Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203532323537.roa
File: 323830303a6266303a3a2f33322d3438203d3e203532323537.roa (raw, json)
Hash identifier: uqglUt0Kw7JYaDgSYgCGfbnlqukCs9IhUiUv88x0Ob0=
Subject key identifier: 1F:33:AD:CA:DD:91:E9:73:4B:A7:C3:4C:54:8B:27:B0:E0:B2:59:CD
Certificate issuer: /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial: 16B5556215FF0F770DE3A3F83E3B7821F230CECE
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203532323537.roa
Signing time: Tue 04 Feb 2025 20:01:56 +0000
ROA not before: Tue 04 Feb 2025 19:56:56 +0000
ROA not after: Tue 03 Feb 2026 20:01:56 +0000
asID: 52257
IP address blocks: 2800:bf0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b5:55:62:15:ff:0f:77:0d:e3:a3:f8:3e:3b:78:21:f2:30:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Validity
Not Before: Feb 4 19:56:56 2025 GMT
Not After : Feb 3 20:01:56 2026 GMT
Subject: CN=1F33ADCADD91E9734BA7C34C548B27B0E0B259CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:26:0c:0b:4d:79:30:e3:c0:34:02:a0:4a:
88:9f:ba:2f:2a:27:8d:91:70:c5:4f:4b:65:09:e2:
d1:6d:3e:87:09:2c:55:aa:4d:1c:36:b4:e4:32:39:
83:39:00:fd:be:1a:a5:fd:0c:1c:a3:5b:c7:a8:d4:
7c:3a:91:9b:2a:1f:0b:86:93:5c:7f:1d:07:b1:9a:
8e:eb:4f:8b:06:c1:18:50:3d:78:7a:16:5b:5f:9e:
1f:ad:4e:9a:2c:76:a2:55:36:25:ff:87:69:06:3e:
5f:61:32:13:4b:cd:8d:3b:94:44:58:a5:8c:32:b2:
95:54:f4:04:8d:c3:b5:44:3b:d8:91:ec:d9:ee:b0:
5c:54:4a:40:7b:29:63:bc:58:57:32:7d:a0:ff:ca:
19:36:a5:3c:65:1e:7b:0e:c3:fa:27:89:8b:48:ce:
18:bd:68:52:35:bb:aa:a6:99:ae:0a:28:51:b8:74:
58:1c:af:1e:32:2b:c7:53:27:00:33:5c:7a:9b:0d:
e9:ab:5b:83:81:4b:c0:50:b5:e3:f8:4a:2b:78:33:
03:a0:de:f1:16:32:57:d7:39:d3:47:b0:06:7a:2a:
3f:64:de:25:28:01:24:aa:f5:f8:6c:dc:2c:3b:d4:
28:fd:59:bd:f3:73:b5:2c:8f:9f:d1:a7:6e:df:da:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:AD:CA:DD:91:E9:73:4B:A7:C3:4C:54:8B:27:B0:E0:B2:59:CD
X509v3 Authority Key Identifier:
keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203532323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:18:b6:3a:e6:87:8e:39:10:2c:5b:ff:1c:cc:d4:43:22:7b:
ef:58:9f:27:23:99:da:7e:23:cb:82:7a:c7:ed:9a:54:cb:87:
bb:8f:27:ba:5b:4a:17:e6:04:44:37:c7:e3:69:a9:04:aa:dd:
64:be:f7:36:ee:d2:44:28:32:d7:ce:b1:19:a5:32:12:60:64:
a8:0d:eb:7b:24:78:5c:45:12:31:a7:de:49:e5:ac:67:5c:5c:
2c:b2:26:b5:67:71:4a:73:cc:55:d2:86:27:09:d6:69:0f:64:
ba:b8:55:c8:1d:d7:6f:de:3d:d0:1d:32:69:95:35:6d:30:ab:
cd:59:84:8c:57:d0:20:0f:71:d1:ca:51:35:e3:9b:34:94:88:
36:45:8e:2e:13:db:1d:4d:56:a3:04:1d:4c:a5:2b:84:a0:07:
e6:dd:70:74:e4:7c:dc:e1:82:d2:06:9c:0a:cb:8b:a6:04:19:
c0:64:b2:97:b1:6e:3f:4f:41:1c:e2:dd:f2:6c:e9:dc:bd:86:
fc:ea:08:4f:28:36:94:0d:a2:4d:78:76:6f:2e:a9:b1:bb:c3:
41:04:6a:fa:02:78:a6:e5:fd:63:71:ea:8f:6c:21:6f:93:5a:
19:e9:7d:c6:b5:22:83:67:15:10:80:37:09:9b:b1:0b:54:48:
5d:3c:20:da
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFrVVYhX/D3cN46P4Pjt4IfIwzs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5RTUwQzY3QUM2NzZGOUM4NDA0QUMzQTc0NkNDNEI3
MjQ0ODNFMzAeFw0yNTAyMDQxOTU2NTZaFw0yNjAyMDMyMDAxNTZaMDMxMTAvBgNV
BAMTKDFGMzNBRENBREQ5MUU5NzM0QkE3QzM0QzU0OEIyN0IwRTBCMjU5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1yYMC015MOPANAKgSoifui8q
J42RcMVPS2UJ4tFtPocJLFWqTRw2tOQyOYM5AP2+GqX9DByjW8eo1Hw6kZsqHwuG
k1x/HQexmo7rT4sGwRhQPXh6Fltfnh+tTposdqJVNiX/h2kGPl9hMhNLzY07lERY
pYwyspVU9ASNw7VEO9iR7NnusFxUSkB7KWO8WFcyfaD/yhk2pTxlHnsOw/oniYtI
zhi9aFI1u6qmma4KKFG4dFgcrx4yK8dTJwAzXHqbDemrW4OBS8BQteP4Sit4MwOg
3vEWMlfXOdNHsAZ6Kj9k3iUoASSq9fhs3Cw71Cj9Wb3zc7Usj5/Rp27f2tzbAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUHzOtyt2R6XNLp8NMVIsnsOCyWc0wHwYDVR0j
BBgwFoAUY55QxnrGdvnIQErDp0bMS3JEg+MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTdFOUM2RjQ5RDM3Q0FDNEU2OThBNENFQTdCMUQwNjlD
NkEyNjNCM0EyQjQxNEYxRTE4NzAzQzAzMEE0RkM5LzAvNjM5RTUwQzY3QUM2NzZG
OUM4NDA0QUMzQTc0NkNDNEI3MjQ0ODNFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzlFNTBDNjdBQzY3NkY5Qzg0
MDRBQzNBNzQ2Q0M0QjcyNDQ4M0UzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEE3RTlDNkY0OUQzN0NBQzRFNjk4QTRDRUE3QjFEMDY5QzZBMjYzQjNB
MkI0MTRGMUUxODcwM0MwMzBBNEZDOS8wLzMyMzgzMDMwM2E2MjY2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNTMyMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAL8DANBgkq
hkiG9w0BAQsFAAOCAQEAGxi2OuaHjjkQLFv/HMzUQyJ771ifJyOZ2n4jy4J6x+2a
VMuHu48nultKF+YERDfH42mpBKrdZL73Nu7SRCgy186xGaUyEmBkqA3reyR4XEUS
MafeSeWsZ1xcLLImtWdxSnPMVdKGJwnWaQ9kurhVyB3Xb9490B0yaZU1bTCrzVmE
jFfQIA9x0cpRNeObNJSINkWOLhPbHU1WowQdTKUrhKAH5t1wdOR83OGC0gacCsuL
pgQZwGSyl7FuP09BHOLd8mzp3L2G/OoITyg2lA2iTXh2by6psbvDQQRq+gJ4puX9
Y3Hqj2whb5NaGel9xrUig2cVEIA3CZuxC1RIXTwg2g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:21 2025 by rpki-client