Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
File: 323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa (raw, json)
Hash identifier: rPeRrWYS+nck0qE3FwQ2KwMUmU2ja/UWzjTHMiaMZys=
Subject key identifier: AE:39:46:EB:74:D1:D1:69:F4:3D:CF:42:EB:C9:8D:19:C2:E5:03:48
Certificate issuer: /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial: 203DF9EBEEC57A4B82AFAEAB0DAFAD4C1DC92228
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
Signing time: Tue 04 Feb 2025 18:18:44 +0000
ROA not before: Tue 04 Feb 2025 18:13:44 +0000
ROA not after: Tue 03 Feb 2026 18:18:44 +0000
asID: 26506
IP address blocks: 2801:114:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3d:f9:eb:ee:c5:7a:4b:82:af:ae:ab:0d:af:ad:4c:1d:c9:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Validity
Not Before: Feb 4 18:13:44 2025 GMT
Not After : Feb 3 18:18:44 2026 GMT
Subject: CN=AE3946EB74D1D169F43DCF42EBC98D19C2E50348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2b:70:5d:74:86:78:b6:b3:43:f8:af:95:5b:
fd:72:e4:0a:05:02:c7:c3:2e:2e:cb:d7:bb:01:35:
31:57:e5:75:20:a3:81:e3:e9:b4:9c:54:25:26:96:
d7:66:e9:ea:39:5a:a6:98:cb:4f:23:cc:d0:7f:44:
d4:d8:1c:a9:45:fa:65:15:2e:bb:ee:1d:d9:1b:b8:
a3:65:b3:ac:7b:a2:64:bc:3d:29:b3:87:ab:9d:8f:
95:e1:41:d9:3a:97:42:27:45:72:e4:96:28:f1:11:
40:6d:bb:5e:ae:7d:c3:31:01:c3:d2:f1:9d:fe:b8:
98:88:53:99:b8:36:f7:5a:72:6d:54:a2:ec:4e:ad:
e8:35:e2:de:d3:73:4a:87:88:1f:43:fd:ef:46:46:
fb:bb:db:6d:c5:ee:50:5a:f6:08:53:5d:12:30:30:
70:05:4a:14:67:c3:56:57:51:00:56:6b:3c:b2:2f:
a0:91:56:8e:3a:fb:96:d2:c7:1e:4f:eb:70:17:2b:
51:7f:52:bf:34:6a:5d:e6:4a:32:f5:f7:f2:98:5f:
d6:85:d0:d8:1c:de:c1:85:ae:78:8b:92:cf:8b:c9:
ec:a8:a2:8a:8c:03:1a:c2:e0:78:b6:0f:af:47:f8:
c9:98:5a:aa:6e:75:b9:6d:e6:1f:6d:8b:a1:f6:2e:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:46:EB:74:D1:D1:69:F4:3D:CF:42:EB:C9:8D:19:C2:E5:03:48
X509v3 Authority Key Identifier:
keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114:8::/48
Signature Algorithm: sha256WithRSAEncryption
54:e9:7b:92:85:e1:a0:3f:79:ca:b0:24:7c:a4:43:0f:bc:12:
b6:57:c6:d7:41:bb:f4:9d:28:23:bf:f4:e7:46:87:12:d7:9b:
2b:4b:38:2b:6d:a2:1f:c5:dd:05:1a:e6:de:b4:c5:ba:ef:48:
12:74:32:05:b6:03:7c:02:d8:7d:6e:82:ab:bc:19:21:04:40:
a8:f3:f8:c7:ad:4a:83:08:60:fe:47:f4:83:7b:e3:38:14:cb:
3c:60:39:62:9b:a5:f2:91:2c:c7:07:b0:8d:a4:1f:a8:4a:4a:
22:46:43:0c:02:16:07:5e:a0:06:76:6a:aa:a8:6e:80:4d:a5:
fa:20:3f:e8:df:79:5c:21:15:a7:dc:c3:eb:7b:6f:32:e7:10:
2c:53:95:49:86:f4:5c:96:24:85:b2:8e:45:bd:c6:29:8f:6a:
e0:57:81:0f:fd:34:7b:02:dc:f3:e0:f9:46:86:e4:c6:0f:c7:
49:0e:3b:c6:66:d3:5e:3b:88:bc:a6:15:2a:c3:b2:df:b9:2d:
d9:34:73:fd:a2:3e:4b:d9:73:dd:4d:0a:12:cd:6f:ef:68:a2:
67:86:7f:7a:d9:62:b9:8b:ec:f8:9b:2d:c4:c2:7e:a6:ce:bc:
58:91:61:f7:06:f8:e2:f5:f7:d1:97:19:10:d1:7c:37:74:b9:
3c:19:ae:17
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUID356+7FekuCr66rDa+tTB3JIigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxQUUxRTE0QzVBMzNFREVERTk3NzI4NUM3QjEwN0U1
MzQ1MDRFQTAeFw0yNTAyMDQxODEzNDRaFw0yNjAyMDMxODE4NDRaMDMxMTAvBgNV
BAMTKEFFMzk0NkVCNzREMUQxNjlGNDNEQ0Y0MkVCQzk4RDE5QzJFNTAzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsK3BddIZ4trND+K+VW/1y5AoF
AsfDLi7L17sBNTFX5XUgo4Hj6bScVCUmltdm6eo5WqaYy08jzNB/RNTYHKlF+mUV
LrvuHdkbuKNls6x7omS8PSmzh6udj5XhQdk6l0InRXLklijxEUBtu16ufcMxAcPS
8Z3+uJiIU5m4Nvdacm1UouxOreg14t7Tc0qHiB9D/e9GRvu7223F7lBa9ghTXRIw
MHAFShRnw1ZXUQBWazyyL6CRVo46+5bSxx5P63AXK1F/Ur80al3mSjL19/KYX9aF
0Ngc3sGFrniLks+LyeyoooqMAxrC4Hi2D69H+MmYWqpudblt5h9ti6H2LgtFAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUrjlG63TR0Wn0Pc9C68mNGcLlA0gwHwYDVR0j
BBgwFoAU+xrh4UxaM+3t6XcoXHsQflNFBOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTA4RUY3NzEwOENCNDNFRTFGMzBGNUM5Qzc2RkJERjI3
Nzc5RkNFM0UyOUE4NDI2MjNEODI5NjhCMzYxNkRCLzAvRkIxQUUxRTE0QzVBMzNF
REVERTk3NzI4NUM3QjEwN0U1MzQ1MDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjFBRTFFMTRDNUEzM0VERURF
OTc3Mjg1QzdCMTA3RTUzNDUwNEVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEwOEVGNzcxMDhDQjQzRUUxRjMwRjVDOUM3NkZCREYyNzc3OUZDRTNF
MjlBODQyNjIzRDgyOTY4QjM2MTZEQi8wLzMyMzgzMDMxM2EzMTMxMzQzYTM4M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM1MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBARQA
CDANBgkqhkiG9w0BAQsFAAOCAQEAVOl7koXhoD95yrAkfKRDD7wStlfG10G79J0o
I7/050aHEtebK0s4K22iH8XdBRrm3rTFuu9IEnQyBbYDfALYfW6Cq7wZIQRAqPP4
x61Kgwhg/kf0g3vjOBTLPGA5Ypul8pEsxwewjaQfqEpKIkZDDAIWB16gBnZqqqhu
gE2l+iA/6N95XCEVp9zD63tvMucQLFOVSYb0XJYkhbKORb3GKY9q4FeBD/00ewLc
8+D5Robkxg/HSQ47xmbTXjuIvKYVKsOy37kt2TRz/aI+S9lz3U0KEs1v72iiZ4Z/
etliuYvs+JstxMJ+ps68WJFh9wb44vX30ZcZENF8N3S5PBmuFw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:01:19 2025 by rpki-client