Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa
File: 323830363a3333663a3a2f33322d3332203d3e20323730313538.roa (raw, json)
Hash identifier: wlDQOWpK+lQaCGPT1aJIhzJUFYpNmfG4hytPIq5JphI=
Subject key identifier: 81:B2:A2:3D:A8:9A:D5:1B:17:7D:CC:D9:01:0E:D0:ED:63:40:95:D8
Certificate issuer: /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial: 40DC89FC05FD4EC40FE0C0DB0115CB4A5C107AA9
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa
Signing time: Tue 04 Feb 2025 18:22:26 +0000
ROA not before: Tue 04 Feb 2025 18:17:26 +0000
ROA not after: Tue 03 Feb 2026 18:22:26 +0000
asID: 270158
IP address blocks: 2806:33f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dc:89:fc:05:fd:4e:c4:0f:e0:c0:db:01:15:cb:4a:5c:10:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
Validity
Not Before: Feb 4 18:17:26 2025 GMT
Not After : Feb 3 18:22:26 2026 GMT
Subject: CN=81B2A23DA89AD51B177DCCD9010ED0ED634095D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:61:16:a5:a8:23:0d:91:99:ef:f1:22:3d:
16:bf:ad:50:1c:f5:7a:9b:6f:ca:f4:dd:f7:21:31:
43:11:2a:a2:6e:5b:b8:79:5e:73:bb:c9:d0:fa:12:
68:bc:6d:00:6d:8d:ed:00:6c:f5:90:f8:f0:b3:26:
d1:03:33:f2:c5:aa:66:5a:3e:67:5b:bc:e9:76:08:
d1:db:fd:94:a4:75:1b:b2:e0:15:66:b8:88:f9:7f:
3e:e6:2b:40:5a:6d:f5:87:46:1d:a8:13:1d:0c:40:
8c:9d:a5:c3:21:bc:83:54:f6:0e:8e:5c:a0:71:3b:
75:b3:9c:ea:d0:e8:aa:fd:67:d5:d2:30:ad:a3:04:
bb:49:9d:ca:78:9d:d8:32:79:32:0e:2d:56:48:44:
09:a7:00:d6:54:2a:09:a5:5d:05:b4:f5:61:85:20:
19:d5:7c:9f:a6:19:21:45:ae:54:01:7b:ba:1f:95:
dd:7a:da:03:96:21:8f:51:05:31:de:ff:ee:30:15:
46:59:4b:ad:e6:74:00:95:d3:d7:6b:ac:80:f6:27:
6a:2e:bc:8d:46:41:48:e1:ab:90:5f:a8:6c:0d:ae:
2b:f0:3b:57:42:a9:85:36:c9:77:e5:56:ed:89:f5:
0b:df:22:13:59:b2:6b:d7:b2:c1:c1:15:0a:87:53:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:A2:3D:A8:9A:D5:1B:17:7D:CC:D9:01:0E:D0:ED:63:40:95:D8
X509v3 Authority Key Identifier:
keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:33f::/32
Signature Algorithm: sha256WithRSAEncryption
37:e9:10:11:3c:c5:fe:be:0d:50:fd:71:9d:1d:42:18:a5:50:
1f:99:fd:75:e7:52:dc:d3:b9:e2:1d:7c:fd:25:f9:7e:94:72:
6c:da:37:43:04:43:b0:ce:c4:16:f2:26:6e:39:ba:01:f0:28:
38:73:d7:df:bc:0d:e4:83:9a:f5:cc:0a:a7:a5:93:1a:23:6a:
0c:fe:fb:c0:21:3d:60:6e:b7:59:e6:31:57:ad:ba:09:ee:8a:
78:45:8d:7f:63:e3:73:aa:9b:49:fa:26:50:be:8c:66:87:cf:
3f:d4:0c:b3:5b:22:71:2f:a4:25:42:e7:b8:21:37:a8:cf:50:
63:9d:60:28:b0:fa:75:11:2a:27:34:c7:39:2e:40:dc:ae:55:
8f:d6:d0:60:f1:5c:7f:fa:29:df:80:30:28:45:1e:33:f7:cc:
2d:d0:04:1f:72:f9:89:57:2f:09:b0:10:25:27:74:60:f2:90:
78:23:15:d2:1a:d9:bc:ab:1b:2c:5c:51:de:d5:28:67:42:fb:
b8:54:4a:c2:9a:2f:67:3a:f8:09:d0:95:da:62:44:24:8d:6b:
8a:3f:48:f5:8c:48:da:e3:68:17:ea:78:d0:d8:db:1e:ed:9d:
cd:6c:cd:cb:48:82:9e:c3:cb:fc:b0:3b:0d:6c:a3:5f:29:38:
19:ff:9c:a0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQNyJ/AX9TsQP4MDbARXLSlwQeqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1M0Y1NTY1NDc5QjdDN0IwNEEyNzk1NTQ0NDU4OTMy
RUMwNkY2QzAeFw0yNTAyMDQxODE3MjZaFw0yNjAyMDMxODIyMjZaMDMxMTAvBgNV
BAMTKDgxQjJBMjNEQTg5QUQ1MUIxNzdEQ0NEOTAxMEVEMEVENjM0MDk1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfLWEWpagjDZGZ7/EiPRa/rVAc
9Xqbb8r03fchMUMRKqJuW7h5XnO7ydD6Emi8bQBtje0AbPWQ+PCzJtEDM/LFqmZa
PmdbvOl2CNHb/ZSkdRuy4BVmuIj5fz7mK0BabfWHRh2oEx0MQIydpcMhvINU9g6O
XKBxO3WznOrQ6Kr9Z9XSMK2jBLtJncp4ndgyeTIOLVZIRAmnANZUKgmlXQW09WGF
IBnVfJ+mGSFFrlQBe7ofld162gOWIY9RBTHe/+4wFUZZS63mdACV09drrID2J2ou
vI1GQUjhq5BfqGwNrivwO1dCqYU2yXflVu2J9QvfIhNZsmvXssHBFQqHU55rAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUgbKiPaia1RsXfczZAQ7Q7WNAldgwHwYDVR0j
BBgwFoAUElP1VlR5t8ewSieVVERYky7Ab2wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OUMxOTJBQTZCQ0I1RjU5RjRBMzcwMTExODk3RTBEMkYw
QzE1QUQ1RjlCQzIxN0M2MjU1MzU0QUU3M0MxOTQ0LzAvMTI1M0Y1NTY1NDc5QjdD
N0IwNEEyNzk1NTQ0NDU4OTMyRUMwNkY2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjUzRjU1NjU0NzlCN0M3QjA0
QTI3OTU1NDQ0NTg5MzJFQzA2RjZDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODlDMTkyQUE2QkNCNUY1OUY0QTM3MDExMTg5N0UwRDJGMEMxNUFENUY5
QkMyMTdDNjI1NTM1NEFFNzNDMTk0NC8wLzMyMzgzMDM2M2EzMzMzNjYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgM/MA0G
CSqGSIb3DQEBCwUAA4IBAQA36RARPMX+vg1Q/XGdHUIYpVAfmf1151Lc07niHXz9
Jfl+lHJs2jdDBEOwzsQW8iZuOboB8Cg4c9ffvA3kg5r1zAqnpZMaI2oM/vvAIT1g
brdZ5jFXrboJ7op4RY1/Y+NzqptJ+iZQvoxmh88/1AyzWyJxL6QlQue4ITeoz1Bj
nWAosPp1ESonNMc5LkDcrlWP1tBg8Vx/+infgDAoRR4z98wt0AQfcvmJVy8JsBAl
J3Rg8pB4IxXSGtm8qxssXFHe1ShnQvu4VErCmi9nOvgJ0JXaYkQkjWuKP0j1jEja
42gX6njQ2Nse7Z3NbM3LSIKew8v8sDsNbKNfKTgZ/5yg
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:10 2025 by rpki-client