Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
File: 323830333a653265303a3a2f33322d3332203d3e20323639393233.roa (raw, json)
Hash identifier: wBJG/A3qzCte5o0wWkr5wWk06TAsjM7Lo9r1fPcx1o0=
Subject key identifier: 99:13:D4:40:6B:36:01:71:57:5F:EA:90:A0:0E:49:C1:EA:B2:07:6D
Certificate issuer: /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial: 4839D1672771C813779CA61DBB1A0C93C6EB8512
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
Signing time: Tue 04 Feb 2025 18:18:19 +0000
ROA not before: Tue 04 Feb 2025 18:13:19 +0000
ROA not after: Tue 03 Feb 2026 18:18:19 +0000
asID: 269923
IP address blocks: 2803:e2e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:39:d1:67:27:71:c8:13:77:9c:a6:1d:bb:1a:0c:93:c6:eb:85:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Validity
Not Before: Feb 4 18:13:19 2025 GMT
Not After : Feb 3 18:18:19 2026 GMT
Subject: CN=9913D4406B360171575FEA90A00E49C1EAB2076D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:da:b7:d2:ea:b3:c8:1f:c2:3b:0c:1a:00:
07:51:80:04:27:b7:56:2f:6e:7f:4b:84:7e:34:4e:
70:c6:f4:8e:1c:19:5e:f3:c7:5a:66:60:67:e2:27:
07:00:c1:90:d4:06:a3:99:b1:5f:53:83:13:a2:bd:
e1:9d:85:27:a7:fa:bf:39:bb:84:0d:bb:a0:7d:fb:
0f:e6:d9:f9:83:51:f3:ec:15:58:07:85:ad:58:0d:
86:11:c5:92:80:7f:e4:bb:0a:f0:b7:09:d7:11:5b:
9b:51:ed:5e:77:77:eb:98:24:43:25:33:09:fe:94:
7d:b5:aa:7b:c6:44:e9:9a:44:0b:77:45:f9:d0:24:
c3:d1:5b:72:92:c5:82:db:6b:ed:9b:6b:97:8f:f6:
32:be:92:f5:03:8f:19:95:fb:d1:65:95:98:2b:c0:
28:a1:82:a0:b9:12:41:30:11:2c:54:58:5a:58:41:
6c:67:58:99:53:bc:30:2e:6f:a0:5e:96:4a:b0:e4:
cc:7e:ba:31:fb:93:28:26:67:0a:ef:a5:1b:04:fb:
71:17:6c:76:92:26:07:45:5f:68:93:67:b9:72:5a:
85:26:35:05:94:d9:d0:c1:1e:eb:e0:1f:2e:5e:bc:
f0:3f:b4:1e:23:fa:2f:98:51:7b:f4:bf:68:7c:7b:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:D4:40:6B:36:01:71:57:5F:EA:90:A0:0E:49:C1:EA:B2:07:6D
X509v3 Authority Key Identifier:
keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e2e0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:85:b5:2a:21:d9:85:03:cb:8a:13:3c:a4:41:09:5c:05:16:
fc:8f:77:cf:8e:4f:3a:f8:d6:6a:8e:6a:fb:b7:7b:c1:50:6a:
d2:4b:5a:17:cc:2c:a4:7c:89:44:0e:cd:b0:21:eb:2d:08:01:
ed:a1:67:c0:c1:2d:cc:62:08:c9:71:47:f9:a2:f4:f8:58:27:
f1:c7:8a:96:3b:f4:eb:e2:24:14:cb:2a:fd:22:31:db:7f:8f:
29:b0:0d:f4:c4:92:f8:8c:c2:0b:5a:c0:69:aa:d0:cf:92:7b:
a0:01:3a:05:96:ce:20:bd:b2:c4:09:8f:94:1e:08:5d:ed:2a:
8c:1c:4a:33:09:fe:79:45:5e:46:e3:8e:07:a2:97:aa:0e:dd:
33:f8:af:6f:86:b0:e6:b7:d7:71:a6:d0:08:b7:2f:e7:72:64:
12:da:ac:07:27:b2:39:fd:65:65:89:ba:20:31:f7:0c:7b:44:
4d:72:d9:84:a3:83:af:54:fa:3b:1c:d6:f1:92:16:9c:65:76:
f6:cb:d0:57:3d:3f:c6:65:01:28:6f:a5:0f:0f:34:d6:82:aa:
71:99:01:59:87:46:9c:fe:86:fb:8c:8c:fc:d3:90:b7:e1:85:
94:8d:97:e7:22:b6:66:be:26:80:bc:ba:9f:50:e6:f6:91:5e:
6a:0a:5a:86
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSDnRZydxyBN3nKYduxoMk8brhRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ1Njg3NkI4Njg5NzkxMUREMEM2Q0Y5MzhDRjZFM0ZF
QjAzQzM2MDAeFw0yNTAyMDQxODEzMTlaFw0yNjAyMDMxODE4MTlaMDMxMTAvBgNV
BAMTKDk5MTNENDQwNkIzNjAxNzE1NzVGRUE5MEEwMEU0OUMxRUFCMjA3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Etq30uqzyB/COwwaAAdRgAQn
t1Yvbn9LhH40TnDG9I4cGV7zx1pmYGfiJwcAwZDUBqOZsV9TgxOiveGdhSen+r85
u4QNu6B9+w/m2fmDUfPsFVgHha1YDYYRxZKAf+S7CvC3CdcRW5tR7V53d+uYJEMl
Mwn+lH21qnvGROmaRAt3RfnQJMPRW3KSxYLba+2ba5eP9jK+kvUDjxmV+9FllZgr
wCihgqC5EkEwESxUWFpYQWxnWJlTvDAub6Belkqw5Mx+ujH7kygmZwrvpRsE+3EX
bHaSJgdFX2iTZ7lyWoUmNQWU2dDBHuvgHy5evPA/tB4j+i+YUXv0v2h8e30tAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmRPUQGs2AXFXX+qQoA5JweqyB20wHwYDVR0j
BBgwFoAUTVaHa4aJeRHdDGz5OM9uP+sDw2AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTdFQkMyOTdCQkQ4MjRERDU2QjZGNUMzOTg2ODZEQTY2
Q0FDODMwRkE5Q0JENTRCRDhGMjRDRTNBQTdBNTBGLzAvNEQ1Njg3NkI4Njg5Nzkx
MUREMEM2Q0Y5MzhDRjZFM0ZFQjAzQzM2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RDU2ODc2Qjg2ODk3OTExREQw
QzZDRjkzOENGNkUzRkVCMDNDMzYwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3RUJDMjk3QkJEODI0REQ1NkI2RjVDMzk4Njg2REE2NkNBQzgzMEZB
OUNCRDU0QkQ4RjI0Q0UzQUE3QTUwRi8wLzMyMzgzMDMzM2E2NTMyNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4uAw
DQYJKoZIhvcNAQELBQADggEBAKaFtSoh2YUDy4oTPKRBCVwFFvyPd8+OTzr41mqO
avu3e8FQatJLWhfMLKR8iUQOzbAh6y0IAe2hZ8DBLcxiCMlxR/mi9PhYJ/HHipY7
9OviJBTLKv0iMdt/jymwDfTEkviMwgtawGmq0M+Se6ABOgWWziC9ssQJj5QeCF3t
KowcSjMJ/nlFXkbjjgeil6oO3TP4r2+GsOa313Gm0Ai3L+dyZBLarAcnsjn9ZWWJ
uiAx9wx7RE1y2YSjg69U+jsc1vGSFpxldvbL0Fc9P8ZlAShvpQ8PNNaCqnGZAVmH
Rpz+hvuMjPzTkLfhhZSNl+citma+JoC8up9Q5vaRXmoKWoY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:31 2025 by rpki-client