Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa
File: 606081ef92f2e249d245a6d75b5c56a238362ec1.roa (raw, json)
Hash identifier: bLvA5lJ4vUSInQCun4VLjCZaHXInWYG+/ZTvksFSJBE=
Subject key identifier: 73:66:9C:92:1A:8F:41:BE:8C:DF:18:28:1D:16:47:75:03:08:CE:27
Certificate issuer: /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial: 269AA3
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa
Signing time: Fri 29 Dec 2023 18:11:18 +0000
ROA not before: Fri 29 Dec 2023 18:11:18 +0000
ROA not after: Mon 29 Dec 2025 18:11:18 +0000
asID: 265775
IP address blocks: 2803:cb20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2529955 (0x269aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Validity
Not Before: Dec 29 18:11:18 2023 GMT
Not After : Dec 29 18:11:18 2025 GMT
Subject: CN=606081ef92f2e249d245a6d75b5c56a238362ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:f7:f1:ad:1a:91:53:2c:a1:d2:84:9a:8c:
01:d2:b3:b5:45:07:1d:e7:de:d6:9c:28:f7:3b:c4:
89:24:81:10:04:fa:3d:da:b2:b0:38:a8:96:9a:8d:
48:cc:85:b9:1e:9e:49:13:9d:23:4b:c8:c7:9c:9a:
bc:54:0d:8d:ab:f1:af:e5:93:28:31:36:20:cc:85:
98:4f:48:67:17:29:40:cd:4e:f4:24:6b:66:b8:cf:
1c:a1:a7:41:91:e1:8c:89:a8:47:7d:58:f6:de:b0:
3e:e6:0a:85:07:93:ea:22:f7:c2:0c:54:14:c1:24:
25:39:65:21:ce:ab:2a:a2:33:4e:48:b3:83:41:52:
e1:de:ac:1f:d3:20:f3:73:00:19:32:34:4b:d0:9c:
1a:d2:1b:40:08:2f:fb:d1:2a:ef:68:fa:6c:6b:d1:
c3:b3:e7:26:cf:13:29:a2:d2:67:42:d9:54:16:a5:
e5:22:10:15:88:b5:d2:e8:9b:c8:bb:3b:65:f1:76:
36:46:12:65:a6:28:d6:aa:f0:a1:c4:24:22:ad:71:
42:c6:57:bd:1b:aa:8c:b7:7a:d6:d6:37:f0:12:5d:
34:07:1b:ac:e2:4c:0c:62:03:09:8a:0b:08:b2:46:
18:5e:13:be:aa:1a:07:0f:d3:5f:98:20:86:d4:95:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:9C:92:1A:8F:41:BE:8C:DF:18:28:1D:16:47:75:03:08:CE:27
X509v3 Authority Key Identifier:
keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cb20::/32
Signature Algorithm: sha256WithRSAEncryption
25:49:a3:63:bf:98:60:ad:f7:ed:81:da:e5:f8:f6:1c:b2:18:
74:62:06:24:64:43:97:52:12:56:bf:79:c4:59:f1:2e:1a:eb:
57:80:8c:c8:cb:d3:5e:87:2e:e3:51:de:10:be:f6:53:6d:ac:
2c:b2:fa:3c:73:cb:28:df:9f:46:6c:34:04:de:4f:09:67:54:
a6:73:1c:9a:dd:19:8e:62:42:79:63:f6:e5:f5:5f:ff:2c:38:
de:75:bc:0e:b9:df:14:d0:be:28:0e:0e:cd:18:e6:28:b4:06:
1e:08:1f:2f:8d:b3:18:d1:9c:29:d1:7c:37:56:2e:47:68:50:
23:78:f9:98:b7:a7:d0:db:0d:69:bd:ec:8b:8c:a5:2c:e7:62:
57:84:bb:7b:5e:35:42:7c:6b:f8:24:24:57:75:e3:76:22:04:
6f:ec:79:f6:d8:7e:be:8f:aa:2d:01:c0:62:08:a6:8d:d7:ec:
d5:60:a6:83:5f:20:81:d4:56:0c:36:57:ca:51:b2:a6:c3:8f:
49:eb:f2:b3:2b:38:6a:2f:0b:2b:23:bd:39:5f:06:ca:2b:69:
74:5e:c1:7d:e0:7a:fb:13:37:c0:00:42:d3:01:a1:f0:75:f8:
79:f2:ce:e9:67:f0:b3:e5:1c:b9:fe:82:01:f4:10:46:7c:49:
36:ec:7d:95
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJpqjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0
YTdhNDQ2YjU5MTJhNjg0ZTIzZTJjMWViMjYxOWIyNTE4NGY2MTMwHhcNMjMxMjI5
MTgxMTE4WhcNMjUxMjI5MTgxMTE4WjAzMTEwLwYDVQQDEyg2MDYwODFlZjkyZjJl
MjQ5ZDI0NWE2ZDc1YjVjNTZhMjM4MzYyZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAomH38a0akVMsodKEmowB0rO1RQcd597WnCj3O8SJJIEQBPo9
2rKwOKiWmo1IzIW5Hp5JE50jS8jHnJq8VA2Nq/Gv5ZMoMTYgzIWYT0hnFylAzU70
JGtmuM8coadBkeGMiahHfVj23rA+5gqFB5PqIvfCDFQUwSQlOWUhzqsqojNOSLOD
QVLh3qwf0yDzcwAZMjRL0Jwa0htACC/70SrvaPpsa9HDs+cmzxMpotJnQtlUFqXl
IhAViLXS6JvIuztl8XY2RhJlpijWqvChxCQirXFCxle9G6qMt3rW1jfwEl00Bxus
4kwMYgMJigsIskYYXhO+qhoHD9NfmCCG1JVRRQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHNmnJIaj0G+jN8YKB0WR3UDCM4nMB8GA1UdIwQYMBaAFJN7lBsHxK4bBRh7
noutvGGm9ExCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODRhN2E0
NDZiNTkxMmE2ODRlMjNlMmMxZWIyNjE5YjI1MTg0ZjYxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGEwZWEyZWEtMzVhMy00MzRjLTlkNTctNGIwZTQ0
NjVjOTQzLzYwNjA4MWVmOTJmMmUyNDlkMjQ1YTZkNzViNWM1NmEyMzgzNjJlYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YTBlYTJlYS0zNWEzLTQzNGMtOWQ1Ny00YjBl
NDQ2NWM5NDMvODRhN2E0NDZiNTkxMmE2ODRlMjNlMmMxZWIyNjE5YjI1MTg0ZjYx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDyyAwDQYJKoZIhvcNAQELBQADggEBACVJo2O/mGCt9+2B
2uX49hyyGHRiBiRkQ5dSEla/ecRZ8S4a61eAjMjL016HLuNR3hC+9lNtrCyy+jxz
yyjfn0ZsNATeTwlnVKZzHJrdGY5iQnlj9uX1X/8sON51vA653xTQvigODs0Y5ii0
Bh4IHy+NsxjRnCnRfDdWLkdoUCN4+Zi3p9DbDWm97IuMpSznYleEu3teNUJ8a/gk
JFd143YiBG/sefbYfr6Pqi0BwGIIpo3X7NVgpoNfIIHUVgw2V8pRsqbDj0nr8rMr
OGovCysjvTlfBsoraXRewX3gevsTN8AAQtMBofB1+Hnyzuln8LPlHLn+ggH0EEZ8
STbsfZU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:23 2025 by rpki-client