Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: 3ivgRwaioqjaTL6PlzioLxWs+UTARiM8IdfLDX0mDV0=
Subject key identifier: E3:88:68:72:4C:16:4A:F5:D1:A7:89:12:8D:FE:D8:93:B7:43:EF:1E
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 4CFC6FAD3381F17E14315E263C2C515969AD3E3B
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 04 Feb 2025 18:25:04 +0000
ROA not before: Tue 04 Feb 2025 18:20:04 +0000
ROA not after: Tue 03 Feb 2026 18:25:04 +0000
asID: 27818
IP address blocks: 2803:3380:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fc:6f:ad:33:81:f1:7e:14:31:5e:26:3c:2c:51:59:69:ad:3e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Feb 4 18:20:04 2025 GMT
Not After : Feb 3 18:25:04 2026 GMT
Subject: CN=E38868724C164AF5D1A789128DFED893B743EF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:5c:79:70:5c:6a:eb:3f:5c:37:af:c1:68:
a4:14:16:70:1d:0e:12:47:40:19:d0:9f:66:2c:59:
e1:a2:e4:52:52:2a:43:eb:ff:c5:ca:20:1b:bf:e0:
e0:f2:9f:1f:9b:7d:85:7c:91:0c:fe:49:f8:f7:04:
45:0b:70:d4:f9:17:62:23:19:29:9e:47:f4:67:2d:
25:3e:2f:81:55:b8:54:d1:51:ed:fa:5d:8e:07:61:
ae:76:74:17:7b:bc:e9:8e:54:c0:50:f8:07:59:98:
5f:1e:29:96:1b:87:cc:e7:f8:8a:4d:4f:21:b2:5c:
ba:15:8e:81:98:2b:a1:95:73:e5:7f:3f:ef:c3:24:
a1:46:15:bd:04:a9:38:57:23:9d:8b:68:60:30:8a:
5b:12:3f:61:3d:fa:4d:db:1f:36:ce:5c:92:80:8c:
f5:a7:5e:48:ea:41:46:c6:5f:17:36:8e:a0:62:f8:
f0:e4:45:47:4b:a3:ac:0a:6d:d2:0b:21:e7:0d:a0:
35:46:84:82:8d:91:1b:8d:97:42:6e:50:e3:ca:76:
05:a5:2e:37:cc:5c:97:48:9e:59:c3:d6:f7:e7:95:
82:db:19:15:c5:b0:51:4a:37:5d:1f:09:d0:02:45:
53:5e:75:37:3a:c4:79:be:95:f3:54:31:8d:61:b7:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:68:72:4C:16:4A:F5:D1:A7:89:12:8D:FE:D8:93:B7:43:EF:1E
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:b000::/36
Signature Algorithm: sha256WithRSAEncryption
05:d4:f3:8f:0b:73:7d:be:32:77:96:8f:06:07:03:7f:4f:62:
09:56:fc:c9:f0:be:d5:7e:0d:ea:4a:65:1a:11:91:79:b4:f8:
a9:9e:48:f1:36:2c:27:5b:52:5a:ae:1b:e9:db:3f:15:b4:4e:
ba:26:29:41:0b:83:f2:25:b7:04:a9:22:a4:db:4e:56:35:00:
0d:5c:ce:4a:f3:60:79:4f:04:ae:de:0c:92:02:98:25:c9:22:
93:2e:50:13:30:8e:a6:a7:db:aa:a9:7b:13:ff:be:3b:94:81:
42:f9:73:e2:c0:64:62:3c:e9:56:bf:75:86:b7:94:52:cc:77:
11:09:44:75:9e:c3:57:ce:91:b3:d7:40:22:ae:73:0f:0d:5b:
8d:9b:2f:b4:52:a4:cb:c3:43:67:0b:34:eb:b0:f3:1b:fc:90:
39:ed:19:bc:e8:4e:99:50:38:69:24:97:23:98:5d:a9:23:69:
64:71:5e:96:71:11:a2:f9:9c:09:6d:eb:17:1f:9e:b9:ca:32:
02:f6:72:74:0e:4f:78:ca:69:7f:79:82:40:cc:f2:f2:08:5a:
9a:32:09:27:40:17:89:3d:ab:c5:0d:03:c8:1e:9d:4f:eb:fb:
b3:4e:1d:fb:24:35:e6:8b:36:6f:b8:48:ae:f2:76:1f:c7:ac:
27:7f:fb:3e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUTPxvrTOB8X4UMV4mPCxRWWmtPjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNTAyMDQxODIwMDRaFw0yNjAyMDMxODI1MDRaMDMxMTAvBgNV
BAMTKEUzODg2ODcyNEMxNjRBRjVEMUE3ODkxMjhERkVEODkzQjc0M0VGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMV1x5cFxq6z9cN6/BaKQUFnAd
DhJHQBnQn2YsWeGi5FJSKkPr/8XKIBu/4ODynx+bfYV8kQz+Sfj3BEULcNT5F2Ij
GSmeR/RnLSU+L4FVuFTRUe36XY4HYa52dBd7vOmOVMBQ+AdZmF8eKZYbh8zn+IpN
TyGyXLoVjoGYK6GVc+V/P+/DJKFGFb0EqThXI52LaGAwilsSP2E9+k3bHzbOXJKA
jPWnXkjqQUbGXxc2jqBi+PDkRUdLo6wKbdILIecNoDVGhIKNkRuNl0JuUOPKdgWl
LjfMXJdInlnD1vfnlYLbGRXFsFFKN10fCdACRVNedTc6xHm+lfNUMY1htxk/AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU44hockwWSvXRp4kSjf7Yk7dD7x4wHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhNjIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgLAwDQYJKoZIhvcNAQELBQADggEBAAXU848Lc32+MneWjwYHA39PYglW
/MnwvtV+DepKZRoRkXm0+KmeSPE2LCdbUlquG+nbPxW0TromKUELg/IltwSpIqTb
TlY1AA1czkrzYHlPBK7eDJICmCXJIpMuUBMwjqan26qpexP/vjuUgUL5c+LAZGI8
6Va/dYa3lFLMdxEJRHWew1fOkbPXQCKucw8NW42bL7RSpMvDQ2cLNOuw8xv8kDnt
GbzoTplQOGkklyOYXakjaWRxXpZxEaL5nAlt6xcfnrnKMgL2cnQOT3jKaX95gkDM
8vIIWpoyCSdAF4k9q8UNA8genU/r+7NOHfskNeaLNm+4SK7ydh/HrCd/+z4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:52 2025 by rpki-client