Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa
File: 323830333a643034303a3a2f33322d3438203d3e203631343937.roa (raw, json)
Hash identifier: KPCzcyChvyPeehaWnhvSTDPTdKfFfKuYkiILeOULoU8=
Subject key identifier: E6:0B:CA:80:89:84:7C:75:FA:1D:5E:40:36:FB:B4:83:38:0C:A2:0A
Certificate issuer: /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial: 7D679B6D2A04A27F573B4917E546E700578FB965
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa
Signing time: Tue 04 Feb 2025 20:05:26 +0000
ROA not before: Tue 04 Feb 2025 20:00:26 +0000
ROA not after: Tue 03 Feb 2026 20:05:26 +0000
asID: 61497
IP address blocks: 2803:d040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:67:9b:6d:2a:04:a2:7f:57:3b:49:17:e5:46:e7:00:57:8f:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Validity
Not Before: Feb 4 20:00:26 2025 GMT
Not After : Feb 3 20:05:26 2026 GMT
Subject: CN=E60BCA8089847C75FA1D5E4036FBB483380CA20A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:84:6c:ea:ab:26:fa:66:dc:b7:57:00:44:
fa:3e:d1:bf:60:86:98:aa:36:91:3b:48:e8:3b:fe:
dc:cc:57:2a:78:63:6c:77:5e:37:d6:d9:e0:f1:a0:
fb:da:78:f5:f8:6c:dd:5d:13:2a:aa:ab:06:e6:71:
37:af:34:04:bd:26:19:b4:39:f6:c9:88:cf:60:06:
5f:b2:b6:c6:ef:10:ad:11:0a:94:b0:56:a5:04:7b:
d9:e6:3c:48:9e:ff:2f:a7:b2:db:ea:3c:3b:9e:2f:
a1:e8:99:2e:09:4d:fb:22:74:92:5c:50:ce:b8:f5:
2e:7a:1b:f7:c8:c8:44:2c:0b:75:55:ac:ec:ae:3e:
62:bd:46:64:4d:fc:88:62:3a:e8:09:11:b6:2a:7b:
5d:58:9a:82:38:fa:b1:5d:a4:bb:3d:12:ef:0f:0f:
45:47:85:ad:30:52:e8:7d:53:17:00:c4:7d:36:44:
da:2b:12:5a:58:fd:1d:1b:6a:26:1b:7f:36:d0:2e:
a1:f1:bb:34:f9:56:51:c1:c6:32:8f:c8:05:d2:e5:
f1:50:ca:68:ea:87:9d:f1:a6:c5:90:9f:64:74:80:
3d:60:c7:bc:40:df:f7:2e:a4:e6:0d:e3:fd:ae:5e:
f2:ee:da:f7:32:3f:74:fe:de:b4:e9:0b:5a:42:02:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:CA:80:89:84:7C:75:FA:1D:5E:40:36:FB:B4:83:38:0C:A2:0A
X509v3 Authority Key Identifier:
keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d040::/32
Signature Algorithm: sha256WithRSAEncryption
87:4e:58:64:49:9c:56:2c:d2:ea:16:68:4f:ba:d8:46:1c:f7:
26:50:8b:56:35:86:b5:31:d5:8b:0e:30:2b:10:df:b8:22:7c:
4d:d3:ef:39:59:be:94:fa:61:f8:79:b4:fb:e8:d8:fa:5a:75:
44:ea:04:12:d7:76:f4:df:66:88:b0:24:f1:c3:92:67:83:83:
0a:1d:c2:67:f0:72:b0:1f:92:44:ed:41:d1:0f:fc:c3:25:2d:
9b:94:b8:49:83:d4:69:e7:66:79:38:53:a4:e6:c9:6c:0c:64:
54:3a:d7:48:be:e3:8d:fd:ad:60:2b:65:a0:1c:f5:0c:3f:a2:
01:a6:48:5a:9b:78:a3:c6:3b:5b:7e:73:1a:53:bb:06:45:d2:
e7:5c:7f:05:df:82:cb:3c:32:3e:2f:28:1a:b5:a7:92:f9:5d:
62:08:07:86:78:a9:c7:61:e2:32:ca:4b:03:f1:69:cf:fa:ef:
e1:51:92:f5:de:cd:cd:23:83:eb:73:3f:c0:eb:d6:ee:76:4b:
d5:57:50:fd:92:33:76:95:72:11:25:08:38:80:b2:1e:fb:8b:
ed:0b:11:f9:85:5e:27:82:a8:cd:eb:c7:1c:43:89:58:bd:64:
e5:64:bb:ee:0d:87:47:f0:ec:63:4e:e9:64:98:b1:f4:fe:c8:
36:40:30:a9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfWebbSoEon9XO0kX5UbnAFePuWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VEMTMwMkVCQzQ4NEM3QzY5RTYzN0U0NUFFRjY3NzVE
NUU2MThBOTAeFw0yNTAyMDQyMDAwMjZaFw0yNjAyMDMyMDA1MjZaMDMxMTAvBgNV
BAMTKEU2MEJDQTgwODk4NDdDNzVGQTFENUU0MDM2RkJCNDgzMzgwQ0EyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNoRs6qsm+mbct1cARPo+0b9g
hpiqNpE7SOg7/tzMVyp4Y2x3XjfW2eDxoPvaePX4bN1dEyqqqwbmcTevNAS9Jhm0
OfbJiM9gBl+ytsbvEK0RCpSwVqUEe9nmPEie/y+nstvqPDueL6HomS4JTfsidJJc
UM649S56G/fIyEQsC3VVrOyuPmK9RmRN/IhiOugJEbYqe11YmoI4+rFdpLs9Eu8P
D0VHha0wUuh9UxcAxH02RNorElpY/R0baiYbfzbQLqHxuzT5VlHBxjKPyAXS5fFQ
ymjqh53xpsWQn2R0gD1gx7xA3/cupOYN4/2uXvLu2vcyP3T+3rTpC1pCAlZjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU5gvKgImEfHX6HV5ANvu0gzgMogowHwYDVR0j
BBgwFoAUztEwLrxITHxp5jfkWu9nddXmGKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjQyOUQzRkM0ODk4QzQzRkQwQzg5RTkwNUFDQUU4M0Q1
NTNENDUyMTcxMDZBOEUwREIwNDA4OEVFNEZGMTFELzAvQ0VEMTMwMkVCQzQ4NEM3
QzY5RTYzN0U0NUFFRjY3NzVENUU2MThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUQxMzAyRUJDNDg0QzdDNjlF
NjM3RTQ1QUVGNjc3NUQ1RTYxOEE5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzY0MjlEM0ZDNDg5OEM0M0ZEMEM4OUU5MDVBQ0FFODNENTUzRDQ1MjE3
MTA2QThFMERCMDQwODhFRTRGRjExRC8wLzMyMzgzMDMzM2E2NDMwMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzNDM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9BAMA0G
CSqGSIb3DQEBCwUAA4IBAQCHTlhkSZxWLNLqFmhPuthGHPcmUItWNYa1MdWLDjAr
EN+4InxN0+85Wb6U+mH4ebT76Nj6WnVE6gQS13b032aIsCTxw5Jng4MKHcJn8HKw
H5JE7UHRD/zDJS2blLhJg9Rp52Z5OFOk5slsDGRUOtdIvuON/a1gK2WgHPUMP6IB
pkham3ijxjtbfnMaU7sGRdLnXH8F34LLPDI+LygataeS+V1iCAeGeKnHYeIyyksD
8WnP+u/hUZL13s3NI4Prcz/A69budkvVV1D9kjN2lXIRJQg4gLIe+4vtCxH5hV4n
gqjN68ccQ4lYvWTlZLvuDYdH8OxjTulkmLH0/sg2QDCp
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:55 2025 by rpki-client