ea:d3:3f:86:
06:b3:0e:41:78:75:f5:eb:b5:ba:f9:97:16:c8:70:
89:3f:58:0a:b2:ff:97:ca:29:2f:fd:27:22:ab:d5:
e3:c1:dc:8e:ec:ef:54:b8:ee:47:af:35:23:a6:91:
0b:12:e9:05:70:17:80:c8:e1:78:d6:3a:b7:7a:d7:
66:75:dc:f7:b6:71:ce:67:a4:02:af:92:26:c8:ac:
4c:80:ef:dc:0c:00:bb:9c:36:c0:fd:6b:14:58:f0:
58:d2:70:7d:5b:71:8e:a0:a3:93:b4:5d:81:be:96:
c6:34:71:19:74:1c:f5:f5:13:48:67:b1:2c:d2:50:
62:a5:eb:02:77:5c:11:6c:77:ec:69:74:b5:c9:f4:
e7:53:ab:a0:27:a3:9c:dd:7b:e4:40:67:7c:d3:1f:
40:68:ef:92:96:f4:ab:b4:03:56:d7:6d:79:92:9a:
69:69:63:1e:f7:42:9f:5a:f3:1e:4e:fb:3f:48:4f:
61:05:d1:2a:6b:aa:fa:4b:34:57:6e:c8:87:29:b9:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:EA:F6:5F:0B:1D:17:9D:D4:2B:8C:41:DB:FC:D1:57:B2:7D:9A
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31323a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:12::/48
Signature Algorithm: sha256WithRSAEncryption
53:2c:ce:be:87:f2:fc:d8:2f:17:9c:ab:47:cb:d7:c1:fe:df:
71:25:e5:23:fd:57:c5:9d:31:d3:f1:e7:87:11:2c:2f:19:e8:
07:3c:82:7d:65:45:20:e2:9d:89:74:33:8d:55:b5:77:80:bb:
57:c3:71:01:9f:3b:67:db:91:56:92:c5:03:a9:23:bc:69:cd:
8b:8f:4b:46:d0:ad:16:63:53:1f:7b:cd:e3:d4:44:70:91:06:
b3:32:ef:ee:c3:c6:fd:c5:08:b6:a7:70:2b:22:d9:10:08:e7:
a2:48:1d:32:7e:86:ca:71:73:54:54:0a:63:2b:09:e0:84:4b:
56:19:fe:1b:9a:89:da:b8:dc:06:ae:5a:f0:b4:ce:85:d0:fe:
00:c8:63:b2:ba:60:57:75:01:fb:41:75:b0:01:b0:7f:9a:88:
3c:de:29:81:e6:75:ce:3e:4a:51:d5:ac:66:64:8c:1b:3b:b5:
1e:a4:ba:be:6b:ca:10:6f:19:c2:27:b2:c4:0f:d1:72:8c:5e:
aa:3f:f7:2a:d0:ef:d1:d7:70:4e:9a:57:46:78:5f:fc:f3:58:
fa:5a:58:ad:eb:1f:fe:7a:1d:94:e3:f7:66:9e:07:4a:6b:a1:
af:b0:bf:1b:01:c8:6f:02:0c:87:fa:98:21:2f:c1:3c:c3:09:
e9:30:88:d2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUIldT0BQLLKhl0cyPuOkS0/nJte4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTAyMDQxOTU5NDFaFw0yNjAyMDMyMDA0NDFaMDMxMTAvBgNV
BAMTKDM4Q0VFQUY2NUYwQjFEMTc5REQ0MkI4QzQxREJGQ0QxNTdCMjdEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRpvKXH4DYnv/fv0Vb3GClXRY
ZyAuuZHyWu/xFwbk31HvB/UzIM410zXQICJafqzvfKzVUNcK6tM/hgazDkF4dfXr
tbr5lxbIcIk/WAqy/5fKKS/9JyKr1ePB3I7s71S47kevNSOmkQsS6QVwF4DI4XjW
Ord612Z13Pe2cc5npAKvkibIrEyA79wMALucNsD9axRY8FjScH1bcY6go5O0XYG+
lsY0cRl0HPX1E0hnsSzSUGKl6wJ3XBFsd+xpdLXJ9OdTq6Ano5zde+RAZ3zTH0Bo
75KW9Ku0A1bXbXmSmmlpYx73Qp9a8x5O+z9IT2EF0SprqvpLNFduyIcpubpDAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUOM7q9l8LHRed1CuMQdv80VeyfZowHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwABIwDQYJKoZIhvcNAQELBQADggEBAFMszr6H8vzYLxecq0fL18H+33El5SP9
V8WdMdPx54cRLC8Z6Ac8gn1lRSDinYl0M41VtXeAu1fDcQGfO2fbkVaSxQOpI7xp
zYuPS0bQrRZjUx97zePURHCRBrMy7+7Dxv3FCLancCsi2RAI56JIHTJ+hspxc1RU
CmMrCeCES1YZ/huaidq43AauWvC0zoXQ/gDIY7K6YFd1AftBdbABsH+aiDzeKYHm
dc4+SlHVrGZkjBs7tR6kur5ryhBvGcInssQP0XKMXqo/9yrQ79HXcE6aV0Z4X/zz
WPpaWK3rH/56HZTj92aeB0proa+wvxsByG8CDIf6mCEvwTzDCekwiNI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:22 2025 by rpki-client