Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa
File: 323830333a333363303a3a2f33322d3438203d3e20323635373231.roa (raw, json)
Hash identifier: 28sYketazM6vH2UAZi3oACqjsw2rnkaG+eluVXsRIXQ=
Subject key identifier: C0:A5:FA:C7:FD:06:61:CC:9E:2B:D4:70:6C:4E:2C:76:B9:37:E4:A6
Certificate issuer: /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
Certificate serial: 3B0B4F5E5979890FF905E295150A510BF316E8D3
Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa
Signing time: Tue 04 Feb 2025 18:37:30 +0000
ROA not before: Tue 04 Feb 2025 18:32:30 +0000
ROA not after: Tue 03 Feb 2026 18:37:30 +0000
asID: 265721
IP address blocks: 2803:33c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:4f:5e:59:79:89:0f:f9:05:e2:95:15:0a:51:0b:f3:16:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
Validity
Not Before: Feb 4 18:32:30 2025 GMT
Not After : Feb 3 18:37:30 2026 GMT
Subject: CN=C0A5FAC7FD0661CC9E2BD4706C4E2C76B937E4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:11:9e:1e:f5:12:2d:f3:32:35:56:9d:ce:
72:49:19:64:6d:50:8e:f1:07:f7:ce:43:fa:7a:eb:
51:8a:39:44:75:ed:1c:2a:5b:cf:ee:4f:e8:c3:4b:
08:8a:8c:ed:6d:1d:1e:d3:72:1b:ac:dc:61:b8:c3:
c5:f9:ab:f8:e4:c4:43:da:60:7f:a7:39:f6:f5:5f:
1d:4e:5c:de:2f:6c:f7:67:d9:a0:81:81:e5:3d:20:
f9:63:b5:3b:4c:3b:4b:c8:36:4f:2e:5c:26:59:98:
90:35:d7:12:07:5f:15:58:03:d8:86:24:2c:f9:a7:
3d:7c:38:5a:dc:42:cf:c7:4a:c0:41:35:a2:20:8b:
96:af:e0:dc:de:9e:3b:be:09:45:d3:4e:bc:2a:e4:
3b:54:7d:37:fb:13:df:a2:23:35:05:8d:0e:f6:79:
5a:29:4d:b9:2f:ac:6d:26:f0:9c:53:3b:51:ad:cc:
5f:5a:12:27:b8:4d:be:1f:f6:d9:6d:c2:d3:c2:bb:
ce:1c:5c:09:4c:b9:5b:32:95:e3:22:16:03:f4:8f:
78:e0:63:5e:80:da:25:69:16:46:b9:bb:e0:5c:f4:
ce:45:68:19:80:7e:33:5d:13:a4:82:6b:9c:ca:45:
45:bf:e1:1f:c0:d1:b7:d9:80:8c:e7:00:fe:97:be:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:FA:C7:FD:06:61:CC:9E:2B:D4:70:6C:4E:2C:76:B9:37:E4:A6
X509v3 Authority Key Identifier:
keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/323830333a333363303a3a2f33322d3438203d3e20323635373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:33c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:e8:1f:5a:22:83:94:c8:42:f7:e8:77:98:d4:77:20:e4:a3:
8e:43:01:c8:c5:d1:91:1f:7a:6d:a9:26:1a:1d:c8:07:dd:a1:
f7:cc:3d:57:79:84:a9:fb:c4:ec:80:b3:9b:76:d4:91:85:8d:
5a:fe:10:1f:05:35:71:dd:c5:37:ef:10:da:02:7b:8c:c1:a0:
1f:ba:12:86:f5:99:b0:47:28:d7:80:6c:41:75:a5:d7:74:b6:
2f:7e:2a:52:04:85:d5:6f:d9:56:09:91:78:2f:49:06:b0:92:
da:da:8f:40:08:09:0d:1e:1a:f5:d9:61:ad:b8:11:4f:7c:0b:
56:e9:9a:47:76:c6:5e:2a:4c:88:68:24:75:33:d6:14:89:56:
1c:cd:13:f6:48:b5:ac:bb:49:80:50:6e:26:41:15:dd:11:9f:
e7:35:51:a5:be:49:c2:55:6c:01:ab:c2:96:25:d0:a3:45:08:
0f:6a:28:38:70:10:12:af:87:4b:3c:b4:da:b5:a9:84:fc:73:
9f:5c:60:3b:ae:bf:a0:2a:92:33:66:49:bd:d8:13:94:65:71:
4f:d9:f0:c5:da:87:cf:83:ec:04:1a:b6:99:13:47:c8:eb:e8:
a5:55:8a:11:c2:a5:8c:48:b9:60:d6:15:89:5b:05:c8:b4:35:
e3:66:24:df
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOwtPXll5iQ/5BeKVFQpRC/MW6NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZBOEQ1QUVFMkZGRDUxNjlCODYzRTg0MEY4NjNBQzAy
NjkxOUE2MTAeFw0yNTAyMDQxODMyMzBaFw0yNjAyMDMxODM3MzBaMDMxMTAvBgNV
BAMTKEMwQTVGQUM3RkQwNjYxQ0M5RTJCRDQ3MDZDNEUyQzc2QjkzN0U0QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWBGeHvUSLfMyNVadznJJGWRt
UI7xB/fOQ/p661GKOUR17RwqW8/uT+jDSwiKjO1tHR7Tchus3GG4w8X5q/jkxEPa
YH+nOfb1Xx1OXN4vbPdn2aCBgeU9IPljtTtMO0vINk8uXCZZmJA11xIHXxVYA9iG
JCz5pz18OFrcQs/HSsBBNaIgi5av4Nzenju+CUXTTrwq5DtUfTf7E9+iIzUFjQ72
eVopTbkvrG0m8JxTO1GtzF9aEie4Tb4f9tltwtPCu84cXAlMuVsyleMiFgP0j3jg
Y16A2iVpFka5u+Bc9M5FaBmAfjNdE6SCa5zKRUW/4R/A0bfZgIznAP6XvhjjAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUwKX6x/0GYcyeK9RwbE4sdrk35KYwHwYDVR0j
BBgwFoAUz6jVruL/1Rabhj6ED4Y6wCaRmmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDA4OTI5MTVCNEY3NjQ5NTIwN0M1NEI5QjIzQjE2MjlG
NkZCQUQ4QTU2NTlFRTRGNUIwOUU5ODJCQTU0RTYzLzAvQ0ZBOEQ1QUVFMkZGRDUx
NjlCODYzRTg0MEY4NjNBQzAyNjkxOUE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkE4RDVBRUUyRkZENTE2OUI4
NjNFODQwRjg2M0FDMDI2OTE5QTYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAwODkyOTE1QjRGNzY0OTUyMDdDNTRCOUIyM0IxNjI5RjZGQkFEOEE1
NjU5RUU0RjVCMDlFOTgyQkE1NEU2My8wLzMyMzgzMDMzM2EzMzMzNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDM8Aw
DQYJKoZIhvcNAQELBQADggEBAHroH1oig5TIQvfod5jUdyDko45DAcjF0ZEfem2p
JhodyAfdoffMPVd5hKn7xOyAs5t21JGFjVr+EB8FNXHdxTfvENoCe4zBoB+6Eob1
mbBHKNeAbEF1pdd0ti9+KlIEhdVv2VYJkXgvSQawktraj0AICQ0eGvXZYa24EU98
C1bpmkd2xl4qTIhoJHUz1hSJVhzNE/ZItay7SYBQbiZBFd0Rn+c1UaW+ScJVbAGr
wpYl0KNFCA9qKDhwEBKvh0s8tNq1qYT8c59cYDuuv6AqkjNmSb3YE5RlcU/Z8MXa
h8+D7AQatpkTR8jr6KVVihHCpYxIuWDWFYlbBci0NeNmJN8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:56:56 2025 by rpki-client