Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41208B5FB078829ACE4AC0FE375FA3A534F45610769FD0563A008D71502D66A1/0/323830333a3232303a3a2f33322d3332203d3e203532333237.roa
File: 323830333a3232303a3a2f33322d3332203d3e203532333237.roa (raw, json)
Hash identifier: Vdd4WrsLvQ/IZw1GIv52xu1+C92W85PT2roD8QXUh6Y=
Subject key identifier: 0C:02:C4:12:81:43:48:96:BE:64:7D:2A:D3:45:F9:76:26:9E:2E:72
Certificate issuer: /CN=C6D9D3CA39D25E167088AAD3835593BBFE2C27EB
Certificate serial: 1A081D567DDD9D83DA0094424BACA57F564EC289
Authority key identifier: C6:D9:D3:CA:39:D2:5E:16:70:88:AA:D3:83:55:93:BB:FE:2C:27:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D9D3CA39D25E167088AAD3835593BBFE2C27EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41208B5FB078829ACE4AC0FE375FA3A534F45610769FD0563A008D71502D66A1/0/323830333a3232303a3a2f33322d3332203d3e203532333237.roa
Signing time: Tue 04 Feb 2025 18:56:29 +0000
ROA not before: Tue 04 Feb 2025 18:51:29 +0000
ROA not after: Tue 03 Feb 2026 18:56:29 +0000
asID: 52327
IP address blocks: 2803:220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:08:1d:56:7d:dd:9d:83:da:00:94:42:4b:ac:a5:7f:56:4e:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6D9D3CA39D25E167088AAD3835593BBFE2C27EB
Validity
Not Before: Feb 4 18:51:29 2025 GMT
Not After : Feb 3 18:56:29 2026 GMT
Subject: CN=0C02C41281434896BE647D2AD345F976269E2E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:19:e5:f6:03:7a:1a:4d:a1:ad:6e:bb:77:
0d:aa:08:c8:bb:b1:9a:63:bc:5d:14:1c:6c:c7:a7:
b3:a5:8e:ae:03:69:de:9b:67:20:15:2a:00:5c:dd:
3c:bd:9f:05:c9:8d:b1:53:53:0c:a3:46:89:a4:c3:
c7:25:f9:a3:79:28:f2:f1:e9:1b:b3:73:ab:83:4e:
47:50:56:3a:49:e7:7f:73:6c:cc:6c:6a:d8:65:09:
4b:22:c1:38:65:06:4a:45:12:f3:f4:1b:a9:31:08:
75:8d:37:c4:a3:a7:ea:7b:64:b0:58:92:6a:4c:b9:
d7:79:bf:e2:c8:db:b5:5e:cd:bd:f2:b6:91:22:bc:
e7:56:2d:3a:9e:6f:2f:6d:ed:d3:e3:ab:0b:88:9e:
c1:9c:1c:5f:86:eb:a4:e6:28:7e:97:a5:df:da:0d:
67:58:c9:57:a2:f7:27:e1:af:d3:8f:b0:18:6e:95:
eb:2a:24:0a:6b:51:fe:77:7d:c9:10:5b:0e:67:21:
c2:dc:93:05:d8:0b:85:d2:0b:58:91:d4:c1:3d:8b:
dd:3a:cd:97:70:eb:6d:63:16:3d:43:57:8d:b7:cc:
b8:47:4e:d8:3f:0b:47:a1:26:da:dc:4e:73:2f:c4:
03:82:02:22:e0:ab:c1:16:55:c6:9e:00:f8:0f:b6:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:C4:12:81:43:48:96:BE:64:7D:2A:D3:45:F9:76:26:9E:2E:72
X509v3 Authority Key Identifier:
keyid:C6:D9:D3:CA:39:D2:5E:16:70:88:AA:D3:83:55:93:BB:FE:2C:27:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41208B5FB078829ACE4AC0FE375FA3A534F45610769FD0563A008D71502D66A1/0/C6D9D3CA39D25E167088AAD3835593BBFE2C27EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D9D3CA39D25E167088AAD3835593BBFE2C27EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41208B5FB078829ACE4AC0FE375FA3A534F45610769FD0563A008D71502D66A1/0/323830333a3232303a3a2f33322d3332203d3e203532333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:220::/32
Signature Algorithm: sha256WithRSAEncryption
31:b6:6a:20:e0:39:27:1e:a4:d0:b8:21:70:60:d4:1e:cc:45:
f0:99:ca:97:2a:12:4d:14:86:54:66:fb:15:44:44:f8:61:01:
ca:6b:06:a6:52:d8:9c:cf:40:6e:df:4f:42:78:49:55:a0:0c:
86:3b:0b:43:ed:59:f1:a7:0e:3a:fb:fa:18:bb:50:cc:25:9e:
da:04:1e:2b:ec:aa:57:3b:22:dc:76:77:9c:d5:2a:4d:b5:09:
5d:bb:d6:7c:11:9e:e2:f3:c5:7e:23:b2:b4:ee:7c:88:b2:5c:
24:63:3b:80:fa:6e:05:09:75:21:fa:fa:0a:3b:5f:fe:ac:1e:
91:e8:ad:53:53:59:0f:6d:27:4d:f6:0d:2e:46:48:17:75:04:
75:a7:02:11:3e:1f:34:e3:c7:2e:74:b2:f1:41:85:20:06:84:
a2:36:4f:48:5d:92:c7:0d:d0:67:9e:83:bc:3d:05:57:60:c7:
85:41:70:c2:e6:37:4a:df:ad:68:4a:56:6f:42:8f:29:80:ab:
25:2b:6e:4f:aa:01:28:b9:11:28:43:50:3d:52:32:dd:1e:c4:
7e:af:f8:af:15:c3:c9:36:d2:5b:1c:df:01:7e:be:19:3c:5e:
49:f5:3b:64:1b:31:81:6f:6d:a5:de:cb:74:eb:29:65:4b:4a:
fe:40:3f:0b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUGggdVn3dnYPaAJRCS6ylf1ZOwokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEOUQzQ0EzOUQyNUUxNjcwODhBQUQzODM1NTkzQkJG
RTJDMjdFQjAeFw0yNTAyMDQxODUxMjlaFw0yNjAyMDMxODU2MjlaMDMxMTAvBgNV
BAMTKDBDMDJDNDEyODE0MzQ4OTZCRTY0N0QyQUQzNDVGOTc2MjY5RTJFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlRnl9gN6Gk2hrW67dw2qCMi7
sZpjvF0UHGzHp7Oljq4Dad6bZyAVKgBc3Ty9nwXJjbFTUwyjRomkw8cl+aN5KPLx
6Ruzc6uDTkdQVjpJ539zbMxsathlCUsiwThlBkpFEvP0G6kxCHWNN8Sjp+p7ZLBY
kmpMudd5v+LI27Vezb3ytpEivOdWLTqeby9t7dPjqwuInsGcHF+G66TmKH6Xpd/a
DWdYyVei9yfhr9OPsBhulesqJAprUf53fckQWw5nIcLckwXYC4XSC1iR1ME9i906
zZdw621jFj1DV423zLhHTtg/C0ehJtrcTnMvxAOCAiLgq8EWVcaeAPgPtiUlAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUDALEEoFDSJa+ZH0q00X5diaeLnIwHwYDVR0j
BBgwFoAUxtnTyjnSXhZwiKrTg1WTu/4sJ+swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTIwOEI1RkIwNzg4MjlBQ0U0QUMwRkUzNzVGQTNBNTM0
RjQ1NjEwNzY5RkQwNTYzQTAwOEQ3MTUwMkQ2NkExLzAvQzZEOUQzQ0EzOUQyNUUx
NjcwODhBQUQzODM1NTkzQkJGRTJDMjdFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkQ5RDNDQTM5RDI1RTE2NzA4
OEFBRDM4MzU1OTNCQkZFMkMyN0VCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEyMDhCNUZCMDc4ODI5QUNFNEFDMEZFMzc1RkEzQTUzNEY0NTYxMDc2
OUZEMDU2M0EwMDhENzE1MDJENjZBMS8wLzMyMzgzMDMzM2EzMjMyMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNTMyMzMzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMCIDANBgkq
hkiG9w0BAQsFAAOCAQEAMbZqIOA5Jx6k0LghcGDUHsxF8JnKlyoSTRSGVGb7FURE
+GEBymsGplLYnM9Abt9PQnhJVaAMhjsLQ+1Z8acOOvv6GLtQzCWe2gQeK+yqVzsi
3HZ3nNUqTbUJXbvWfBGe4vPFfiOytO58iLJcJGM7gPpuBQl1Ifr6Cjtf/qwekeit
U1NZD20nTfYNLkZIF3UEdacCET4fNOPHLnSy8UGFIAaEojZPSF2Sxw3QZ56DvD0F
V2DHhUFwwuY3St+taEpWb0KPKYCrJStuT6oBKLkRKENQPVIy3R7Efq/4rxXDyTbS
WxzfAX6+GTxeSfU7ZBsxgW9tpd7LdOspZUtK/kA/Cw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:21 2025 by rpki-client