Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa
File: 323830333a393339303a3a2f33322d3438203d3e20323733303231.roa (raw, json)
Hash identifier: TQ3lpmKTKLO9ui8iLzYy+a1t0z1D1sKR6hK33jVHNm8=
Subject key identifier: 6E:3F:D0:A8:93:F8:6E:8B:2D:E5:48:00:DA:93:CB:4C:50:2D:A1:BE
Certificate issuer: /CN=29591D131A7FFB5CA72F55D75A98CE32A3B3EA35
Certificate serial: 3918D83CF9A7052933C8DC7FB6E0CD61B7B84952
Authority key identifier: 29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa
Signing time: Tue 04 Feb 2025 18:50:27 +0000
ROA not before: Tue 04 Feb 2025 18:45:27 +0000
ROA not after: Tue 03 Feb 2026 18:50:27 +0000
asID: 273021
IP address blocks: 2803:9390::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:18:d8:3c:f9:a7:05:29:33:c8:dc:7f:b6:e0:cd:61:b7:b8:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29591D131A7FFB5CA72F55D75A98CE32A3B3EA35
Validity
Not Before: Feb 4 18:45:27 2025 GMT
Not After : Feb 3 18:50:27 2026 GMT
Subject: CN=6E3FD0A893F86E8B2DE54800DA93CB4C502DA1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:7a:cf:a2:b6:29:8a:96:e0:ec:e9:b0:78:
24:91:ae:d7:78:ee:50:df:72:1a:8a:ad:5e:cf:b6:
90:4b:4a:f0:d1:f0:01:94:c6:2d:35:06:78:64:59:
37:50:19:29:ce:b9:8a:97:34:18:6c:ad:1b:af:7a:
7f:d5:40:7e:7e:a6:db:b7:f3:32:d6:6c:6d:21:a1:
e5:dc:7a:4b:a3:35:63:dc:ba:ed:7d:b4:ea:e8:3c:
a0:48:e4:31:7b:f9:69:29:ac:74:8e:3a:2f:e0:de:
07:15:ad:2b:3f:b8:40:fd:1b:a2:d3:5d:39:c4:66:
f2:bb:dd:7e:10:ef:78:e1:b9:4e:56:15:c6:76:64:
89:78:c0:b6:7c:8b:1a:db:30:3f:ef:d2:df:8c:8f:
77:06:07:1d:7e:7b:28:95:d7:45:b3:b2:7e:76:47:
03:87:d5:72:d1:07:99:62:6e:57:1d:80:7e:39:84:
eb:e7:7c:ea:27:72:e4:b2:e9:9a:95:a1:0d:48:63:
25:de:4a:f5:c3:32:39:e2:9b:c9:51:e1:3b:40:b6:
34:e5:db:8c:65:73:bb:17:cb:d4:fc:e6:b9:37:c2:
ae:7b:df:7e:ba:bb:94:f5:27:c9:7f:a0:44:b9:53:
57:a4:c9:94:d6:4c:2c:fb:9c:31:f8:30:65:c4:c5:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:D0:A8:93:F8:6E:8B:2D:E5:48:00:DA:93:CB:4C:50:2D:A1:BE
X509v3 Authority Key Identifier:
keyid:29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9390::/32
Signature Algorithm: sha256WithRSAEncryption
96:9e:bc:3a:2e:69:39:ad:9d:42:f1:76:e6:fc:64:eb:15:da:
b7:7a:6c:1f:7e:83:b6:16:8a:9d:16:bc:21:80:0e:5a:0c:c8:
3a:da:76:de:a9:8b:6f:a2:c4:47:f7:21:90:c2:6f:f2:42:c5:
5d:a1:b2:ea:4b:6f:ad:4f:8e:92:ba:72:12:4f:4f:18:7d:01:
1a:36:2a:a8:fc:14:8d:41:37:b3:5a:6f:9f:f2:e5:2d:79:b8:
d2:dd:f4:99:ef:61:3b:31:55:b9:6b:3a:b2:64:6c:ad:9b:49:
cb:03:31:91:42:07:b7:3f:d9:8c:67:67:c8:2c:c5:ad:70:dc:
37:3a:e9:c5:0f:a8:75:37:c8:e8:35:76:5e:7a:a1:02:4d:91:
e0:9b:a3:ab:4b:9a:42:da:f2:3e:d5:cb:55:f3:1e:13:a1:5b:
58:44:0d:85:fe:43:97:95:4f:6d:e9:84:b1:86:96:0b:75:fb:
cd:9a:99:e2:81:38:67:1c:29:6b:b0:29:7f:21:ed:2b:e6:58:
94:78:67:87:cf:db:db:3d:16:45:93:02:18:6f:f6:5c:3a:58:
66:69:a3:94:90:81:a4:e0:e1:73:73:ef:40:5b:d1:32:31:f4:
f4:b6:9b:ba:c6:d7:e6:25:d9:88:ee:7f:92:8d:77:b0:e0:31:
1c:05:7d:c8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUORjYPPmnBSkzyNx/tuDNYbe4SVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1OTFEMTMxQTdGRkI1Q0E3MkY1NUQ3NUE5OENFMzJB
M0IzRUEzNTAeFw0yNTAyMDQxODQ1MjdaFw0yNjAyMDMxODUwMjdaMDMxMTAvBgNV
BAMTKDZFM0ZEMEE4OTNGODZFOEIyREU1NDgwMERBOTNDQjRDNTAyREExQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qHrPorYpipbg7OmweCSRrtd4
7lDfchqKrV7PtpBLSvDR8AGUxi01BnhkWTdQGSnOuYqXNBhsrRuven/VQH5+ptu3
8zLWbG0hoeXcekujNWPcuu19tOroPKBI5DF7+WkprHSOOi/g3gcVrSs/uED9G6LT
XTnEZvK73X4Q73jhuU5WFcZ2ZIl4wLZ8ixrbMD/v0t+Mj3cGBx1+eyiV10Wzsn52
RwOH1XLRB5liblcdgH45hOvnfOoncuSy6ZqVoQ1IYyXeSvXDMjnim8lR4TtAtjTl
24xlc7sXy9T85rk3wq573366u5T1J8l/oES5U1ekyZTWTCz7nDH4MGXExe5nAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbj/QqJP4bost5UgA2pPLTFAtob4wHwYDVR0j
BBgwFoAUKVkdExp/+1ynL1XXWpjOMqOz6jUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzlBNDcwNkRFMTlBQzZFQjYyM0QyNTI4QzlBRjg0QzEw
OTNCQTM3MTE0NDgxRDgyQjJEMTg4RUNFMkFCQkMxLzAvMjk1OTFEMTMxQTdGRkI1
Q0E3MkY1NUQ3NUE5OENFMzJBM0IzRUEzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTU5MUQxMzFBN0ZGQjVDQTcy
RjU1RDc1QTk4Q0UzMkEzQjNFQTM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM5QTQ3MDZERTE5QUM2RUI2MjNEMjUyOEM5QUY4NEMxMDkzQkEzNzEx
NDQ4MUQ4MkIyRDE4OEVDRTJBQkJDMS8wLzMyMzgzMDMzM2EzOTMzMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDk5Aw
DQYJKoZIhvcNAQELBQADggEBAJaevDouaTmtnULxdub8ZOsV2rd6bB9+g7YWip0W
vCGADloMyDradt6pi2+ixEf3IZDCb/JCxV2hsupLb61PjpK6chJPTxh9ARo2Kqj8
FI1BN7Nab5/y5S15uNLd9JnvYTsxVblrOrJkbK2bScsDMZFCB7c/2YxnZ8gsxa1w
3Dc66cUPqHU3yOg1dl56oQJNkeCbo6tLmkLa8j7Vy1XzHhOhW1hEDYX+Q5eVT23p
hLGGlgt1+82ameKBOGccKWuwKX8h7SvmWJR4Z4fP29s9FkWTAhhv9lw6WGZpo5SQ
gaTg4XNz70Bb0TIx9PS2m7rG1+Yl2Yjuf5KNd7DgMRwFfcg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client