Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
File: 323830303a383a3a2f33322d3438203d3e203130373738.roa (raw, json)
Hash identifier: JCSzmO6xQnY8NC9ehsaf5gW5CLyD2LpH2pD0uXMjLMc=
Subject key identifier: 85:8C:05:BA:B4:73:BF:78:90:E3:25:25:24:46:31:64:34:9D:63:2A
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 229945E345FE0B1748A305F9736FF5412A71E192
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
Signing time: Tue 04 Feb 2025 20:03:40 +0000
ROA not before: Tue 04 Feb 2025 19:58:40 +0000
ROA not after: Tue 03 Feb 2026 20:03:40 +0000
asID: 10778
IP address blocks: 2800:8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:99:45:e3:45:fe:0b:17:48:a3:05:f9:73:6f:f5:41:2a:71:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:40 2025 GMT
Not After : Feb 3 20:03:40 2026 GMT
Subject: CN=858C05BAB473BF7890E3252524463164349D632A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:2e:1a:ab:67:b6:8b:16:08:82:39:39:f9:
c0:14:61:a0:9f:4a:6c:d2:75:60:20:88:b0:1b:55:
1b:91:10:99:6f:da:50:bc:23:35:78:5e:2b:df:f5:
9d:1a:2c:9b:26:96:d6:03:92:cf:3f:47:0b:41:05:
05:73:e1:7c:b8:8e:4b:ff:d1:68:b8:31:2b:9a:8b:
80:81:30:3d:3d:80:7c:7c:30:14:ac:3c:40:87:8d:
f6:5f:f9:aa:47:0f:01:f8:25:c8:6a:4c:6f:05:36:
62:8b:de:3d:06:9d:c1:2d:50:14:9f:80:4e:01:8f:
8d:b5:3f:0f:38:3c:41:0f:ee:9a:9b:49:76:06:b6:
6a:54:7d:ea:f7:2c:3d:1f:69:b1:ad:d6:5c:c0:ad:
f5:e7:00:22:16:c1:59:47:fe:43:ee:77:8e:19:c3:
5c:c7:95:0c:f8:dd:5a:06:44:be:68:8a:0c:24:29:
b8:96:2c:dc:6a:98:89:52:03:ef:8f:21:91:13:52:
7f:5b:56:cd:56:0a:1d:e4:e4:61:77:4a:26:8d:b5:
54:8a:1d:30:25:e6:98:5a:d5:0a:c9:43:ad:ed:0a:
1e:d6:6d:c6:73:1e:df:46:c0:5f:35:dd:f2:cc:52:
98:81:94:c4:40:d6:0a:d9:99:a0:f1:1f:ef:cb:88:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:05:BA:B4:73:BF:78:90:E3:25:25:24:46:31:64:34:9D:63:2A
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:8::/32
Signature Algorithm: sha256WithRSAEncryption
44:6c:12:7e:0a:ac:fd:96:5c:b6:b7:2c:64:af:33:2c:28:31:
81:57:35:9b:d3:b2:a9:16:ec:6a:7d:2d:18:70:8b:71:1f:08:
b1:c6:56:d4:68:e4:e4:d9:8f:00:71:56:7c:18:f3:45:cd:1f:
58:47:53:67:56:38:f5:d0:97:02:1d:21:fa:a9:f2:25:de:81:
0b:3e:9e:35:e5:b0:63:81:c5:22:f1:ca:05:39:24:d3:e3:2c:
09:40:0d:59:ce:d6:37:43:63:e0:cd:e6:f7:6d:ab:be:16:00:
20:c8:93:88:c6:90:23:36:2e:67:63:67:64:43:0c:35:c1:28:
61:1f:a5:1e:ca:57:69:5f:34:ba:f2:e9:ad:76:c7:22:d0:89:
ba:d7:7f:68:d0:1e:82:c3:ba:9f:64:b2:f3:45:14:c8:b1:cb:
4b:6b:c1:06:d0:27:53:64:44:99:fa:c8:5b:b5:64:a9:9e:4a:
79:5f:56:f0:a3:06:d1:43:db:0b:74:fb:d7:d1:36:d4:a6:27:
a3:34:30:06:42:fe:54:0a:5d:2f:00:ed:fa:a6:a7:c6:28:be:
a2:4b:4c:0a:61:1e:85:2d:4f:a2:cb:8a:ac:62:9b:37:e7:27:
36:a2:bb:fd:79:6f:cd:e5:6f:d5:d1:b9:61:1f:12:f6:e7:b4:
ac:e2:d7:39
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUIplF40X+CxdIowX5c2/1QSpx4ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4NDBaFw0yNjAyMDMyMDAzNDBaMDMxMTAvBgNV
BAMTKDg1OEMwNUJBQjQ3M0JGNzg5MEUzMjUyNTI0NDYzMTY0MzQ5RDYzMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Zy4aq2e2ixYIgjk5+cAUYaCf
SmzSdWAgiLAbVRuREJlv2lC8IzV4Xivf9Z0aLJsmltYDks8/RwtBBQVz4Xy4jkv/
0Wi4MSuai4CBMD09gHx8MBSsPECHjfZf+apHDwH4JchqTG8FNmKL3j0GncEtUBSf
gE4Bj421Pw84PEEP7pqbSXYGtmpUfer3LD0fabGt1lzArfXnACIWwVlH/kPud44Z
w1zHlQz43VoGRL5oigwkKbiWLNxqmIlSA++PIZETUn9bVs1WCh3k5GF3SiaNtVSK
HTAl5pha1QrJQ63tCh7WbcZzHt9GwF813fLMUpiBlMRA1grZmaDxH+/LiNKdAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUhYwFurRzv3iQ4yUlJEYxZDSdYyowHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzgzMDMwM2EzODNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAAIMA0GCSqGSIb3
DQEBCwUAA4IBAQBEbBJ+Cqz9lly2tyxkrzMsKDGBVzWb07KpFuxqfS0YcItxHwix
xlbUaOTk2Y8AcVZ8GPNFzR9YR1NnVjj10JcCHSH6qfIl3oELPp415bBjgcUi8coF
OSTT4ywJQA1ZztY3Q2Pgzeb3bau+FgAgyJOIxpAjNi5nY2dkQww1wShhH6Ueyldp
XzS68umtdsci0Im6139o0B6Cw7qfZLLzRRTIsctLa8EG0CdTZESZ+shbtWSpnkp5
X1bwowbRQ9sLdPvX0TbUpiejNDAGQv5UCl0vAO36pqfGKL6iS0wKYR6FLU+iy4qs
Yps35yc2orv9eW/N5W/V0blhHxL257Ss4tc5
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:00 2025 by rpki-client