Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa
File: 323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier: k3fdcczvaetm8ukdRkC2bSpKV+oiFUv2cpeOBKt5a6o=
Subject key identifier: 9E:BF:EF:86:91:9A:3B:67:BD:96:14:11:E1:47:1F:A4:72:2A:B0:9B
Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial: 0CD96EC5BE5205A9516EA486A3FDD19F39523ED7
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa
Signing time: Tue 04 Feb 2025 19:57:36 +0000
ROA not before: Tue 04 Feb 2025 19:52:36 +0000
ROA not after: Tue 03 Feb 2026 19:57:36 +0000
asID: 273072
IP address blocks: 2803:cf90:2c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d9:6e:c5:be:52:05:a9:51:6e:a4:86:a3:fd:d1:9f:39:52:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Validity
Not Before: Feb 4 19:52:36 2025 GMT
Not After : Feb 3 19:57:36 2026 GMT
Subject: CN=9EBFEF86919A3B67BD961411E1471FA4722AB09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:56:c5:89:47:9a:9a:e6:56:3a:e9:8d:6a:
96:4b:74:2a:44:50:fd:d8:45:78:74:6b:9b:32:d6:
e3:83:a8:81:02:a2:44:1e:c1:91:15:ad:83:58:69:
be:db:dc:11:4f:38:e3:28:d3:93:0d:63:11:48:1b:
f0:a0:7f:5a:e8:07:a2:5b:75:ad:04:4a:64:7d:03:
e5:20:ca:af:28:b5:d7:c6:59:a8:d8:27:36:e5:78:
f8:95:17:4f:e6:40:a4:32:c7:52:33:14:ad:ac:72:
f0:f0:f8:82:08:1e:80:47:75:9a:86:aa:63:bc:4b:
46:cf:11:0d:a7:f8:b0:97:4c:cd:2d:4f:c7:cc:35:
f1:cf:d2:de:1d:e3:f2:cc:43:f7:ad:6b:6d:c2:53:
e7:55:d5:95:7c:ef:16:1a:93:d0:33:7c:60:53:bb:
9d:97:fa:f8:c9:a9:81:9d:45:0b:fe:8e:7c:d3:aa:
53:3c:cb:9b:9b:12:de:77:b8:8d:33:5d:07:4e:1c:
31:43:7b:cd:5a:b8:8f:4f:fb:71:2e:92:27:c8:de:
52:78:56:0c:f8:f5:12:85:04:7d:36:fb:4d:ae:15:
cc:d1:81:86:a2:ff:0d:df:24:56:ba:cb:7b:91:a2:
e2:0a:5d:83:63:ff:52:fd:76:ff:b4:86:57:bc:7a:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BF:EF:86:91:9A:3B:67:BD:96:14:11:E1:47:1F:A4:72:2A:B0:9B
X509v3 Authority Key Identifier:
keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cf90:2c00::/40
Signature Algorithm: sha256WithRSAEncryption
09:01:c0:80:c9:75:9d:c0:e6:50:5f:9e:f2:c8:11:50:37:3b:
50:ed:04:25:73:3e:91:7c:10:7d:2a:bd:51:1d:35:b5:ea:fd:
97:0b:b0:52:6e:48:29:84:b0:57:27:17:6e:27:cb:6d:51:88:
26:c0:f6:09:97:93:7c:9f:56:2f:66:2d:78:f0:b9:ab:ce:f0:
60:7c:36:52:c3:41:ce:a8:f2:c9:1e:97:f7:b4:2e:03:41:d8:
60:c6:43:03:8f:d7:f6:49:62:77:d1:31:e6:5e:e0:f7:41:d9:
0f:63:be:d4:1e:aa:f8:90:4a:bc:69:4b:3b:80:c7:7e:a2:66:
69:40:fc:bb:52:15:b8:84:5c:22:35:e0:9e:1a:8c:a4:0e:09:
02:f3:3e:f2:d6:d1:f3:b1:e0:d7:d8:cd:df:1e:31:a9:5f:35:
a9:b8:2d:3d:61:48:0b:b1:98:43:78:20:6d:5c:8f:fc:50:a7:
83:9b:28:b4:07:5a:98:8f:f9:18:4e:7f:85:a7:b1:e7:50:ba:
fb:1f:69:d7:70:ae:43:ff:ca:1e:1d:d2:91:d3:79:4b:1f:76:
4c:1e:69:a1:de:23:a3:83:4e:85:68:22:64:22:c5:d4:3e:e3:
5e:c0:0a:1f:22:f0:02:07:b6:b4:f5:f9:6c:3c:5c:da:58:1c:
9b:79:19:16
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUDNluxb5SBalRbqSGo/3RnzlSPtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzZaFw0yNjAyMDMxOTU3MzZaMDMxMTAvBgNV
BAMTKDlFQkZFRjg2OTE5QTNCNjdCRDk2MTQxMUUxNDcxRkE0NzIyQUIwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxlbFiUeamuZWOumNapZLdCpE
UP3YRXh0a5sy1uODqIECokQewZEVrYNYab7b3BFPOOMo05MNYxFIG/Cgf1roB6Jb
da0ESmR9A+Ugyq8otdfGWajYJzblePiVF0/mQKQyx1IzFK2scvDw+IIIHoBHdZqG
qmO8S0bPEQ2n+LCXTM0tT8fMNfHP0t4d4/LMQ/eta23CU+dV1ZV87xYak9AzfGBT
u52X+vjJqYGdRQv+jnzTqlM8y5ubEt53uI0zXQdOHDFDe81auI9P+3EukifI3lJ4
Vgz49RKFBH02+02uFczRgYai/w3fJFa6y3uRouIKXYNj/1L9dv+0hle8ekdxAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUnr/vhpGaO2e9lhQR4UcfpHIqsJswHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QLDANBgkqhkiG9w0BAQsFAAOCAQEACQHAgMl1ncDmUF+e8sgRUDc7
UO0EJXM+kXwQfSq9UR01ter9lwuwUm5IKYSwVycXbifLbVGIJsD2CZeTfJ9WL2Yt
ePC5q87wYHw2UsNBzqjyyR6X97QuA0HYYMZDA4/X9klid9Ex5l7g90HZD2O+1B6q
+JBKvGlLO4DHfqJmaUD8u1IVuIRcIjXgnhqMpA4JAvM+8tbR87Hg19jN3x4xqV81
qbgtPWFIC7GYQ3ggbVyP/FCng5sotAdamI/5GE5/haex51C6+x9p13CuQ//KHh3S
kdN5Sx92TB5pod4jo4NOhWgiZCLF1D7jXsAKHyLwAge2tPX5bDxc2lgcm3kZFg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:16 2025 by rpki-client