Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/323830313a303a3232303a3a2f34342d3438203d3e20323632313536.roa
File: 323830313a303a3232303a3a2f34342d3438203d3e20323632313536.roa (raw, json)
Hash identifier: ZLtJsOhavGfumwqnohBlpVdxzrvmVCFCPqAxwERRZEQ=
Subject key identifier: 6D:44:49:6F:A1:7F:6C:6E:D5:77:03:EE:DA:98:75:E7:B3:86:EE:12
Certificate issuer: /CN=98AB850008F15375E57FFE47589A85AE20920744
Certificate serial: 24E4F9F6DA2D38786F1CBA4A2E5BE4186A5901EC
Authority key identifier: 98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98AB850008F15375E57FFE47589A85AE20920744.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/323830313a303a3232303a3a2f34342d3438203d3e20323632313536.roa
Signing time: Tue 04 Feb 2025 18:00:19 +0000
ROA not before: Tue 04 Feb 2025 17:55:19 +0000
ROA not after: Tue 03 Feb 2026 18:00:19 +0000
asID: 262156
IP address blocks: 2801:0:220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e4:f9:f6:da:2d:38:78:6f:1c:ba:4a:2e:5b:e4:18:6a:59:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98AB850008F15375E57FFE47589A85AE20920744
Validity
Not Before: Feb 4 17:55:19 2025 GMT
Not After : Feb 3 18:00:19 2026 GMT
Subject: CN=6D44496FA17F6C6ED57703EEDA9875E7B386EE12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:ad:90:c1:2c:11:64:02:41:93:ec:89:de:
44:c8:7c:9b:4e:49:66:e5:18:46:7d:6f:b1:e9:28:
58:85:ca:0a:fa:dd:39:74:38:66:b7:29:8d:0e:be:
60:bd:57:22:54:0c:fd:64:94:e7:0b:43:e3:46:fa:
0a:3c:0e:fc:33:ba:ad:66:39:42:18:2b:7e:fb:dd:
b6:82:38:97:e7:3d:ca:c0:b6:7c:20:42:b5:29:91:
ea:df:60:06:75:c1:09:3a:7a:ab:d9:bd:bf:be:a7:
4f:63:80:d0:49:51:44:a0:2d:87:3a:a0:61:65:c4:
45:17:bc:a5:75:9c:71:17:92:7c:d9:76:c8:32:4d:
7b:7e:96:b7:ad:4c:d7:d0:7b:90:7a:f7:0c:64:0e:
00:a1:ac:c3:bf:9d:90:67:01:e4:6f:dd:76:45:7f:
6b:c2:31:36:c2:ce:1d:d3:d0:09:49:60:fc:ce:51:
83:93:2a:f4:98:54:70:66:47:7f:f9:f6:15:9e:72:
1d:21:f1:a5:56:62:59:ae:f8:32:63:f8:20:a3:e3:
59:b7:ac:d8:77:a5:c2:13:81:74:41:1a:d8:c4:6d:
2b:e1:77:7f:84:f2:c5:b1:7f:4c:4a:2c:00:a2:32:
aa:d0:6d:1e:15:2e:05:c6:0a:4e:43:26:fc:2c:d8:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:49:6F:A1:7F:6C:6E:D5:77:03:EE:DA:98:75:E7:B3:86:EE:12
X509v3 Authority Key Identifier:
keyid:98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/98AB850008F15375E57FFE47589A85AE20920744.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98AB850008F15375E57FFE47589A85AE20920744.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/323830313a303a3232303a3a2f34342d3438203d3e20323632313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:220::/44
Signature Algorithm: sha256WithRSAEncryption
46:1c:f3:73:40:6a:e7:73:e6:ce:dc:b9:df:68:37:37:b0:78:
47:cc:68:9a:ac:7f:55:1e:3e:a9:15:c3:2b:6b:23:26:37:8c:
90:f4:3e:cd:0c:e2:27:b3:4d:05:a1:03:bd:d9:05:10:9e:17:
63:a0:f2:63:dc:f0:cc:3c:95:73:66:33:f6:ef:ff:9b:32:71:
9c:32:67:75:20:88:c7:b2:cb:bc:47:b2:45:15:b8:51:fb:86:
90:ff:c9:ce:42:5f:53:ba:e5:d6:3c:3a:ba:81:7a:e7:da:f0:
4a:a1:94:b4:ee:57:3c:c0:5f:8d:75:7a:d9:c7:0c:3e:11:6e:
9b:b6:01:83:21:83:e4:77:33:1a:68:5b:bd:56:7d:5e:a4:c1:
40:a5:4e:16:b5:fa:eb:0e:16:c3:60:ac:05:78:46:b7:21:3e:
f8:5e:97:e4:98:8f:73:14:7e:b6:a3:cb:46:9c:47:8d:d2:01:
64:67:9b:5b:6c:4f:7f:86:d7:77:db:91:b3:f0:b8:58:1c:af:
b7:d2:72:f8:db:3c:23:4c:02:e1:45:23:0f:06:a3:af:08:d4:
d9:d5:42:b0:9b:98:db:3e:23:a8:76:d8:23:8d:45:8f:be:32:
87:21:2c:76:94:27:0d:e4:51:99:cc:a7:ef:b3:99:1c:56:c3:
2c:aa:d8:26
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUJOT59totOHhvHLpKLlvkGGpZAewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThBQjg1MDAwOEYxNTM3NUU1N0ZGRTQ3NTg5QTg1QUUy
MDkyMDc0NDAeFw0yNTAyMDQxNzU1MTlaFw0yNjAyMDMxODAwMTlaMDMxMTAvBgNV
BAMTKDZENDQ0OTZGQTE3RjZDNkVENTc3MDNFRURBOTg3NUU3QjM4NkVFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M62QwSwRZAJBk+yJ3kTIfJtO
SWblGEZ9b7HpKFiFygr63Tl0OGa3KY0OvmC9VyJUDP1klOcLQ+NG+go8Dvwzuq1m
OUIYK3773baCOJfnPcrAtnwgQrUpkerfYAZ1wQk6eqvZvb++p09jgNBJUUSgLYc6
oGFlxEUXvKV1nHEXknzZdsgyTXt+lretTNfQe5B69wxkDgChrMO/nZBnAeRv3XZF
f2vCMTbCzh3T0AlJYPzOUYOTKvSYVHBmR3/59hWech0h8aVWYlmu+DJj+CCj41m3
rNh3pcITgXRBGtjEbSvhd3+E8sWxf0xKLACiMqrQbR4VLgXGCk5DJvws2LgHAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUbURJb6F/bG7VdwPu2ph157OG7hIwHwYDVR0j
BBgwFoAUmKuFAAjxU3Xlf/5HWJqFriCSB0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTlCM0Y0REEzNURERUEwMDJFOTA0M0RERTJDQjgyOEQx
QzY0QTJFODJCMUEwREU4OTg5OTNCRjFCRTYwRDIxLzAvOThBQjg1MDAwOEYxNTM3
NUU1N0ZGRTQ3NTg5QTg1QUUyMDkyMDc0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEFCODUwMDA4RjE1Mzc1RTU3
RkZFNDc1ODlBODVBRTIwOTIwNzQ0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5QjNGNERBMzVEREVBMDAyRTkwNDNEREUyQ0I4MjhEMUM2NEEyRTgy
QjFBMERFODk4OTkzQkYxQkU2MEQyMS8wLzMyMzgzMDMxM2EzMDNhMzIzMjMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzNjMyMzEzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEA
AAIgMA0GCSqGSIb3DQEBCwUAA4IBAQBGHPNzQGrnc+bO3LnfaDc3sHhHzGiarH9V
Hj6pFcMrayMmN4yQ9D7NDOIns00FoQO92QUQnhdjoPJj3PDMPJVzZjP27/+bMnGc
Mmd1IIjHssu8R7JFFbhR+4aQ/8nOQl9TuuXWPDq6gXrn2vBKoZS07lc8wF+NdXrZ
xww+EW6btgGDIYPkdzMaaFu9Vn1epMFApU4WtfrrDhbDYKwFeEa3IT74XpfkmI9z
FH62o8tGnEeN0gFkZ5tbbE9/htd325Gz8LhYHK+30nL42zwjTALhRSMPBqOvCNTZ
1UKwm5jbPiOodtgjjUWPvjKHISx2lCcN5FGZzKfvs5kcVsMsqtgm
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:38 2025 by rpki-client