Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa
File: 323830313a3131343a3a2f34342d3438203d3e203232383232.roa (raw, json)
Hash identifier: /2ARqgOYhFhlCDRzzCsO6chXjIwGtzJRvdRJusNBsf0=
Subject key identifier: 56:3F:B3:82:48:DC:E7:78:EB:8A:12:D9:A9:E2:E5:B0:7A:D7:C4:93
Certificate issuer: /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial: 51C7F8E97041AB59C0C812D605AE066F62FE4677
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa
Signing time: Tue 04 Feb 2025 18:18:43 +0000
ROA not before: Tue 04 Feb 2025 18:13:43 +0000
ROA not after: Tue 03 Feb 2026 18:18:43 +0000
asID: 22822
IP address blocks: 2801:114::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c7:f8:e9:70:41:ab:59:c0:c8:12:d6:05:ae:06:6f:62:fe:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Validity
Not Before: Feb 4 18:13:43 2025 GMT
Not After : Feb 3 18:18:43 2026 GMT
Subject: CN=563FB38248DCE778EB8A12D9A9E2E5B07AD7C493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:30:d7:98:78:36:f6:96:59:26:23:39:e6:
e5:3b:2b:76:43:48:51:86:b5:65:8c:3c:7a:31:92:
09:ca:af:70:f1:f1:a6:7b:6f:6c:75:d4:f4:fe:74:
e9:96:3e:0a:7c:74:26:db:3a:f5:27:f5:d1:70:7a:
c2:e1:2b:16:5d:ea:c2:7c:2d:76:90:be:2f:1e:7c:
31:1f:16:d7:d3:8f:c1:f4:c5:d4:b6:43:4c:29:b5:
0c:d8:cd:2d:7d:47:26:71:08:99:4b:2b:9d:bb:58:
99:e5:8c:9c:a3:85:b9:6b:33:19:96:ab:c3:81:6e:
eb:87:88:78:89:2a:e3:27:da:d8:b1:6a:85:95:be:
e8:42:78:9f:ac:f3:22:68:de:da:54:03:e3:28:98:
a9:f7:9e:95:66:c7:59:79:13:a7:f3:a9:18:05:b1:
0e:b4:6b:9d:dd:10:a0:41:0c:a1:7a:96:00:c4:f4:
f9:43:e8:bd:1f:3c:62:9a:b5:21:67:28:3a:1c:39:
76:b5:5c:b4:9f:c8:55:7f:da:6b:10:c5:06:78:09:
51:b8:fe:df:72:cb:b7:4f:61:b8:3b:c9:d5:5a:72:
60:27:4a:ac:84:b7:02:53:74:17:d3:e3:23:a5:17:
c5:a2:89:32:2d:61:c7:cb:7f:93:53:03:6b:db:4f:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:B3:82:48:DC:E7:78:EB:8A:12:D9:A9:E2:E5:B0:7A:D7:C4:93
X509v3 Authority Key Identifier:
keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114::/44
Signature Algorithm: sha256WithRSAEncryption
ab:a2:47:25:77:e5:de:bf:ef:d9:9a:3d:eb:3d:a8:df:89:b3:
b5:d8:98:c7:e8:e8:c4:e4:de:9c:79:8c:6e:60:2d:49:35:5d:
28:38:2a:5d:b2:59:5e:95:83:d6:26:ab:dd:19:ce:eb:0e:81:
08:63:34:0b:12:a3:d8:77:8c:e2:d6:1e:2a:1d:8d:20:da:89:
de:f6:a4:47:89:a5:e3:95:cb:93:82:f1:46:4a:1f:f6:e0:04:
10:9d:a3:d2:33:98:2c:9d:ee:d7:6f:d4:9d:d3:6f:12:88:30:
cd:19:9a:dd:df:bf:e8:ee:e7:f1:19:e4:99:cf:7b:ed:d8:fe:
db:e6:ab:d3:30:bf:2e:50:4f:96:9d:29:1e:00:45:53:38:cf:
74:d8:e3:ab:3f:3f:70:83:99:a1:d2:93:dd:91:2a:54:d5:fe:
80:84:b1:d4:86:b6:be:38:c9:93:bc:70:a6:e8:bc:09:75:14:
a5:15:f1:90:f4:8f:14:a0:a8:29:e7:77:5a:30:e6:9a:32:c9:
d4:ad:51:a7:43:62:43:95:30:08:2a:31:e3:b6:ec:e7:88:9e:
b7:c7:3f:3d:06:ac:27:12:cd:6f:48:e9:9e:2c:37:18:4c:4b:
14:a3:17:68:03:f3:be:9b:ca:95:a0:23:e5:39:3c:e3:aa:80:
eb:f1:a4:e4
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUcf46XBBq1nAyBLWBa4Gb2L+RncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxQUUxRTE0QzVBMzNFREVERTk3NzI4NUM3QjEwN0U1
MzQ1MDRFQTAeFw0yNTAyMDQxODEzNDNaFw0yNjAyMDMxODE4NDNaMDMxMTAvBgNV
BAMTKDU2M0ZCMzgyNDhEQ0U3NzhFQjhBMTJEOUE5RTJFNUIwN0FEN0M0OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjTDXmHg29pZZJiM55uU7K3ZD
SFGGtWWMPHoxkgnKr3Dx8aZ7b2x11PT+dOmWPgp8dCbbOvUn9dFwesLhKxZd6sJ8
LXaQvi8efDEfFtfTj8H0xdS2Q0wptQzYzS19RyZxCJlLK527WJnljJyjhblrMxmW
q8OBbuuHiHiJKuMn2tixaoWVvuhCeJ+s8yJo3tpUA+MomKn3npVmx1l5E6fzqRgF
sQ60a53dEKBBDKF6lgDE9PlD6L0fPGKatSFnKDocOXa1XLSfyFV/2msQxQZ4CVG4
/t9yy7dPYbg7ydVacmAnSqyEtwJTdBfT4yOlF8WiiTItYcfLf5NTA2vbTxatAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUVj+zgkjc53jrihLZqeLlsHrXxJMwHwYDVR0j
BBgwFoAU+xrh4UxaM+3t6XcoXHsQflNFBOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTA4RUY3NzEwOENCNDNFRTFGMzBGNUM5Qzc2RkJERjI3
Nzc5RkNFM0UyOUE4NDI2MjNEODI5NjhCMzYxNkRCLzAvRkIxQUUxRTE0QzVBMzNF
REVERTk3NzI4NUM3QjEwN0U1MzQ1MDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjFBRTFFMTRDNUEzM0VERURF
OTc3Mjg1QzdCMTA3RTUzNDUwNEVBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEwOEVGNzcxMDhDQjQzRUUxRjMwRjVDOUM3NkZCREYyNzc3OUZDRTNF
MjlBODQyNjIzRDgyOTY4QjM2MTZEQi8wLzMyMzgzMDMxM2EzMTMxMzQzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjMyMzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBFAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCrokcld+Xev+/Zmj3rPajfibO12JjH6OjE5N6ceYxu
YC1JNV0oOCpdsllelYPWJqvdGc7rDoEIYzQLEqPYd4zi1h4qHY0g2one9qRHiaXj
lcuTgvFGSh/24AQQnaPSM5gsne7Xb9Sd028SiDDNGZrd37/o7ufxGeSZz3vt2P7b
5qvTML8uUE+WnSkeAEVTOM902OOrPz9wg5mh0pPdkSpU1f6AhLHUhra+OMmTvHCm
6LwJdRSlFfGQ9I8UoKgp53daMOaaMsnUrVGnQ2JDlTAIKjHjtuzniJ63xz89Bqwn
Es1vSOmeLDcYTEsUoxdoA/O+m8qVoCPlOTzjqoDr8aTk
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:46 2025 by rpki-client