Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa
File: 323830333a613539303a3a2f33322d3332203d3e20323732393730.roa (raw, json)
Hash identifier: fqcDOAzN9oPUe6clYREs4m38QHefSGzVCZBZ779ZczY=
Subject key identifier: 24:8F:22:CF:A6:40:C9:92:E9:6A:18:61:D4:70:87:86:D8:EE:0E:C1
Certificate issuer: /CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
Certificate serial: 548DE90A51D83477C799604D8695F17BFDF39247
Authority key identifier: 18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa
Signing time: Tue 04 Feb 2025 18:27:28 +0000
ROA not before: Tue 04 Feb 2025 18:22:28 +0000
ROA not after: Tue 03 Feb 2026 18:27:28 +0000
asID: 272970
IP address blocks: 2803:a590::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8d:e9:0a:51:d8:34:77:c7:99:60:4d:86:95:f1:7b:fd:f3:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
Validity
Not Before: Feb 4 18:22:28 2025 GMT
Not After : Feb 3 18:27:28 2026 GMT
Subject: CN=248F22CFA640C992E96A1861D4708786D8EE0EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:61:7c:00:28:25:34:ee:e0:e8:ef:51:79:
f4:5f:8c:49:0d:dc:47:7b:91:ca:9a:09:c6:4e:92:
e4:cb:23:05:d4:b9:a2:3b:cb:07:db:35:44:83:ae:
3f:bd:3b:89:bc:6b:bd:aa:36:12:b2:e6:ac:30:52:
0f:ab:a2:4c:63:be:79:2e:3d:ef:53:6e:b8:4b:71:
de:54:ca:a5:39:b7:6a:57:52:24:70:f0:02:8f:37:
04:d0:95:89:9e:40:6d:a8:a4:bc:d6:5e:e3:7d:af:
0b:de:e6:24:ab:f7:60:94:de:0c:a6:41:fa:66:ae:
bc:22:90:e8:2a:51:b0:14:8e:f1:64:be:0c:19:e1:
73:d8:80:57:1c:14:c8:a7:4d:e5:8a:d5:d9:f7:1b:
3e:84:c3:26:68:2c:3b:d8:4a:b3:97:f1:04:5e:e2:
43:ac:43:8e:1f:98:82:d2:9b:a8:26:07:ec:0d:cd:
d0:31:d0:cf:a3:88:b9:a9:c2:ce:a4:02:ae:91:d5:
ec:a1:03:3a:d1:c8:bf:a6:ed:04:33:b5:1c:7c:ef:
26:d7:ae:20:bb:e5:92:b0:a9:74:ed:1e:da:5e:11:
49:ec:21:eb:cc:b3:15:0c:82:a0:57:da:3b:b8:a8:
58:6d:21:7e:e5:27:d2:26:bc:a2:23:28:f1:9c:55:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:22:CF:A6:40:C9:92:E9:6A:18:61:D4:70:87:86:D8:EE:0E:C1
X509v3 Authority Key Identifier:
keyid:18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/323830333a613539303a3a2f33322d3332203d3e20323732393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a590::/32
Signature Algorithm: sha256WithRSAEncryption
0b:39:7d:db:30:80:d3:05:e2:02:d0:ea:45:73:8e:37:ff:d6:
0c:b9:94:e1:79:d7:6c:da:87:e9:ce:7d:18:0e:64:d1:7d:95:
3a:94:e9:c3:8b:38:2e:0c:f1:e6:b0:ef:0f:dc:01:91:91:d8:
86:9b:a7:1c:01:0e:c3:9d:19:e7:36:dd:8b:ca:f2:ff:c2:32:
2f:fd:ba:8a:7a:03:1c:7d:1b:9b:d7:6a:2b:b8:40:72:4a:79:
1d:50:c5:31:8f:26:9b:d3:c8:ac:83:88:ee:e9:5a:5b:41:11:
29:33:96:dd:5c:50:6e:c8:fc:19:96:9a:ac:1c:bd:71:6f:1a:
b9:ab:f6:8e:ce:9d:1c:01:3b:06:33:69:5b:cc:fa:e7:97:51:
5a:43:cd:26:2e:f1:e5:ab:ee:f4:cc:f7:e4:93:58:77:7e:87:
a2:c4:f2:b2:0e:a6:22:2d:ef:e7:00:ed:73:0e:a2:82:d8:f2:
6d:05:ec:04:17:e2:28:78:13:43:20:35:5e:78:d3:74:84:68:
19:92:5e:c9:c6:2c:c9:31:f5:bb:32:47:0b:e0:f2:5e:ec:f5:
d7:d3:5d:14:3a:a2:dc:06:54:30:7b:51:2f:93:56:a7:17:2c:
de:25:4e:ec:a1:5c:f3:ce:a1:05:d2:99:51:e2:45:6a:21:87:
b9:b4:41:8d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVI3pClHYNHfHmWBNhpXxe/3zkkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgyMUQzRUFBMUY5NkI2ODQ0QTg4Q0NEOTBEMUJDMzI3
RjQ1NEE3MjAeFw0yNTAyMDQxODIyMjhaFw0yNjAyMDMxODI3MjhaMDMxMTAvBgNV
BAMTKDI0OEYyMkNGQTY0MEM5OTJFOTZBMTg2MUQ0NzA4Nzg2RDhFRTBFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34WF8ACglNO7g6O9RefRfjEkN
3Ed7kcqaCcZOkuTLIwXUuaI7ywfbNUSDrj+9O4m8a72qNhKy5qwwUg+rokxjvnku
Pe9TbrhLcd5UyqU5t2pXUiRw8AKPNwTQlYmeQG2opLzWXuN9rwve5iSr92CU3gym
QfpmrrwikOgqUbAUjvFkvgwZ4XPYgFccFMinTeWK1dn3Gz6EwyZoLDvYSrOX8QRe
4kOsQ44fmILSm6gmB+wNzdAx0M+jiLmpws6kAq6R1eyhAzrRyL+m7QQztRx87ybX
riC75ZKwqXTtHtpeEUnsIevMsxUMgqBX2ju4qFhtIX7lJ9ImvKIjKPGcVcvbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJI8iz6ZAyZLpahhh1HCHhtjuDsEwHwYDVR0j
BBgwFoAUGCHT6qH5a2hEqIzNkNG8Mn9FSnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTdEMzJBQzBBNkUyOUMzOENDQzlENTM3NEVDNjQ0N0ZB
OThGREMwQkZGRURGNzY3MzY3MUEwQkY2Q0FBMjI2LzAvMTgyMUQzRUFBMUY5NkI2
ODQ0QTg4Q0NEOTBEMUJDMzI3RjQ1NEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODIxRDNFQUExRjk2QjY4NDRB
ODhDQ0Q5MEQxQkMzMjdGNDU0QTcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEE3RDMyQUMwQTZFMjlDMzhDQ0M5RDUzNzRFQzY0NDdGQTk4RkRDMEJG
RkVERjc2NzM2NzFBMEJGNkNBQTIyNi8wLzMyMzgzMDMzM2E2MTM1MzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjM5MzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpZAw
DQYJKoZIhvcNAQELBQADggEBAAs5fdswgNMF4gLQ6kVzjjf/1gy5lOF512zah+nO
fRgOZNF9lTqU6cOLOC4M8eaw7w/cAZGR2IabpxwBDsOdGec23YvK8v/CMi/9uop6
Axx9G5vXaiu4QHJKeR1QxTGPJpvTyKyDiO7pWltBESkzlt1cUG7I/BmWmqwcvXFv
Grmr9o7OnRwBOwYzaVvM+ueXUVpDzSYu8eWr7vTM9+STWHd+h6LE8rIOpiIt7+cA
7XMOooLY8m0F7AQX4ih4E0MgNV5403SEaBmSXsnGLMkx9bsyRwvg8l7s9dfTXRQ6
otwGVDB7US+TVqcXLN4lTuyhXPPOoQXSmVHiRWohh7m0QY0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:58 2025 by rpki-client