Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
File: 323830363a3362323a3a2f33322d3332203d3e20323730313131.roa (raw, json)
Hash identifier: svRVsDyRsAIB3EVhq5lMi9hXSFQ/dUgJZ4NvZrKhhC8=
Subject key identifier: 49:03:77:68:40:26:B6:54:6A:CA:9A:48:F4:12:51:B7:D7:D3:5C:BC
Certificate issuer: /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial: 7E6E8EC93AD2EFA1F8A128A60A4C88CA01A5DAA5
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
Signing time: Tue 04 Feb 2025 18:30:15 +0000
ROA not before: Tue 04 Feb 2025 18:25:15 +0000
ROA not after: Tue 03 Feb 2026 18:30:15 +0000
asID: 270111
IP address blocks: 2806:3b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6e:8e:c9:3a:d2:ef:a1:f8:a1:28:a6:0a:4c:88:ca:01:a5:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Validity
Not Before: Feb 4 18:25:15 2025 GMT
Not After : Feb 3 18:30:15 2026 GMT
Subject: CN=490377684026B6546ACA9A48F41251B7D7D35CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:b6:1f:ae:95:9b:60:88:9b:5f:c3:e4:7f:
7d:74:94:a2:9f:08:02:cc:80:27:2c:b9:9b:0d:c8:
2c:79:a7:59:33:79:fb:eb:34:6a:19:a7:bf:78:74:
2c:cb:bb:95:a4:0f:80:5a:97:67:2d:51:71:45:eb:
91:e2:ec:12:37:eb:bd:37:ab:67:e4:af:36:9e:c4:
87:2a:d7:c6:56:b6:a0:1b:05:8b:c0:0a:51:c7:01:
25:df:1a:75:f1:d2:95:b3:42:af:df:6c:39:4f:e1:
04:12:36:0b:8d:88:d0:b6:22:2b:91:78:bb:73:b8:
44:b0:dd:a1:58:2b:51:e8:93:13:bf:ef:fe:22:a8:
c5:31:66:58:7c:43:51:52:9e:1d:17:49:dd:49:64:
98:0d:02:2f:b1:50:53:a6:14:ca:ce:35:5e:dd:b6:
f6:9a:34:95:e3:cb:2f:b6:e5:78:23:ba:fc:cf:b8:
b9:e9:93:5a:b1:0f:d5:12:44:2b:9d:71:08:14:1e:
46:69:95:20:de:4f:bd:b4:d0:18:ef:59:b1:d5:79:
a1:f5:ba:9d:3e:e4:eb:00:00:f8:1f:8e:f3:35:44:
19:a9:1b:26:cd:1f:a6:9d:ab:51:68:3b:d5:4f:95:
d1:dd:07:24:9d:58:a1:11:e1:7f:6a:a6:e8:34:04:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:77:68:40:26:B6:54:6A:CA:9A:48:F4:12:51:B7:D7:D3:5C:BC
X509v3 Authority Key Identifier:
keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3b2::/32
Signature Algorithm: sha256WithRSAEncryption
14:f4:0f:72:1f:77:25:bc:f6:79:c3:0a:47:c5:cc:24:f8:80:
b4:8c:90:bc:44:51:ce:32:8d:20:b9:16:fa:02:5c:52:c4:60:
ce:13:20:de:b3:97:c4:cd:9a:5c:6c:90:a4:f6:66:6d:8c:18:
f3:48:0e:71:88:c7:48:80:c3:c5:27:29:97:51:33:03:34:08:
b5:b2:d3:1b:16:4b:ca:b6:15:c1:01:45:06:d5:ad:20:f1:6f:
9f:33:68:69:ff:e6:24:d3:eb:c3:7d:20:e4:c0:ca:65:a1:dd:
0f:66:93:2d:39:85:88:7a:fe:c0:c4:4f:4c:4e:64:e8:94:81:
cd:48:98:c2:4c:24:a1:f3:e1:e3:82:08:ee:8b:0d:4b:14:75:
59:0e:22:a7:13:14:3c:c2:ee:fa:b3:01:7d:f1:85:6b:ef:b4:
ff:7d:42:83:62:e3:6b:30:46:9a:3a:f6:48:46:aa:fb:57:54:
84:89:f3:6f:34:4d:11:7f:79:97:3b:83:a2:7e:61:08:5f:64:
0b:e3:fd:1b:89:f4:23:04:39:cc:54:a9:d6:53:b5:24:40:ca:
96:98:2d:65:36:c1:e9:3b:f4:95:9e:bc:2f:1f:35:5f:27:76:
15:ec:38:cc:38:70:b9:f8:ca:a1:99:75:18:58:b7:7d:79:9f:
f2:d6:f7:2e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfm6OyTrS76H4oSimCkyIygGl2qUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVBRjg2MzBDNzI4MjM1RDZEMkM1MTlGMjA3MTJDRURB
RDlFNUI2QjAeFw0yNTAyMDQxODI1MTVaFw0yNjAyMDMxODMwMTVaMDMxMTAvBgNV
BAMTKDQ5MDM3NzY4NDAyNkI2NTQ2QUNBOUE0OEY0MTI1MUI3RDdEMzVDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOrYfrpWbYIibX8Pkf310lKKf
CALMgCcsuZsNyCx5p1kzefvrNGoZp794dCzLu5WkD4Bal2ctUXFF65Hi7BI36703
q2fkrzaexIcq18ZWtqAbBYvAClHHASXfGnXx0pWzQq/fbDlP4QQSNguNiNC2IiuR
eLtzuESw3aFYK1HokxO/7/4iqMUxZlh8Q1FSnh0XSd1JZJgNAi+xUFOmFMrONV7d
tvaaNJXjyy+25XgjuvzPuLnpk1qxD9USRCudcQgUHkZplSDeT7200BjvWbHVeaH1
up0+5OsAAPgfjvM1RBmpGybNH6adq1FoO9VPldHdBySdWKER4X9qpug0BBaLAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUSQN3aEAmtlRqyppI9BJRt9fTXLwwHwYDVR0j
BBgwFoAUxa+GMMcoI11tLFGfIHEs7a2eW2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjQyMDVGRTYyQUVGMjE0MDQ4RTREN0M0RjU5QjI2NDUz
QjhFQjU0OUY0M0Y5OEJGNTNGM0Q0NDJFNkJFNTIyLzAvQzVBRjg2MzBDNzI4MjM1
RDZEMkM1MTlGMjA3MTJDRURBRDlFNUI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNUFGODYzMEM3MjgyMzVENkQy
QzUxOUYyMDcxMkNFREFEOUU1QjZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI0MjA1RkU2MkFFRjIxNDA0OEU0RDdDNEY1OUIyNjQ1M0I4RUI1NDlG
NDNGOThCRjUzRjNENDQyRTZCRTUyMi8wLzMyMzgzMDM2M2EzMzYyMzIzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgOyMA0G
CSqGSIb3DQEBCwUAA4IBAQAU9A9yH3clvPZ5wwpHxcwk+IC0jJC8RFHOMo0guRb6
AlxSxGDOEyDes5fEzZpcbJCk9mZtjBjzSA5xiMdIgMPFJymXUTMDNAi1stMbFkvK
thXBAUUG1a0g8W+fM2hp/+Yk0+vDfSDkwMplod0PZpMtOYWIev7AxE9MTmTolIHN
SJjCTCSh8+Hjggjuiw1LFHVZDiKnExQ8wu76swF98YVr77T/fUKDYuNrMEaaOvZI
Rqr7V1SEifNvNE0Rf3mXO4OifmEIX2QL4/0bifQjBDnMVKnWU7UkQMqWmC1lNsHp
O/SVnrwvHzVfJ3YV7DjMOHC5+MqhmXUYWLd9eZ/y1vcu
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:08 2025 by rpki-client