Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa
File: 323830333a326164303a3a2f33322d3438203d3e20323734303639.roa (raw, json)
Hash identifier: ojcOT696xUSzm4i+WKkdWNCo5opQ5pu4oanqtEUXO+c=
Subject key identifier: 60:FE:12:BF:AC:C0:86:FB:F4:8E:1A:6F:38:0B:C5:AC:8A:EE:01:DD
Certificate issuer: /CN=8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B
Certificate serial: 6F53660BFC0E14719A44250938D4E31AD4213EA2
Authority key identifier: 8B:9D:DD:50:E4:E6:07:E9:1D:CE:53:C6:A3:EA:EC:20:EC:DD:00:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa
Signing time: Thu 27 Mar 2025 22:55:00 +0000
ROA not before: Thu 27 Mar 2025 22:50:00 +0000
ROA not after: Thu 26 Mar 2026 22:55:00 +0000
asID: 274069
IP address blocks: 2803:2ad0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:53:66:0b:fc:0e:14:71:9a:44:25:09:38:d4:e3:1a:d4:21:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B
Validity
Not Before: Mar 27 22:50:00 2025 GMT
Not After : Mar 26 22:55:00 2026 GMT
Subject: CN=60FE12BFACC086FBF48E1A6F380BC5AC8AEE01DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:b0:a6:c0:5b:9f:1b:f6:ef:8c:96:db:55:
88:d8:2f:b4:46:e5:6b:2c:ad:e0:46:bf:81:6a:d5:
a3:24:c4:12:3f:6a:c6:49:1e:7f:7e:0d:23:e2:e1:
65:07:fa:75:43:c1:55:3d:02:b0:49:62:06:84:8a:
45:ab:e1:fe:36:de:27:9d:cc:7c:04:b1:e5:d1:f7:
0e:05:45:ce:2b:f6:90:23:f5:73:43:d4:38:d2:69:
cc:73:98:c1:ee:e0:3a:3f:b8:bb:4a:a7:b7:b4:b8:
86:31:d5:20:02:61:0a:e5:c1:ce:85:45:a2:a9:ae:
cf:92:1d:48:b4:11:a2:0d:a6:1b:b3:78:cb:64:67:
b4:ea:81:d7:95:eb:17:9f:ec:60:af:d6:4a:b6:af:
f5:32:7b:d6:89:35:91:2d:69:b2:71:8b:83:6f:9d:
6f:ca:b8:86:e0:3b:5f:c6:80:21:58:38:fc:eb:b2:
0c:27:aa:70:32:02:0a:a7:82:5d:3c:38:95:1a:6a:
e8:f1:c1:03:64:f0:a1:cb:dd:67:ed:de:a5:d2:f7:
6b:c4:a9:42:bb:ff:3b:e0:aa:49:28:bc:a9:57:64:
2a:52:69:4a:03:3a:55:80:7a:08:03:f2:d9:03:d1:
43:f8:ba:ca:08:2f:80:7c:52:de:c2:6a:c8:ea:7f:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:12:BF:AC:C0:86:FB:F4:8E:1A:6F:38:0B:C5:AC:8A:EE:01:DD
X509v3 Authority Key Identifier:
keyid:8B:9D:DD:50:E4:E6:07:E9:1D:CE:53:C6:A3:EA:EC:20:EC:DD:00:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/323830333a326164303a3a2f33322d3438203d3e20323734303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2ad0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:8c:f1:e9:e5:45:e6:88:69:ca:d7:01:35:84:6f:54:29:2e:
6b:02:68:5b:cd:c1:aa:71:c3:f2:20:76:14:2c:97:c8:61:f6:
9c:e8:c3:47:27:b0:06:ee:1a:20:1d:04:76:1b:53:aa:97:e9:
92:d6:3e:e4:d1:b1:7a:0d:94:9c:81:e2:73:e7:fa:60:67:64:
df:f6:3a:5d:c5:0e:eb:fc:b3:a0:2d:8d:30:86:00:57:64:b4:
d6:95:3d:09:2b:7c:af:3b:50:1c:b9:44:87:eb:58:c1:78:36:
ec:29:f4:54:1e:88:e4:e0:1d:ce:ad:fa:41:56:e3:54:6b:fa:
1f:99:69:05:c1:99:e3:31:6a:53:1d:3e:85:49:66:13:b6:4a:
a6:9c:6f:c0:f8:e8:80:ac:a7:68:c5:42:17:c7:3c:f3:89:d6:
3a:87:9f:63:5e:59:d9:c4:9d:0a:1e:20:b4:3d:c2:42:86:dc:
d1:00:4c:06:d8:a9:90:3d:f5:4d:0f:80:2b:df:59:ed:fb:e5:
31:f1:23:dd:6e:f1:ca:e8:50:b2:84:68:2c:06:8b:d8:c1:e4:
43:ac:c6:2c:f5:42:0b:c6:d4:fa:0f:21:53:69:9d:dc:6c:c9:
dc:c5:9d:d5:39:5a:c1:2d:55:23:a0:7e:2f:85:7e:8c:1d:0d:
d7:a0:38:e1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUb1NmC/wOFHGaRCUJONTjGtQhPqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5RERENTBFNEU2MDdFOTFEQ0U1M0M2QTNFQUVDMjBF
Q0REMDA1QjAeFw0yNTAzMjcyMjUwMDBaFw0yNjAzMjYyMjU1MDBaMDMxMTAvBgNV
BAMTKDYwRkUxMkJGQUNDMDg2RkJGNDhFMUE2RjM4MEJDNUFDOEFFRTAxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZ7CmwFufG/bvjJbbVYjYL7RG
5WssreBGv4Fq1aMkxBI/asZJHn9+DSPi4WUH+nVDwVU9ArBJYgaEikWr4f423ied
zHwEseXR9w4FRc4r9pAj9XND1DjSacxzmMHu4Do/uLtKp7e0uIYx1SACYQrlwc6F
RaKprs+SHUi0EaINphuzeMtkZ7TqgdeV6xef7GCv1kq2r/Uye9aJNZEtabJxi4Nv
nW/KuIbgO1/GgCFYOPzrsgwnqnAyAgqngl08OJUaaujxwQNk8KHL3Wft3qXS92vE
qUK7/zvgqkkovKlXZCpSaUoDOlWAeggD8tkD0UP4usoIL4B8Ut7Casjqf5LNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYP4Sv6zAhvv0jhpvOAvFrIruAd0wHwYDVR0j
BBgwFoAUi53dUOTmB+kdzlPGo+rsIOzdAFswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTg5MDAwN0NEODFFNzFCQTk0RUFBMkUzNjJBMkY3NjM5
M0ExN0NBNzk0MkE5N0ZDODhFQzMxRDdBMDY0QjM0LzAvOEI5RERENTBFNEU2MDdF
OTFEQ0U1M0M2QTNFQUVDMjBFQ0REMDA1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjlEREQ1MEU0RTYwN0U5MURD
RTUzQzZBM0VBRUMyMEVDREQwMDVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk4OTAwMDdDRDgxRTcxQkE5NEVBQTJFMzYyQTJGNzYzOTNBMTdDQTc5
NDJBOTdGQzg4RUMzMUQ3QTA2NEIzNC8wLzMyMzgzMDMzM2EzMjYxNjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKtAw
DQYJKoZIhvcNAQELBQADggEBAB+M8enlReaIacrXATWEb1QpLmsCaFvNwapxw/Ig
dhQsl8hh9pzow0cnsAbuGiAdBHYbU6qX6ZLWPuTRsXoNlJyB4nPn+mBnZN/2Ol3F
Duv8s6AtjTCGAFdktNaVPQkrfK87UBy5RIfrWMF4Nuwp9FQeiOTgHc6t+kFW41Rr
+h+ZaQXBmeMxalMdPoVJZhO2Sqacb8D46ICsp2jFQhfHPPOJ1jqHn2NeWdnEnQoe
ILQ9wkKG3NEATAbYqZA99U0PgCvfWe375THxI91u8croULKEaCwGi9jB5EOsxiz1
QgvG1PoPIVNpndxsydzFndU5WsEtVSOgfi+FfowdDdegOOE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:40 2025 by rpki-client