Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa
File: 323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier: Hg053965hIxQ7BF8nqlJc5n+sKItkpNLSUp9liFnrBQ=
Subject key identifier: D8:68:70:47:FD:08:15:2A:2F:1E:5A:26:74:B2:50:91:FA:DF:7A:80
Certificate issuer: /CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
Certificate serial: 3EAA66B0C208994A85AC4B4B422FA74164E7672C
Authority key identifier: 70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time: Tue 04 Feb 2025 20:03:46 +0000
ROA not before: Tue 04 Feb 2025 19:58:46 +0000
ROA not after: Tue 03 Feb 2026 20:03:46 +0000
asID: 265696
IP address blocks: 2801:18:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:aa:66:b0:c2:08:99:4a:85:ac:4b:4b:42:2f:a7:41:64:e7:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
Validity
Not Before: Feb 4 19:58:46 2025 GMT
Not After : Feb 3 20:03:46 2026 GMT
Subject: CN=D8687047FD08152A2F1E5A2674B25091FADF7A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:45:33:a6:72:de:2e:af:00:d7:78:bf:cf:
3d:82:2d:b7:1e:d3:2b:3b:d4:26:4e:56:7e:82:98:
7f:6d:cb:2b:dc:7f:65:15:fc:d3:71:51:3e:76:f2:
a8:b7:84:45:d2:58:55:60:32:21:66:13:f4:d2:34:
6f:93:61:8a:19:ce:eb:c3:72:a7:bc:a5:cb:d0:fd:
3e:a2:0e:b7:91:bb:2b:a4:c6:c8:0a:47:61:4b:20:
e9:81:26:1e:f1:bf:8f:fc:e7:ab:53:00:88:f2:ac:
92:84:9e:98:7a:42:6f:93:87:41:5d:1c:f4:d7:50:
d4:f8:df:82:c7:48:a6:68:58:7b:1b:6e:db:eb:84:
0b:11:c8:a5:a1:9c:38:3e:51:7f:0c:78:15:c8:90:
a9:0e:c0:27:7b:2a:41:45:61:dc:10:c0:0e:cc:fd:
02:a6:d5:0f:2c:8c:d2:ed:1f:fe:2c:95:ad:2b:5d:
2a:5a:1c:92:82:e1:5a:fa:bb:2c:3e:eb:7d:69:cb:
62:b8:10:a6:2c:6f:39:1a:59:35:97:cd:d5:83:8e:
5d:c8:69:86:d2:c9:e2:69:20:4b:a8:fd:ca:23:e6:
c7:1c:2b:c8:19:d4:a0:3d:0a:7a:16:94:bc:0a:81:
c8:62:72:7c:ce:dd:77:ce:2e:d7:5d:46:eb:e6:10:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:70:47:FD:08:15:2A:2F:1E:5A:26:74:B2:50:91:FA:DF:7A:80
X509v3 Authority Key Identifier:
keyid:70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:18:3000::/48
Signature Algorithm: sha256WithRSAEncryption
99:d1:55:a3:33:f0:98:a7:b9:37:07:f9:8b:f0:e1:b8:24:83:
1a:62:e5:e9:05:58:5f:e3:68:21:58:3a:fc:c8:0e:51:18:89:
1a:10:13:65:c4:1c:b9:91:35:dd:e8:b5:e0:d9:75:81:43:95:
4d:0f:cc:2b:68:2f:c9:be:f2:eb:92:04:05:83:eb:56:34:79:
ca:7f:e6:22:0b:af:b6:d3:e0:79:92:bc:90:8d:6c:cf:73:be:
53:58:17:7a:b4:38:14:c1:91:37:e8:18:d7:ae:cc:16:69:44:
4e:3a:5a:fc:df:59:4b:50:35:48:2c:dc:0d:bc:f9:b5:a7:e1:
48:b8:7d:04:ed:6f:81:b4:47:36:77:74:a5:9e:10:2d:9a:ff:
d3:96:ff:77:72:55:b0:c1:4b:fd:5e:06:0c:1a:ae:c6:c9:11:
24:39:c9:4e:85:c2:56:fc:04:8a:eb:f9:dd:89:85:04:49:66:
e9:d3:c9:e8:98:9f:09:b9:61:db:b0:e3:5a:49:a6:a2:08:2c:
25:ef:15:78:b1:dd:26:e2:4f:4f:9e:fa:50:d2:50:41:f5:9e:
b1:f5:3a:1e:de:70:26:c3:6c:1d:e6:70:04:a9:a0:ae:e1:91:
0a:33:98:35:e3:0e:de:1f:e8:67:a3:94:60:1e:a1:3b:4d:ec:
84:17:3c:8b
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUPqpmsMIImUqFrEtLQi+nQWTnZywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBDMzQ5MDZBRjRDQUExMDBFQTAxREM2NjE4MUFBNzlE
Nzg5NjBCODAeFw0yNTAyMDQxOTU4NDZaFw0yNjAyMDMyMDAzNDZaMDMxMTAvBgNV
BAMTKEQ4Njg3MDQ3RkQwODE1MkEyRjFFNUEyNjc0QjI1MDkxRkFERjdBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+kUzpnLeLq8A13i/zz2CLbce
0ys71CZOVn6CmH9tyyvcf2UV/NNxUT528qi3hEXSWFVgMiFmE/TSNG+TYYoZzuvD
cqe8pcvQ/T6iDreRuyukxsgKR2FLIOmBJh7xv4/856tTAIjyrJKEnph6Qm+Th0Fd
HPTXUNT434LHSKZoWHsbbtvrhAsRyKWhnDg+UX8MeBXIkKkOwCd7KkFFYdwQwA7M
/QKm1Q8sjNLtH/4sla0rXSpaHJKC4Vr6uyw+631py2K4EKYsbzkaWTWXzdWDjl3I
aYbSyeJpIEuo/coj5sccK8gZ1KA9CnoWlLwKgchicnzO3XfOLtddRuvmEA7/AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU2GhwR/0IFSovHlomdLJQkfrfeoAwHwYDVR0j
BBgwFoAUcMNJBq9MqhAOoB3GYYGqedeJYLgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NjlBN0IwQzc2NDIzMzdBMjJDNTI0OUYwNkVEMDNEODFC
MzM4NzI5RjU5MzlFNDlGQ0Y0ODEwNUM4ODRGNzZGLzAvNzBDMzQ5MDZBRjRDQUEx
MDBFQTAxREM2NjE4MUFBNzlENzg5NjBCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEMzNDkwNkFGNENBQTEwMEVB
MDFEQzY2MTgxQUE3OUQ3ODk2MEI4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjY5QTdCMEM3NjQyMzM3QTIyQzUyNDlGMDZFRDAzRDgxQjMzODcyOUY1
OTM5RTQ5RkNGNDgxMDVDODg0Rjc2Ri8wLzMyMzgzMDMxM2EzMTM4M2EzMzMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzkzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABgwADANBgkqhkiG9w0BAQsFAAOCAQEAmdFVozPwmKe5Nwf5i/DhuCSDGmLl
6QVYX+NoIVg6/MgOURiJGhATZcQcuZE13ei14Nl1gUOVTQ/MK2gvyb7y65IEBYPr
VjR5yn/mIguvttPgeZK8kI1sz3O+U1gXerQ4FMGRN+gY167MFmlETjpa/N9ZS1A1
SCzcDbz5tafhSLh9BO1vgbRHNnd0pZ4QLZr/05b/d3JVsMFL/V4GDBquxskRJDnJ
ToXCVvwEiuv53YmFBElm6dPJ6JifCblh27DjWkmmoggsJe8VeLHdJuJPT576UNJQ
QfWesfU6Ht5wJsNsHeZwBKmgruGRCjOYNeMO3h/oZ6OUYB6hO03shBc8iw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:55 2025 by rpki-client