Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa
File: 323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier: s7Obro7WG0DKMugZRal8aYbStUUaKmVnXXxzsvKl600=
Subject key identifier: C3:CD:C9:DC:A2:C7:4E:05:7B:3B:B5:B3:00:76:93:5B:46:9A:B5:9C
Certificate issuer: /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial: 1E65809D64A85EC46D74FC900937E7A1750310AA
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa
Signing time: Tue 04 Feb 2025 18:36:17 +0000
ROA not before: Tue 04 Feb 2025 18:31:17 +0000
ROA not after: Tue 03 Feb 2026 18:36:17 +0000
asID: 272854
IP address blocks: 2803:c290:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:65:80:9d:64:a8:5e:c4:6d:74:fc:90:09:37:e7:a1:75:03:10:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Validity
Not Before: Feb 4 18:31:17 2025 GMT
Not After : Feb 3 18:36:17 2026 GMT
Subject: CN=C3CDC9DCA2C74E057B3BB5B30076935B469AB59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:0c:fc:8f:a6:b4:12:0a:4e:68:4e:6d:a8:
6a:62:8e:3a:15:b4:77:c9:80:9f:4b:65:78:99:40:
d7:94:37:08:0f:8f:1c:cc:a9:7a:e4:c5:8a:e2:37:
b5:ea:43:3e:0d:7b:97:0e:ab:92:ff:0b:ca:21:2c:
01:9e:4a:82:71:00:45:f3:6c:3e:78:a9:82:f7:3a:
12:ae:c6:00:41:46:a0:2d:54:48:20:af:dd:7d:82:
64:b7:0f:98:ff:5d:be:dd:88:1b:2b:e2:71:c2:a8:
d4:1a:3c:bd:69:be:e2:db:16:ea:cb:60:05:29:46:
4e:2e:a1:2d:de:0d:02:f7:be:53:3a:48:d9:37:3c:
e6:19:e1:02:99:7c:47:c8:2d:e3:a5:ee:83:dc:f0:
44:38:17:44:cd:d1:5a:c6:ad:23:ee:9d:02:3e:5b:
8a:7c:c2:b6:9e:0b:66:e7:9f:41:d7:91:2a:49:84:
dc:f3:f5:2d:82:42:32:4f:00:1c:e1:6a:0f:9f:b3:
41:2f:92:8d:23:e7:4f:40:8f:c8:8a:bc:12:9f:b8:
83:27:bc:68:97:d7:c7:8e:9f:77:21:c5:7a:f5:34:
ef:cd:cf:d5:4f:3f:03:a5:8f:17:29:d1:43:f4:1c:
19:73:10:3d:5d:6a:0a:19:5f:f5:d7:05:7c:57:62:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:C9:DC:A2:C7:4E:05:7B:3B:B5:B3:00:76:93:5B:46:9A:B5:9C
X509v3 Authority Key Identifier:
keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c290:400::/40
Signature Algorithm: sha256WithRSAEncryption
b0:c5:b0:b4:7d:5f:1d:75:92:d5:e8:79:66:66:ca:d2:1b:0f:
f1:6f:9e:3c:81:fe:43:9e:c9:bf:0e:f3:8e:a2:4a:ca:94:d0:
1a:2f:f9:5d:a2:73:31:85:80:e1:46:d3:9f:86:ac:75:b0:3d:
0a:46:23:f5:2c:66:f8:81:9f:7b:94:98:b4:57:e5:0e:91:84:
71:e9:3b:8e:6d:f9:e9:de:37:aa:e0:ac:cd:15:5c:50:a0:fc:
00:af:e2:5e:ad:0f:d2:5e:b7:df:df:e7:49:52:0e:00:30:01:
9b:fe:70:d2:2a:84:79:1c:f2:98:4c:2c:d4:dd:8f:ab:15:ee:
4d:e2:69:ae:58:5b:c1:db:28:f1:a5:00:19:c0:3e:09:0d:7d:
ea:84:9b:8d:9f:e2:e4:e7:35:41:6e:02:ad:6e:a3:90:47:46:
c3:5f:03:15:83:da:cb:2e:70:7e:2a:2d:50:91:9d:6d:e4:e8:
43:89:a4:ad:71:ca:5e:36:a3:91:6f:3e:28:7a:c3:28:f3:3c:
1e:d7:d6:f5:1f:e7:68:ec:1d:16:23:52:e1:c5:ad:a8:3f:20:
7b:d0:5c:40:23:1f:8c:3a:16:f6:55:2c:c7:29:72:24:60:b2:
dc:f0:64:01:46:c1:c9:ee:f6:c4:2a:cc:1c:de:86:7b:6d:83:
98:c2:87:b7
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUHmWAnWSoXsRtdPyQCTfnoXUDEKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1QkVFMUI5RURCOEMxNzQzMkIyRDlERUMzMTBFQTMw
MTU5ODY0NzAeFw0yNTAyMDQxODMxMTdaFw0yNjAyMDMxODM2MTdaMDMxMTAvBgNV
BAMTKEMzQ0RDOURDQTJDNzRFMDU3QjNCQjVCMzAwNzY5MzVCNDY5QUI1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOAz8j6a0EgpOaE5tqGpijjoV
tHfJgJ9LZXiZQNeUNwgPjxzMqXrkxYriN7XqQz4Ne5cOq5L/C8ohLAGeSoJxAEXz
bD54qYL3OhKuxgBBRqAtVEggr919gmS3D5j/Xb7diBsr4nHCqNQaPL1pvuLbFurL
YAUpRk4uoS3eDQL3vlM6SNk3POYZ4QKZfEfILeOl7oPc8EQ4F0TN0VrGrSPunQI+
W4p8wraeC2bnn0HXkSpJhNzz9S2CQjJPABzhag+fs0Evko0j509Aj8iKvBKfuIMn
vGiX18eOn3chxXr1NO/Nz9VPPwOljxcp0UP0HBlzED1dagoZX/XXBXxXYsQHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUw83J3KLHTgV7O7WzAHaTW0aatZwwHwYDVR0j
BBgwFoAUPFvuG57bjBdDKy2d7DEOowFZhkcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUEwOEQyMUZFREE1MUM0MkNEQUYyRDRFRDZFRDIxNUE5
NDY3RUFFMTU1OUFBRjI2MjE2MkUyQUZCQTU5NkIwLzAvM0M1QkVFMUI5RURCOEMx
NzQzMkIyRDlERUMzMTBFQTMwMTU5ODY0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzVCRUUxQjlFREI4QzE3NDMy
QjJEOURFQzMxMEVBMzAxNTk4NjQ3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFBMDhEMjFGRURBNTFDNDJDREFGMkQ0RUQ2RUQyMTVBOTQ2N0VBRTE1
NTlBQUYyNjIxNjJFMkFGQkE1OTZCMC8wLzMyMzgzMDMzM2E2MzMyMzkzMDNhMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPCkAQwDQYJKoZIhvcNAQELBQADggEBALDFsLR9Xx11ktXoeWZmytIbD/Fv
njyB/kOeyb8O846iSsqU0Bov+V2iczGFgOFG05+GrHWwPQpGI/UsZviBn3uUmLRX
5Q6RhHHpO45t+eneN6rgrM0VXFCg/ACv4l6tD9Jet9/f50lSDgAwAZv+cNIqhHkc
8phMLNTdj6sV7k3iaa5YW8HbKPGlABnAPgkNfeqEm42f4uTnNUFuAq1uo5BHRsNf
AxWD2ssucH4qLVCRnW3k6EOJpK1xyl42o5FvPih6wyjzPB7X1vUf52jsHRYjUuHF
rag/IHvQXEAjH4w6FvZVLMcpciRgstzwZAFGwcnu9sQqzBzehnttg5jCh7c=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:25 2025 by rpki-client