Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/323830333a336130303a3a2f33372d3438203d3e203233323433.roa
File: 323830333a336130303a3a2f33372d3438203d3e203233323433.roa (raw, json)
Hash identifier: Wg7KIg4aJE/K3UIRzeU93MVyON+RE4VJtjM6jL4F+7Y=
Subject key identifier: 38:24:6B:5B:CD:A1:73:0E:BA:0C:65:BE:62:61:7D:26:04:0B:36:C6
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 2C549EB2AAF407C61F9BE21E0D5371594F5EEFEC
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/323830333a336130303a3a2f33372d3438203d3e203233323433.roa
Signing time: Tue 04 Feb 2025 18:15:28 +0000
ROA not before: Tue 04 Feb 2025 18:10:28 +0000
ROA not after: Tue 03 Feb 2026 18:15:28 +0000
asID: 23243
IP address blocks: 2803:3a00::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:54:9e:b2:aa:f4:07:c6:1f:9b:e2:1e:0d:53:71:59:4f:5e:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:28 2025 GMT
Not After : Feb 3 18:15:28 2026 GMT
Subject: CN=38246B5BCDA1730EBA0C65BE62617D26040B36C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:97:dd:0c:25:af:4d:bf:8a:c2:5b:4b:84:
d4:68:e2:f9:01:a5:f1:4f:06:95:9a:f5:b8:3d:2e:
28:30:c0:2b:d5:05:b8:a6:a3:17:6f:db:b2:e5:a9:
64:18:63:21:14:8d:82:9a:b4:a0:5f:31:b7:c4:5f:
2b:7a:6a:5f:03:f1:fc:9f:15:3c:a2:6f:31:07:23:
57:23:61:1d:cc:46:83:68:7d:f9:56:d2:f4:1b:39:
a0:09:7d:5f:74:a4:ec:d0:66:d3:90:01:f1:c3:e3:
03:35:17:63:a1:fd:e1:34:55:80:8d:9e:72:27:9f:
0c:f2:37:98:7f:b0:cf:d5:a3:c8:b1:0c:92:c6:b7:
7a:05:d0:5a:f5:96:e3:a1:63:53:65:dd:ba:1a:1c:
28:28:08:f1:6a:c8:4b:77:50:4c:2c:77:3d:07:0c:
f3:15:73:38:53:e4:26:f6:ea:d8:52:a6:52:9f:b1:
19:32:24:27:1f:fd:53:9d:90:5b:ed:06:dc:dd:0a:
72:fe:1f:ed:fe:58:8a:f6:80:40:ea:e8:73:f0:ec:
27:3a:1d:4f:5c:1c:4f:16:09:0f:9c:7c:fe:c3:39:
8b:b2:68:cb:d0:55:4a:72:5a:b4:e4:9a:29:15:a1:
ba:d3:32:83:60:7a:02:54:98:84:84:f9:09:77:1a:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:6B:5B:CD:A1:73:0E:BA:0C:65:BE:62:61:7D:26:04:0B:36:C6
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/323830333a336130303a3a2f33372d3438203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3a00::/37
Signature Algorithm: sha256WithRSAEncryption
40:5b:c7:c3:8e:b7:b4:5c:7a:7f:2f:06:4b:a2:d9:9c:77:57:
9c:fd:ef:b1:d1:b1:b4:c0:b5:30:09:8b:1d:35:9e:a6:a9:db:
fc:c3:fc:f1:0c:c5:a5:c3:c3:93:99:a8:74:ba:8d:5c:da:a2:
8d:45:7a:af:f8:d1:1d:5a:7f:af:72:18:dd:ca:c0:76:e7:a5:
c8:86:78:dc:75:dd:47:c4:70:92:bd:2a:d9:f7:fa:e2:18:4d:
52:92:92:6c:c6:28:33:03:bb:c7:61:3a:62:2b:68:ea:97:2d:
7a:8c:b3:08:b9:e6:2b:ce:75:53:c0:89:b7:a0:48:43:62:3a:
b4:16:44:a8:49:f5:f7:60:bf:5f:09:aa:d1:5e:2b:3e:bd:ed:
84:d2:ed:7e:b5:25:8a:8e:7b:1e:e7:9b:9e:aa:1e:3a:d9:83:
b9:cd:33:9b:82:0c:19:e3:eb:3a:3f:03:06:68:2e:f7:a7:8e:
95:3d:20:da:b2:79:39:28:44:85:8e:83:f6:d7:a2:75:c6:f4:
fa:96:6d:5c:aa:45:e7:87:f5:1b:6f:f7:c2:32:5e:09:1d:5d:
1b:6e:31:2f:20:14:ac:1a:6d:cd:38:6f:2c:28:e9:af:02:e6:
0e:28:83:c5:00:4f:83:0d:20:5f:19:5b:cb:c1:c9:3d:e2:32:
1f:ff:86:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULFSesqr0B8Yfm+IeDVNxWU9e7+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNTAyMDQxODEwMjhaFw0yNjAyMDMxODE1MjhaMDMxMTAvBgNV
BAMTKDM4MjQ2QjVCQ0RBMTczMEVCQTBDNjVCRTYyNjE3RDI2MDQwQjM2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7pfdDCWvTb+KwltLhNRo4vkB
pfFPBpWa9bg9LigwwCvVBbimoxdv27LlqWQYYyEUjYKatKBfMbfEXyt6al8D8fyf
FTyibzEHI1cjYR3MRoNofflW0vQbOaAJfV90pOzQZtOQAfHD4wM1F2Oh/eE0VYCN
nnInnwzyN5h/sM/Vo8ixDJLGt3oF0Fr1luOhY1Nl3boaHCgoCPFqyEt3UEwsdz0H
DPMVczhT5Cb26thSplKfsRkyJCcf/VOdkFvtBtzdCnL+H+3+WIr2gEDq6HPw7Cc6
HU9cHE8WCQ+cfP7DOYuyaMvQVUpyWrTkmikVobrTMoNgegJUmISE+Ql3Gn87AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOCRrW82hcw66DGW+YmF9JgQLNsYwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMyMzgzMDMzM2EzMzYxMzAzMDNhM2Ey
ZjMzMzcyZDM0MzgyMDNkM2UyMDMyMzMzMjM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgMoAzoAADAN
BgkqhkiG9w0BAQsFAAOCAQEAQFvHw463tFx6fy8GS6LZnHdXnP3vsdGxtMC1MAmL
HTWepqnb/MP88QzFpcPDk5modLqNXNqijUV6r/jRHVp/r3IY3crAduelyIZ43HXd
R8Rwkr0q2ff64hhNUpKSbMYoMwO7x2E6Yito6pcteoyzCLnmK851U8CJt6BIQ2I6
tBZEqEn192C/Xwmq0V4rPr3thNLtfrUlio57HuebnqoeOtmDuc0zm4IMGePrOj8D
Bmgu96eOlT0g2rJ5OShEhY6D9teidcb0+pZtXKpF54f1G2/3wjJeCR1dG24xLyAU
rBptzThvLCjprwLmDiiDxQBPgw0gXxlby8HJPeIyH/+GCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:57 2025 by rpki-client