Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/323830333a666263303a3a2f33322d3438203d3e20323635373632.roa
File: 323830333a666263303a3a2f33322d3438203d3e20323635373632.roa (raw, json)
Hash identifier: pUxYM/RnOoHUsn+QfV+gl9+QuXNwiSS1kfuKc4dXFLw=
Subject key identifier: 01:BC:EA:98:48:75:D6:FE:57:68:0A:BB:DD:01:83:59:F5:D1:A9:49
Certificate issuer: /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial: 4D3AF11522997933F09A3D1E7EEF42FE515308FC
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/323830333a666263303a3a2f33322d3438203d3e20323635373632.roa
Signing time: Tue 04 Feb 2025 18:23:19 +0000
ROA not before: Tue 04 Feb 2025 18:18:19 +0000
ROA not after: Tue 03 Feb 2026 18:23:19 +0000
asID: 265762
IP address blocks: 2803:fbc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3a:f1:15:22:99:79:33:f0:9a:3d:1e:7e:ef:42:fe:51:53:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
Validity
Not Before: Feb 4 18:18:19 2025 GMT
Not After : Feb 3 18:23:19 2026 GMT
Subject: CN=01BCEA984875D6FE57680ABBDD018359F5D1A949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:33:f9:77:6d:ab:68:e1:cb:9a:24:32:8d:
6d:c7:3e:15:91:37:13:da:9e:cf:9d:6a:1e:63:57:
64:5c:39:ac:b1:1c:73:af:18:e6:4c:0e:53:c1:ef:
13:96:39:f5:92:9b:df:83:dc:51:13:bd:87:5a:74:
48:71:3f:c2:84:d0:e8:b4:45:71:b4:43:15:34:6f:
63:0b:58:63:30:e9:5f:7a:5a:be:e5:6e:be:22:be:
74:3b:e8:1e:4a:de:e4:c5:d3:37:2b:80:3e:ba:24:
c3:90:ac:7c:2e:bd:5b:2b:67:89:70:34:bc:59:10:
a8:c8:0a:1e:b0:23:ce:b4:43:1f:37:ae:aa:9c:aa:
86:4c:32:7e:2b:1d:3a:16:e5:6e:16:9e:79:2f:76:
a5:8a:81:7f:48:f1:c3:46:7d:aa:fc:39:c6:ee:76:
aa:cb:92:c1:66:d0:66:87:39:e9:13:88:01:e9:8a:
ef:3f:1a:99:bc:fd:d6:aa:22:0d:2f:77:39:6e:27:
28:aa:d3:a7:7d:ed:73:0f:c5:b5:2d:78:51:ec:c2:
8b:f5:39:44:3e:0c:c8:58:3f:f6:1e:21:d2:ac:8c:
4d:a5:eb:cc:c0:95:56:a3:c3:e6:3f:1e:3d:53:d2:
b0:5b:43:35:65:1e:92:fb:ff:2d:f3:15:8d:60:57:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:EA:98:48:75:D6:FE:57:68:0A:BB:DD:01:83:59:F5:D1:A9:49
X509v3 Authority Key Identifier:
keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/323830333a666263303a3a2f33322d3438203d3e20323635373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
22:29:b4:f3:0c:81:8f:f0:2d:a3:6f:8d:9e:6a:36:e2:0e:cf:
54:5b:91:01:60:3b:42:48:ae:db:37:09:32:41:b5:37:63:ef:
2c:6f:14:4c:25:ef:8d:c8:c2:0b:40:10:f6:51:9b:43:8e:14:
e3:10:ab:46:a7:ed:39:72:28:c8:70:75:92:50:1a:8b:76:81:
94:bc:77:66:91:7a:ce:72:b7:8b:0a:29:b5:09:de:01:3e:df:
99:35:37:d3:4e:67:40:8f:ac:87:e0:e8:53:f6:18:bc:b9:a5:
8c:63:96:b3:2d:75:02:89:b8:08:89:d0:21:52:b5:be:1c:82:
61:af:8c:2a:e5:8a:6b:df:f7:72:f4:ee:49:1c:2c:16:f6:b0:
10:72:4e:a5:91:6b:3b:4d:17:1b:13:34:7d:bc:0f:fe:32:5e:
6f:cf:2f:0a:9c:f5:68:f6:35:8c:39:c5:75:64:cc:0f:3e:05:
bf:5a:02:4f:c5:10:fa:83:71:a6:ff:92:33:9a:05:b2:4a:b9:
71:06:32:da:e9:13:5a:a2:75:2d:0b:0b:86:cc:e8:be:ec:f8:
6c:fe:27:60:15:9a:28:c7:76:56:dd:99:1b:57:be:3b:1a:b2:
d4:96:5a:91:dd:31:63:06:32:b7:a2:1b:71:cd:bc:ac:04:44:
d2:34:f4:fb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUTTrxFSKZeTPwmj0efu9C/lFTCPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y1MzM5Rjg3QjI3ODcxNzA2NzU2MEI5MDU5QzMwOTg2
NjFGNzU0QjAeFw0yNTAyMDQxODE4MTlaFw0yNjAyMDMxODIzMTlaMDMxMTAvBgNV
BAMTKDAxQkNFQTk4NDg3NUQ2RkU1NzY4MEFCQkREMDE4MzU5RjVEMUE5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/jP5d22raOHLmiQyjW3HPhWR
NxPans+dah5jV2RcOayxHHOvGOZMDlPB7xOWOfWSm9+D3FETvYdadEhxP8KE0Oi0
RXG0QxU0b2MLWGMw6V96Wr7lbr4ivnQ76B5K3uTF0zcrgD66JMOQrHwuvVsrZ4lw
NLxZEKjICh6wI860Qx83rqqcqoZMMn4rHToW5W4WnnkvdqWKgX9I8cNGfar8Ocbu
dqrLksFm0GaHOekTiAHpiu8/Gpm8/daqIg0vdzluJyiq06d97XMPxbUteFHswov1
OUQ+DMhYP/YeIdKsjE2l68zAlVajw+Y/Hj1T0rBbQzVlHpL7/y3zFY1gV5NPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAbzqmEh11v5XaAq73QGDWfXRqUkwHwYDVR0j
BBgwFoAUz1M5+HsnhxcGdWC5BZwwmGYfdUswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOEQ1M0YyMURCQjBDNkQ5NDFEMzQ2OTc4Q0Q3M0FBMzNC
MDJBNzlFMzI1NDM3NzNBNzlFQTZBQjhCRDQ4RDA4LzAvQ0Y1MzM5Rjg3QjI3ODcx
NzA2NzU2MEI5MDU5QzMwOTg2NjFGNzU0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjUzMzlGODdCMjc4NzE3MDY3
NTYwQjkwNTlDMzA5ODY2MUY3NTRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzhENTNGMjFEQkIwQzZEOTQxRDM0Njk3OENENzNBQTMzQjAyQTc5RTMy
NTQzNzczQTc5RUE2QUI4QkQ0OEQwOC8wLzMyMzgzMDMzM2E2NjYyNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+8Aw
DQYJKoZIhvcNAQELBQADggEBACIptPMMgY/wLaNvjZ5qNuIOz1RbkQFgO0JIrts3
CTJBtTdj7yxvFEwl743IwgtAEPZRm0OOFOMQq0an7TlyKMhwdZJQGot2gZS8d2aR
es5yt4sKKbUJ3gE+35k1N9NOZ0CPrIfg6FP2GLy5pYxjlrMtdQKJuAiJ0CFStb4c
gmGvjCrlimvf93L07kkcLBb2sBByTqWRaztNFxsTNH28D/4yXm/PLwqc9Wj2NYw5
xXVkzA8+Bb9aAk/FEPqDcab/kjOaBbJKuXEGMtrpE1qidS0LC4bM6L7s+Gz+J2AV
mijHdlbdmRtXvjsastSWWpHdMWMGMreiG3HNvKwERNI09Ps=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:02 2025 by rpki-client