Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e20323639383835.roa
File: 323830313a303a3438303a3a2f34382d3438203d3e20323639383835.roa (raw, json)
Hash identifier: HNUE+D0p9DNbwykXcwffgXL6rP644OmHzQtlxO7dz7A=
Subject key identifier: B5:B0:19:57:D7:21:C7:79:EB:AF:45:FD:C1:B4:B5:B6:16:26:3E:EF
Certificate issuer: /CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
Certificate serial: 56B7CCC9E554420E2FF103CAF77386504E0AADA0
Authority key identifier: DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e20323639383835.roa
Signing time: Tue 04 Feb 2025 18:26:30 +0000
ROA not before: Tue 04 Feb 2025 18:21:30 +0000
ROA not after: Tue 03 Feb 2026 18:26:30 +0000
asID: 269885
IP address blocks: 2801:0:480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b7:cc:c9:e5:54:42:0e:2f:f1:03:ca:f7:73:86:50:4e:0a:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
Validity
Not Before: Feb 4 18:21:30 2025 GMT
Not After : Feb 3 18:26:30 2026 GMT
Subject: CN=B5B01957D721C779EBAF45FDC1B4B5B616263EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:d7:8e:2e:de:dd:9a:0c:51:c3:0b:86:33:
7c:e6:41:d7:8f:bc:05:73:36:20:83:01:d1:15:74:
c2:6f:99:81:e7:14:10:a9:e0:e4:19:b2:82:75:df:
dc:c7:97:89:4a:11:83:39:c1:c4:53:a8:34:ca:31:
c6:75:5c:a4:eb:f8:ff:f1:88:01:3c:28:7c:a1:71:
0d:55:65:cc:70:b4:6f:70:52:b7:c8:fd:57:84:45:
9c:69:dc:4c:04:ca:1b:df:83:91:f3:48:c2:4c:a3:
03:34:c1:1b:4f:c4:e0:61:e0:14:62:38:8e:f5:b8:
40:09:ff:cf:e5:04:11:67:da:0b:df:8d:de:c1:41:
2b:4e:e9:62:4b:d8:18:2a:c9:c2:9f:4a:bd:a2:53:
85:f2:86:40:96:f5:81:cc:97:ae:f9:db:56:94:4f:
5d:67:b5:6c:7f:80:cd:df:d5:aa:50:38:24:19:7d:
0a:97:33:c9:dd:09:27:c9:2e:b4:56:0d:2d:e7:7f:
18:bf:ec:c0:8a:f2:9d:dd:61:cd:24:3b:63:fd:bf:
e1:6f:f5:51:20:14:f2:ee:ae:27:85:4e:60:29:96:
bc:18:d7:a6:68:fd:6a:3e:ed:93:c4:d1:fe:6f:4f:
25:bf:de:a7:08:ec:81:e0:93:c4:00:fe:11:9b:82:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B0:19:57:D7:21:C7:79:EB:AF:45:FD:C1:B4:B5:B6:16:26:3E:EF
X509v3 Authority Key Identifier:
keyid:DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e20323639383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:480::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2c:cf:80:11:10:5f:af:0a:8f:1a:85:ea:13:0d:ac:bd:fd:
89:b0:a4:87:fa:cb:8a:64:33:0b:87:eb:e7:c6:4c:c7:a0:84:
4d:0b:40:07:8d:a4:8d:fc:44:78:e6:ea:6c:bc:04:e3:0b:d4:
93:f8:4a:aa:74:81:51:72:bb:37:e3:d5:12:49:2b:d2:c5:04:
a1:09:1d:50:61:0b:a9:4c:7c:96:d1:19:1c:3d:89:5b:1c:83:
ef:4f:84:60:41:d9:c5:af:5b:87:c1:40:74:fa:35:b1:ca:84:
71:b1:48:c6:f3:d5:d0:f2:d8:46:9f:57:94:c5:0f:ec:c5:d9:
6d:49:09:01:95:54:8c:d7:e2:c6:7a:73:47:18:1c:13:0a:1d:
96:aa:e2:cb:0b:d7:ea:a6:3a:89:e7:32:30:31:b6:2c:07:d8:
b3:dd:63:7d:36:93:aa:98:d1:5f:25:5e:27:8c:78:bd:d7:7c:
75:19:70:a3:ce:5e:f7:4c:eb:34:56:9b:be:e6:2d:0c:81:36:
be:86:a2:78:a0:ea:c7:8a:db:ea:a1:bc:d6:ca:c7:37:f5:59:
ea:fd:7b:0a:cd:99:f0:f7:d3:1f:43:df:8d:52:79:50:95:5b:
f9:17:ca:2e:6c:80:37:9e:00:40:e5:39:95:53:12:07:81:f6:
f3:d9:c7:f4
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUVrfMyeVUQg4v8QPK93OGUE4KraAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENzE3ODc3MTNFREEwNzA3QkNDRERGNDNCQzU2NTJD
MkYwRjk5ODAeFw0yNTAyMDQxODIxMzBaFw0yNjAyMDMxODI2MzBaMDMxMTAvBgNV
BAMTKEI1QjAxOTU3RDcyMUM3NzlFQkFGNDVGREMxQjRCNUI2MTYyNjNFRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3teOLt7dmgxRwwuGM3zmQdeP
vAVzNiCDAdEVdMJvmYHnFBCp4OQZsoJ139zHl4lKEYM5wcRTqDTKMcZ1XKTr+P/x
iAE8KHyhcQ1VZcxwtG9wUrfI/VeERZxp3EwEyhvfg5HzSMJMowM0wRtPxOBh4BRi
OI71uEAJ/8/lBBFn2gvfjd7BQStO6WJL2BgqycKfSr2iU4XyhkCW9YHMl67521aU
T11ntWx/gM3f1apQOCQZfQqXM8ndCSfJLrRWDS3nfxi/7MCK8p3dYc0kO2P9v+Fv
9VEgFPLurieFTmAplrwY16Zo/Wo+7ZPE0f5vTyW/3qcI7IHgk8QA/hGbguf9AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUtbAZV9chx3nrr0X9wbS1thYmPu8wHwYDVR0j
BBgwFoAU39cXh3E+2gcHvM3fQ7xWUsLw+ZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Qzc1NTg2MjQyNjA1NDI0RjY2N0EyNUJDMzgxMjE2NzI0
RDZCMEZDOTY1QzBBMDBCODA1NDVBQzJFMDlFRUMwLzAvREZENzE3ODc3MTNFREEw
NzA3QkNDRERGNDNCQzU2NTJDMkYwRjk5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkQ3MTc4NzcxM0VEQTA3MDdC
Q0NEREY0M0JDNTY1MkMyRjBGOTk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM3NTU4NjI0MjYwNTQyNEY2NjdBMjVCQzM4MTIxNjcyNEQ2QjBGQzk2
NUMwQTAwQjgwNTQ1QUMyRTA5RUVDMC8wLzMyMzgzMDMxM2EzMDNhMzQzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM5MzgzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA
AASAMA0GCSqGSIb3DQEBCwUAA4IBAQBLLM+AERBfrwqPGoXqEw2svf2JsKSH+suK
ZDMLh+vnxkzHoIRNC0AHjaSN/ER45upsvATjC9ST+EqqdIFRcrs349USSSvSxQSh
CR1QYQupTHyW0RkcPYlbHIPvT4RgQdnFr1uHwUB0+jWxyoRxsUjG89XQ8thGn1eU
xQ/sxdltSQkBlVSM1+LGenNHGBwTCh2WquLLC9fqpjqJ5zIwMbYsB9iz3WN9NpOq
mNFfJV4njHi913x1GXCjzl73TOs0Vpu+5i0MgTa+hqJ4oOrHitvqobzWysc39Vnq
/XsKzZnw99MfQ9+NUnlQlVv5F8oubIA3ngBA5TmVUxIHgfbz2cf0
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:00:48 2025 by rpki-client