Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa
File: 323830333a393331303a3a2f33322d3438203d3e203233303539.roa (raw, json)
Hash identifier: eejnclbvc2wdsqVW+EsGS8qFzLMdEDsaQ1i4Ku2jde8=
Subject key identifier: C9:E1:49:DC:D7:C8:59:23:31:58:FA:35:C8:86:D7:9B:01:97:7A:7A
Certificate issuer: /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial: 60590187F9BBCC75B4624565700B2FAE4F259325
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa
Signing time: Tue 04 Feb 2025 18:18:43 +0000
ROA not before: Tue 04 Feb 2025 18:13:43 +0000
ROA not after: Tue 03 Feb 2026 18:18:43 +0000
asID: 23059
IP address blocks: 2803:9310::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:59:01:87:f9:bb:cc:75:b4:62:45:65:70:0b:2f:ae:4f:25:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Validity
Not Before: Feb 4 18:13:43 2025 GMT
Not After : Feb 3 18:18:43 2026 GMT
Subject: CN=C9E149DCD7C859233158FA35C886D79B01977A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:44:f2:4e:0b:5b:f9:d4:6d:6d:45:f9:28:
6f:98:4f:8a:c0:71:83:15:5e:51:aa:fb:e6:09:fa:
56:cc:fa:4a:b4:59:16:9e:f6:5c:be:26:76:f4:41:
96:8e:40:6e:6c:54:cf:b2:21:29:2d:5e:6e:8d:a7:
1d:2c:28:50:dc:0c:54:57:09:6c:fd:6a:24:22:06:
5f:34:0c:92:20:69:e1:7b:ab:81:1e:f4:88:d9:6f:
38:1b:2e:e8:63:3e:09:54:3d:19:ff:76:06:2b:8a:
53:3f:02:2a:c5:39:d7:51:d8:93:19:04:bd:77:45:
78:ba:01:90:da:02:9f:1b:63:fa:b6:1e:e0:d6:e4:
f3:ff:5f:98:69:27:d0:ce:da:18:06:09:82:45:a4:
ab:07:25:2a:d5:f1:01:a2:ed:7b:f5:c2:e7:68:ff:
7b:48:34:a5:3e:e2:61:a1:d5:f4:2b:49:89:f1:37:
61:94:16:48:48:67:07:d3:d6:d1:eb:cb:20:45:2f:
57:4b:2b:c1:47:3f:da:0f:85:d9:b3:06:8e:3d:de:
7c:97:41:0b:2a:50:5f:d8:2f:7e:97:88:ca:8b:82:
0d:84:a9:1c:30:57:a1:89:cc:df:3c:da:f5:16:8f:
ed:12:60:47:55:02:62:f1:3d:0f:76:27:6c:b1:09:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:49:DC:D7:C8:59:23:31:58:FA:35:C8:86:D7:9B:01:97:7A:7A
X509v3 Authority Key Identifier:
keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9310::/32
Signature Algorithm: sha256WithRSAEncryption
a2:3c:59:a0:66:55:f3:3d:41:59:ad:2d:68:16:97:62:23:84:
08:47:87:64:d0:d3:53:64:51:02:50:a3:25:69:2d:e9:1d:a2:
51:ca:6c:7d:e1:05:44:fe:a1:fd:4c:36:6f:f4:82:fb:31:5b:
6c:3f:f5:79:65:3a:99:64:83:3a:a0:65:44:83:15:d4:23:18:
92:73:ba:55:08:97:98:27:f1:ce:bb:99:f6:32:90:a4:dc:b2:
0e:45:a9:18:ba:6f:90:d8:39:75:2e:a6:95:7b:02:3a:d0:5d:
f5:9d:c9:1a:3b:13:da:6c:15:8e:34:9c:a1:d1:0f:bc:ff:27:
a9:37:99:d0:dc:78:01:e0:fc:60:ec:05:ae:be:fb:73:3a:6e:
b2:19:b4:6d:69:1d:36:79:a6:92:93:5c:a1:72:41:4e:f3:dd:
c3:83:65:b5:b1:d5:74:48:e8:bd:86:54:a1:e1:8f:6c:7d:07:
9a:1b:fb:4f:bc:1f:2a:52:46:ba:8b:bf:be:10:01:39:d9:72:
d2:d0:27:69:ea:e3:ba:03:c2:57:e0:18:52:c2:7e:a7:aa:2b:
31:77:3f:44:18:ff:c7:91:b5:b0:6a:a4:dc:25:3f:d9:80:7f:
74:41:2d:61:14:13:6e:65:2a:d8:c1:ac:88:da:f3:04:b9:ce:
29:75:1b:da
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYFkBh/m7zHW0YkVlcAsvrk8lkyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxQUUxRTE0QzVBMzNFREVERTk3NzI4NUM3QjEwN0U1
MzQ1MDRFQTAeFw0yNTAyMDQxODEzNDNaFw0yNjAyMDMxODE4NDNaMDMxMTAvBgNV
BAMTKEM5RTE0OURDRDdDODU5MjMzMTU4RkEzNUM4ODZENzlCMDE5NzdBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmkTyTgtb+dRtbUX5KG+YT4rA
cYMVXlGq++YJ+lbM+kq0WRae9ly+Jnb0QZaOQG5sVM+yISktXm6Npx0sKFDcDFRX
CWz9aiQiBl80DJIgaeF7q4Ee9IjZbzgbLuhjPglUPRn/dgYrilM/AirFOddR2JMZ
BL13RXi6AZDaAp8bY/q2HuDW5PP/X5hpJ9DO2hgGCYJFpKsHJSrV8QGi7Xv1wudo
/3tINKU+4mGh1fQrSYnxN2GUFkhIZwfT1tHryyBFL1dLK8FHP9oPhdmzBo493nyX
QQsqUF/YL36XiMqLgg2EqRwwV6GJzN882vUWj+0SYEdVAmLxPQ92J2yxCaqPAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUyeFJ3NfIWSMxWPo1yIbXmwGXenowHwYDVR0j
BBgwFoAU+xrh4UxaM+3t6XcoXHsQflNFBOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTA4RUY3NzEwOENCNDNFRTFGMzBGNUM5Qzc2RkJERjI3
Nzc5RkNFM0UyOUE4NDI2MjNEODI5NjhCMzYxNkRCLzAvRkIxQUUxRTE0QzVBMzNF
REVERTk3NzI4NUM3QjEwN0U1MzQ1MDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjFBRTFFMTRDNUEzM0VERURF
OTc3Mjg1QzdCMTA3RTUzNDUwNEVBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEwOEVGNzcxMDhDQjQzRUUxRjMwRjVDOUM3NkZCREYyNzc3OUZDRTNF
MjlBODQyNjIzRDgyOTY4QjM2MTZEQi8wLzMyMzgzMDMzM2EzOTMzMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA5MQMA0G
CSqGSIb3DQEBCwUAA4IBAQCiPFmgZlXzPUFZrS1oFpdiI4QIR4dk0NNTZFECUKMl
aS3pHaJRymx94QVE/qH9TDZv9IL7MVtsP/V5ZTqZZIM6oGVEgxXUIxiSc7pVCJeY
J/HOu5n2MpCk3LIORakYum+Q2Dl1LqaVewI60F31nckaOxPabBWONJyh0Q+8/yep
N5nQ3HgB4Pxg7AWuvvtzOm6yGbRtaR02eaaSk1yhckFO893Dg2W1sdV0SOi9hlSh
4Y9sfQeaG/tPvB8qUka6i7++EAE52XLS0Cdp6uO6A8JX4BhSwn6nqisxdz9EGP/H
kbWwaqTcJT/ZgH90QS1hFBNuZSrYwayI2vMEuc4pdRva
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:10 2025 by rpki-client