Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
File: 323830333a326632303a3a2f33322d3634203d3e20323636373639.roa (raw, json)
Hash identifier: w6NIe7TSqos9xcUfSI4KcXdCpfU3Qx7fndCOjqUuqWo=
Subject key identifier: 54:87:33:D1:7D:D2:76:E3:EB:46:AB:67:F8:C0:F8:22:AB:69:AD:00
Certificate issuer: /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial: 1CDC10B14645952D5F5ECBD7539722E826BEE187
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
Signing time: Tue 04 Feb 2025 18:26:15 +0000
ROA not before: Tue 04 Feb 2025 18:21:15 +0000
ROA not after: Tue 03 Feb 2026 18:26:15 +0000
asID: 266769
IP address blocks: 2803:2f20::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dc:10:b1:46:45:95:2d:5f:5e:cb:d7:53:97:22:e8:26:be:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Validity
Not Before: Feb 4 18:21:15 2025 GMT
Not After : Feb 3 18:26:15 2026 GMT
Subject: CN=548733D17DD276E3EB46AB67F8C0F822AB69AD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:71:1f:38:18:35:b6:c3:10:c1:48:39:87:
63:1d:aa:89:10:a5:55:2b:c1:f8:df:57:ce:d8:d6:
30:30:9b:a4:f3:9e:4c:e0:c7:ea:6a:d4:4b:6d:f4:
b5:e8:b5:82:59:9f:6f:de:21:7d:cf:1e:ab:f5:cc:
52:43:e8:9b:3f:b2:73:87:85:95:9d:bc:f4:7a:8f:
53:6e:63:fe:bd:b2:4f:6a:9d:1c:66:59:2f:fc:69:
f3:ec:48:1d:1f:5d:d7:73:65:cc:19:30:01:96:9e:
90:86:9a:e4:8e:46:0c:52:26:e4:56:ab:08:13:a9:
a8:27:28:2d:50:bd:88:76:dd:84:7f:ca:8a:77:ed:
b6:3d:01:5b:1c:a6:16:a2:37:a9:29:c3:e6:68:11:
48:b3:fd:10:91:5f:16:6e:a7:3f:fe:56:b1:b1:69:
b2:f0:fc:f7:9b:0c:5d:5e:6f:4a:da:c0:c6:0c:68:
91:d9:01:34:e2:d8:ca:43:85:91:0e:a5:dc:fa:5b:
6e:5b:2c:a6:92:78:23:a8:52:27:c8:da:8c:46:35:
d1:6c:33:76:a0:3c:ac:f8:97:ec:f0:b4:ef:85:e8:
40:25:cf:14:df:09:73:2c:81:42:e6:84:a2:9f:04:
8e:ef:a1:d5:18:77:12:d1:bb:31:0b:bc:92:b9:b2:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:33:D1:7D:D2:76:E3:EB:46:AB:67:F8:C0:F8:22:AB:69:AD:00
X509v3 Authority Key Identifier:
keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2f20::/32
Signature Algorithm: sha256WithRSAEncryption
97:c4:fe:82:4d:c2:f7:2a:44:de:77:3f:f8:0d:e9:ad:69:32:
2b:f8:80:9b:4c:5a:e0:d7:7f:07:65:bd:fa:4e:fc:eb:4f:7c:
c4:d4:b0:8d:91:de:5a:20:57:50:97:fa:31:4e:a7:26:31:54:
dc:bc:ca:46:e1:e2:ef:f0:48:38:7a:2d:57:b4:ea:60:fd:89:
96:5d:f6:26:4c:03:e1:da:6d:94:58:d9:70:e3:0d:8a:1e:9f:
67:0b:fa:d3:84:7e:c2:d9:ad:fa:16:01:37:b6:4b:0a:a6:82:
1c:f7:6c:d3:89:e6:e2:8a:13:51:07:9d:a0:d3:c2:55:44:55:
0b:4a:c6:87:16:c2:06:04:2b:f4:8c:30:74:a0:69:e9:8d:b6:
f9:ad:3a:60:b8:ec:ad:b7:07:56:96:92:11:35:3a:6a:89:ec:
20:ca:04:6c:cb:34:f3:10:05:2f:5b:ab:df:6a:9a:bb:91:ac:
25:8f:eb:74:5a:e2:2a:6a:20:02:92:c6:d9:48:dd:77:0a:c0:
13:1b:37:12:7f:31:6f:dc:a0:4d:90:3f:8f:f4:98:66:ad:c0:
7a:c3:7a:08:91:0f:59:64:4e:b4:eb:41:d8:e2:26:c6:58:46:
b8:b6:8e:d2:65:f3:f1:4c:47:97:79:f0:fc:69:e9:2c:5e:9f:
56:fb:72:f3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHNwQsUZFlS1fXsvXU5ci6Ca+4YcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4OTJCRTJCRjQ4MENFQzA0NEI0NEJFOTVGQjIxRjE2
QkI0NzM0QzAeFw0yNTAyMDQxODIxMTVaFw0yNjAyMDMxODI2MTVaMDMxMTAvBgNV
BAMTKDU0ODczM0QxN0REMjc2RTNFQjQ2QUI2N0Y4QzBGODIyQUI2OUFEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDAnEfOBg1tsMQwUg5h2MdqokQ
pVUrwfjfV87Y1jAwm6Tznkzgx+pq1Ett9LXotYJZn2/eIX3PHqv1zFJD6Js/snOH
hZWdvPR6j1NuY/69sk9qnRxmWS/8afPsSB0fXddzZcwZMAGWnpCGmuSORgxSJuRW
qwgTqagnKC1QvYh23YR/yop37bY9AVscphaiN6kpw+ZoEUiz/RCRXxZupz/+VrGx
abLw/PebDF1eb0rawMYMaJHZATTi2MpDhZEOpdz6W25bLKaSeCOoUifI2oxGNdFs
M3agPKz4l+zwtO+F6EAlzxTfCXMsgULmhKKfBI7vodUYdxLRuzELvJK5sqAfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVIcz0X3SduPrRqtn+MD4IqtprQAwHwYDVR0j
BBgwFoAUH4kr4r9IDOwES0S+lfsh8Wu0c0wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QzNBNDkwNzkxOTM2REYyQTA1QzhEMjVCMUU3MzlFQTk0
MTUyOTRCMkYwOTNBRkEyQzc0NjA3NjYxQjUzM0ZBLzAvMUY4OTJCRTJCRjQ4MENF
QzA0NEI0NEJFOTVGQjIxRjE2QkI0NzM0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjg5MkJFMkJGNDgwQ0VDMDQ0
QjQ0QkU5NUZCMjFGMTZCQjQ3MzRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEMzQTQ5MDc5MTkzNkRGMkEwNUM4RDI1QjFFNzM5RUE5NDE1Mjk0QjJG
MDkzQUZBMkM3NDYwNzY2MUI1MzNGQS8wLzMyMzgzMDMzM2EzMjY2MzIzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNjM3MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLyAw
DQYJKoZIhvcNAQELBQADggEBAJfE/oJNwvcqRN53P/gN6a1pMiv4gJtMWuDXfwdl
vfpO/OtPfMTUsI2R3logV1CX+jFOpyYxVNy8ykbh4u/wSDh6LVe06mD9iZZd9iZM
A+HabZRY2XDjDYoen2cL+tOEfsLZrfoWATe2Swqmghz3bNOJ5uKKE1EHnaDTwlVE
VQtKxocWwgYEK/SMMHSgaemNtvmtOmC47K23B1aWkhE1OmqJ7CDKBGzLNPMQBS9b
q99qmruRrCWP63Ra4ipqIAKSxtlI3XcKwBMbNxJ/MW/coE2QP4/0mGatwHrDegiR
D1lkTrTrQdjiJsZYRri2jtJl8/FMR5d58Pxp6Sxen1b7cvM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:00 2025 by rpki-client