Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
File: 323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa (raw, json)
Hash identifier: Lgr1VfkOjxQFYMwT6hgwTSA8B1j2MUYhmf9wDVYbpDM=
Subject key identifier: 72:A7:A2:14:8F:37:0B:08:1F:EF:32:DD:E6:07:05:AD:AA:A7:89:92
Certificate issuer: /CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
Certificate serial: B12B9852FBE7BA70FC328F68A31C045A9FC49B
Authority key identifier: 90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
Signing time: Tue 04 Feb 2025 18:12:37 +0000
ROA not before: Tue 04 Feb 2025 18:07:37 +0000
ROA not after: Tue 03 Feb 2026 18:12:37 +0000
asID: 61475
IP address blocks: 2801:19:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b1:2b:98:52:fb:e7:ba:70:fc:32:8f:68:a3:1c:04:5a:9f:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
Validity
Not Before: Feb 4 18:07:37 2025 GMT
Not After : Feb 3 18:12:37 2026 GMT
Subject: CN=72A7A2148F370B081FEF32DDE60705ADAAA78992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:4f:44:ff:3f:69:98:9e:e8:b8:a5:8d:9a:
ee:6a:a3:fb:94:b8:bf:5a:7a:b1:eb:9d:c3:fe:23:
f3:68:c9:0d:5a:cd:92:6a:e7:1d:97:68:fd:41:3b:
91:55:24:33:19:10:36:ac:13:f6:bc:0a:5d:2f:2e:
44:83:55:fb:94:3a:1c:64:02:85:ff:7d:6d:84:fe:
d8:94:5b:f5:9e:b0:07:95:3d:ac:39:eb:f3:e7:c2:
92:b9:52:e8:fd:03:6a:a4:cd:99:4b:d0:3d:ff:6c:
d0:4f:7f:b9:39:5c:39:fb:33:40:55:41:32:44:7b:
78:10:3b:cc:1a:5a:0c:70:f2:67:16:39:ed:2b:40:
5b:f4:c6:88:36:9b:72:48:33:ef:bb:06:a5:8a:54:
d1:98:df:d1:0e:a4:d8:3c:0e:61:ab:b9:d2:c1:79:
ed:0f:06:b0:62:15:37:55:ca:b2:ac:cd:3e:06:de:
f1:5e:1b:ed:6d:7c:b5:4f:1e:1f:48:ae:95:60:49:
0d:9e:18:7f:ab:ce:56:72:95:17:b1:b4:74:a4:e5:
eb:c5:ae:2c:7c:57:b4:51:e8:d2:a3:75:e2:5b:44:
37:a6:4c:18:26:81:ce:59:57:f7:50:c8:58:42:ad:
ae:b5:be:13:44:79:cc:4c:6f:fd:fd:e4:9f:99:a4:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:A2:14:8F:37:0B:08:1F:EF:32:DD:E6:07:05:AD:AA:A7:89:92
X509v3 Authority Key Identifier:
keyid:90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:19:a000::/48
Signature Algorithm: sha256WithRSAEncryption
27:43:63:36:0c:6f:20:10:1d:a1:ca:a2:15:37:d0:45:5d:10:
f1:7e:e4:19:e0:56:6a:3c:22:34:f6:1d:05:f1:51:d3:66:ba:
fa:67:0e:14:cf:0b:1e:dd:14:bf:d6:4a:31:f2:01:79:1a:37:
33:c2:98:ae:32:d7:73:44:37:a3:64:65:cb:94:cc:a5:80:ee:
3d:bf:b1:73:63:e7:04:9e:d4:cd:43:da:27:6e:df:21:26:3a:
51:5d:e5:48:fe:45:e4:ab:ec:0c:59:f7:b8:0f:05:ee:fb:94:
b7:45:3b:84:b2:44:a0:25:e0:eb:47:18:3d:7b:77:05:51:f9:
75:a1:8d:8e:19:2e:ec:21:0d:34:22:fa:4b:f1:bb:c3:b0:23:
77:42:84:8c:2b:18:5d:f1:75:67:7b:f9:50:9f:8d:40:10:7d:
2a:68:43:ae:c4:26:36:74:63:9a:0e:a1:b5:04:88:d3:7f:ed:
33:5a:1a:ab:ab:5e:1b:6f:b7:5c:c7:96:b2:36:28:88:9b:63:
bb:9b:08:d3:64:f9:89:cf:c7:6a:ac:94:f6:a6:42:4a:08:74:
4b:d6:12:3f:91:d8:0a:a4:aa:30:c9:44:59:47:ec:97:88:e1:
cf:36:5e:a1:1d:7e:5e:80:45:98:17:9b:4b:70:d4:09:b5:82:
c7:0f:47:0b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUALErmFL757pw/DKPaKMcBFqfxJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBGQTg5QkM4M0ZEOTRDMjJEODNERTNEMzVGMzRGRUZF
RjQyMkM1NjAeFw0yNTAyMDQxODA3MzdaFw0yNjAyMDMxODEyMzdaMDMxMTAvBgNV
BAMTKDcyQTdBMjE0OEYzNzBCMDgxRkVGMzJEREU2MDcwNUFEQUFBNzg5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNU9E/z9pmJ7ouKWNmu5qo/uU
uL9aerHrncP+I/NoyQ1azZJq5x2XaP1BO5FVJDMZEDasE/a8Cl0vLkSDVfuUOhxk
AoX/fW2E/tiUW/WesAeVPaw56/PnwpK5Uuj9A2qkzZlL0D3/bNBPf7k5XDn7M0BV
QTJEe3gQO8waWgxw8mcWOe0rQFv0xog2m3JIM++7BqWKVNGY39EOpNg8DmGrudLB
ee0PBrBiFTdVyrKszT4G3vFeG+1tfLVPHh9IrpVgSQ2eGH+rzlZylRextHSk5evF
rix8V7RR6NKjdeJbRDemTBgmgc5ZV/dQyFhCra61vhNEecxMb/395J+ZpPJ9AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUcqeiFI83Cwgf7zLd5gcFraqniZIwHwYDVR0j
BBgwFoAUkPqJvIP9lMItg949NfNP7+9CLFYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkZBMEUwQjY5MDFGRTQwQThDQTZERUNGRDVBOEZBQTVE
RDRDQUExMzhBM0Q3NjIyODA4NzVFMTc1QjVFQ0JBLzAvOTBGQTg5QkM4M0ZEOTRD
MjJEODNERTNEMzVGMzRGRUZFRjQyMkM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEZBODlCQzgzRkQ5NEMyMkQ4
M0RFM0QzNUYzNEZFRkVGNDIyQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZGQTBFMEI2OTAxRkU0MEE4Q0E2REVDRkQ1QThGQUE1REQ0Q0FBMTM4
QTNENzYyMjgwODc1RTE3NUI1RUNCQS8wLzMyMzgzMDMxM2EzMTM5M2E2MTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNDM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAZoAAwDQYJKoZIhvcNAQELBQADggEBACdDYzYMbyAQHaHKohU30EVdEPF+5Bng
Vmo8IjT2HQXxUdNmuvpnDhTPCx7dFL/WSjHyAXkaNzPCmK4y13NEN6NkZcuUzKWA
7j2/sXNj5wSe1M1D2idu3yEmOlFd5Uj+ReSr7AxZ97gPBe77lLdFO4SyRKAl4OtH
GD17dwVR+XWhjY4ZLuwhDTQi+kvxu8OwI3dChIwrGF3xdWd7+VCfjUAQfSpoQ67E
JjZ0Y5oOobUEiNN/7TNaGqurXhtvt1zHlrI2KIibY7ubCNNk+YnPx2qslPamQkoI
dEvWEj+R2AqkqjDJRFlH7JeI4c82XqEdfl6ARZgXm0tw1Am1gscPRws=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:27 2025 by rpki-client