Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31373a363830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: 3HJ4BsEXcSrePXrNqzNPP52EEwm7lyUnWFfszweZt+E=
Subject key identifier: BB:09:19:A3:D7:AA:74:EB:33:D0:E2:F8:BD:C6:4B:82:49:9E:78:CC
Certificate issuer: /CN=FE7A38E6D406AA24FBCCFA786168EADEB1058CFD
Certificate serial: 608E7C853DF15BE1CFAC9D7387411CE1265A0E15
Authority key identifier: FE:7A:38:E6:D4:06:AA:24:FB:CC:FA:78:61:68:EA:DE:B1:05:8C:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 04 Feb 2025 18:24:34 +0000
ROA not before: Tue 04 Feb 2025 18:19:34 +0000
ROA not after: Tue 03 Feb 2026 18:24:34 +0000
asID: 14080
IP address blocks: 2801:17:6800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8e:7c:85:3d:f1:5b:e1:cf:ac:9d:73:87:41:1c:e1:26:5a:0e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE7A38E6D406AA24FBCCFA786168EADEB1058CFD
Validity
Not Before: Feb 4 18:19:34 2025 GMT
Not After : Feb 3 18:24:34 2026 GMT
Subject: CN=BB0919A3D7AA74EB33D0E2F8BDC64B82499E78CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:e0:71:e4:42:f2:0f:c2:d4:2a:4d:1e:44:
3d:66:3b:85:34:3f:ce:0a:ec:00:64:27:53:d7:0a:
fc:91:45:ef:42:93:b2:15:ed:98:8c:07:0d:6b:9a:
1b:38:67:5a:61:f6:b5:1d:68:34:ae:54:fd:62:36:
b4:ed:46:fa:40:14:a2:b7:29:d6:92:87:c2:d8:7c:
15:82:51:77:a7:ae:a8:56:16:b9:a2:e0:b3:87:af:
d9:ac:53:a4:84:ad:6d:e4:3e:72:55:fe:59:f1:dd:
33:f6:03:77:96:eb:01:97:39:ec:87:06:8d:f1:95:
e5:16:3c:3e:cf:67:6f:8e:c8:91:87:ee:6e:25:15:
17:b2:58:d3:f9:9b:31:bb:f1:2e:50:0f:38:6d:30:
71:8c:0c:5a:a9:f4:55:b0:9b:9f:d9:26:95:6c:9f:
75:0b:7d:4b:44:8f:87:1e:7a:62:2f:d8:da:81:ec:
e7:63:d0:8b:8a:db:d0:72:60:56:56:d8:e5:d0:3a:
cf:94:22:68:74:16:c7:d6:5e:2a:c0:35:23:79:0a:
68:3b:40:25:ac:28:05:47:ac:4d:79:14:a6:93:2e:
3c:1e:21:e0:0d:84:19:cd:de:cd:e6:78:b3:1a:39:
e7:70:d5:e9:af:96:c3:95:bc:11:65:ed:fa:b1:cf:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:19:A3:D7:AA:74:EB:33:D0:E2:F8:BD:C6:4B:82:49:9E:78:CC
X509v3 Authority Key Identifier:
keyid:FE:7A:38:E6:D4:06:AA:24:FB:CC:FA:78:61:68:EA:DE:B1:05:8C:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:17:6800::/48
Signature Algorithm: sha256WithRSAEncryption
0e:08:d9:34:ec:90:5a:7a:27:49:57:51:3e:7b:41:a1:04:07:
b4:da:f5:77:23:a0:3a:8a:5f:6e:1c:60:0d:4a:71:fd:36:74:
62:cc:4f:a5:0d:de:05:40:da:aa:34:3f:53:2e:3e:fa:2f:c1:
72:ea:47:68:8d:b1:b1:da:9e:32:eb:a4:8e:48:be:7e:7b:d0:
70:81:eb:76:de:48:74:0f:6c:c8:b3:75:02:81:0e:39:4a:a4:
2e:23:5f:89:7f:24:1f:11:a0:63:a5:d0:f7:8d:dd:34:99:d8:
72:8e:f1:d5:23:0e:42:0d:73:ab:8e:47:d0:9c:07:c7:21:f4:
d2:7e:4c:0e:43:bd:e0:f5:64:b0:bc:d2:a0:c0:09:4c:36:c3:
27:1d:94:b4:9e:91:2f:56:00:5f:8f:83:d6:fa:64:81:2d:c3:
51:3a:db:e7:4b:16:a9:46:c5:cb:2a:08:e6:0a:ab:fa:66:8a:
79:57:01:de:b3:d8:39:e1:05:d1:d8:f0:64:aa:21:18:be:89:
a2:06:b3:21:1a:20:0a:13:5b:a9:5d:2c:18:79:b2:af:ec:f9:
25:8b:3c:bf:9e:f3:37:dc:87:18:b6:57:55:94:5a:71:96:5b:
90:a3:a8:42:18:53:d0:30:32:78:95:ec:ea:e6:b6:b6:52:c1:
d0:d1:ea:ff
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUYI58hT3xW+HPrJ1zh0Ec4SZaDhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3QTM4RTZENDA2QUEyNEZCQ0NGQTc4NjE2OEVBREVC
MTA1OENGRDAeFw0yNTAyMDQxODE5MzRaFw0yNjAyMDMxODI0MzRaMDMxMTAvBgNV
BAMTKEJCMDkxOUEzRDdBQTc0RUIzM0QwRTJGOEJEQzY0QjgyNDk5RTc4Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv+Bx5ELyD8LUKk0eRD1mO4U0
P84K7ABkJ1PXCvyRRe9Ck7IV7ZiMBw1rmhs4Z1ph9rUdaDSuVP1iNrTtRvpAFKK3
KdaSh8LYfBWCUXenrqhWFrmi4LOHr9msU6SErW3kPnJV/lnx3TP2A3eW6wGXOeyH
Bo3xleUWPD7PZ2+OyJGH7m4lFReyWNP5mzG78S5QDzhtMHGMDFqp9FWwm5/ZJpVs
n3ULfUtEj4ceemIv2NqB7Odj0IuK29ByYFZW2OXQOs+UImh0FsfWXirANSN5Cmg7
QCWsKAVHrE15FKaTLjweIeANhBnN3s3meLMaOedw1emvlsOVvBFl7fqxz6URAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUuwkZo9eqdOsz0OL4vcZLgkmeeMwwHwYDVR0j
BBgwFoAU/no45tQGqiT7zPp4YWjq3rEFjP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OUQ1M0VDMzU1MDlDM0U2Njk3OTkyQTZGN0IxQjEzRjBG
OTIyNjE4OUZBNDM3N0VCRkFCMDczOEE4RUU4RjA4LzAvRkU3QTM4RTZENDA2QUEy
NEZCQ0NGQTc4NjE2OEVBREVCMTA1OENGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRTdBMzhFNkQ0MDZBQTI0RkJD
Q0ZBNzg2MTY4RUFERUIxMDU4Q0ZELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjlENTNFQzM1NTA5QzNFNjY5Nzk5MkE2RjdCMUIxM0YwRjkyMjYxODlG
QTQzNzdFQkZBQjA3MzhBOEVFOEYwOC8wLzMyMzgzMDMxM2EzMTM3M2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAXaAAwDQYJKoZIhvcNAQELBQADggEBAA4I2TTskFp6J0lXUT57QaEEB7Ta9Xcj
oDqKX24cYA1Kcf02dGLMT6UN3gVA2qo0P1MuPvovwXLqR2iNsbHanjLrpI5Ivn57
0HCB63beSHQPbMizdQKBDjlKpC4jX4l/JB8RoGOl0PeN3TSZ2HKO8dUjDkINc6uO
R9CcB8ch9NJ+TA5DveD1ZLC80qDACUw2wycdlLSekS9WAF+Pg9b6ZIEtw1E62+dL
FqlGxcsqCOYKq/pminlXAd6z2DnhBdHY8GSqIRi+iaIGsyEaIAoTW6ldLBh5sq/s
+SWLPL+e8zfchxi2V1WUWnGWW5CjqEIYU9AwMniV7OrmtrZSwdDR6v8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:46 2025 by rpki-client