Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa
File: 323830333a616630303a3a2f33322d3438203d3e203532343533.roa (raw, json)
Hash identifier: iB2xMufvnVF2YRBUbtMcZDh2TPH/S35acRrSQKOQlA4=
Subject key identifier: B9:84:78:3E:2D:24:24:23:AB:07:57:25:2A:03:24:8C:5A:31:31:40
Certificate issuer: /CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
Certificate serial: 14E9564D9F72033BCEF389B99E605B02467D055B
Authority key identifier: 00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa
Signing time: Tue 04 Feb 2025 18:40:49 +0000
ROA not before: Tue 04 Feb 2025 18:35:49 +0000
ROA not after: Tue 03 Feb 2026 18:40:49 +0000
asID: 52453
IP address blocks: 2803:af00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e9:56:4d:9f:72:03:3b:ce:f3:89:b9:9e:60:5b:02:46:7d:05:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
Validity
Not Before: Feb 4 18:35:49 2025 GMT
Not After : Feb 3 18:40:49 2026 GMT
Subject: CN=B984783E2D242423AB0757252A03248C5A313140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:0e:eb:d9:ac:78:bb:96:c1:84:81:8e:23:
a9:21:b2:98:38:6c:79:33:84:d0:f1:18:74:6b:a2:
f3:74:c1:e8:06:ca:05:d7:dd:cd:06:fe:15:37:eb:
e9:bd:f7:61:89:64:b9:0d:e9:83:95:b9:54:d6:e9:
15:17:6b:58:84:5d:2a:33:14:7d:c6:46:6b:87:a4:
fd:08:1b:8f:e9:7a:43:2b:87:7b:e7:71:f7:4b:63:
5d:03:b6:3a:15:bc:19:24:12:ca:b1:d0:3a:4c:ff:
8a:14:1c:c9:61:5e:59:af:6e:1a:2a:5f:43:a4:9a:
ce:bd:cd:34:c4:7c:ed:19:2a:9a:c6:30:d0:55:13:
84:39:dc:5e:ad:3f:c7:ed:f7:57:65:be:75:68:1c:
cb:cc:88:a7:a1:13:f4:38:3b:9a:aa:bc:43:42:09:
a9:c1:2d:93:89:60:28:0b:a3:f6:49:4b:ad:02:d9:
06:8a:8f:0e:45:17:37:a0:94:bf:15:1d:26:3f:ff:
5d:ad:6e:3b:05:85:79:02:14:4f:2e:2b:fb:e8:f3:
7c:8c:b1:b5:5b:62:e2:db:ac:a7:d8:a3:4e:0a:4b:
20:c6:25:2b:54:8b:d1:91:7c:80:fa:0b:19:5f:82:
b5:c7:3c:a2:7a:82:2b:3a:e0:a7:90:b7:87:78:7f:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:78:3E:2D:24:24:23:AB:07:57:25:2A:03:24:8C:5A:31:31:40
X509v3 Authority Key Identifier:
keyid:00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/323830333a616630303a3a2f33322d3438203d3e203532343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:af00::/32
Signature Algorithm: sha256WithRSAEncryption
89:55:bc:15:ed:2a:ba:79:39:13:ab:91:c0:55:14:7e:92:64:
1f:c8:98:64:cc:61:97:36:70:b9:ca:d2:c9:bf:c8:7b:7b:71:
06:4d:6e:89:18:b8:c1:f8:81:57:eb:6b:1d:0f:d1:97:75:63:
2d:de:bd:1b:a3:b7:94:c4:15:c9:96:23:ee:b4:52:41:35:56:
9e:5f:4e:ef:48:b8:76:d6:9b:e1:a7:9e:f4:32:77:61:fc:87:
dd:29:2a:a1:57:1f:5d:eb:38:4f:30:4d:80:1e:da:3e:bf:81:
6d:10:f5:c9:78:b3:cc:9c:66:57:d6:88:9d:a4:dd:b0:89:a4:
53:d3:25:39:be:ff:81:7e:77:5f:c1:d2:95:c4:16:3f:65:95:
37:a7:c6:13:b1:10:5a:7d:5d:93:61:f8:89:b3:a7:e0:53:4c:
87:b6:99:ff:55:ac:04:58:ff:7b:7b:f5:4d:ed:5b:8e:db:5f:
43:fe:46:db:4a:68:3e:10:61:02:d7:24:43:11:54:a5:a8:f8:
47:df:42:0d:de:d0:da:af:9e:18:68:1f:83:91:02:4b:bc:2b:
9c:7a:bd:5b:96:89:9f:ed:35:e4:5a:30:8c:e9:94:c8:46:c1:
b6:bf:4f:c3:9b:a2:fa:16:aa:af:6c:28:2a:06:84:2c:69:7e:
d6:e5:ef:ef
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFOlWTZ9yAzvO84m5nmBbAkZ9BVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwMDQ0NEJDQTJDMzlENjUxNzE3NUFGQ0Q4MDVENzdB
NDBEMUU2RTAeFw0yNTAyMDQxODM1NDlaFw0yNjAyMDMxODQwNDlaMDMxMTAvBgNV
BAMTKEI5ODQ3ODNFMkQyNDI0MjNBQjA3NTcyNTJBMDMyNDhDNUEzMTMxNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kg7r2ax4u5bBhIGOI6khspg4
bHkzhNDxGHRrovN0wegGygXX3c0G/hU36+m992GJZLkN6YOVuVTW6RUXa1iEXSoz
FH3GRmuHpP0IG4/pekMrh3vncfdLY10DtjoVvBkkEsqx0DpM/4oUHMlhXlmvbhoq
X0Okms69zTTEfO0ZKprGMNBVE4Q53F6tP8ft91dlvnVoHMvMiKehE/Q4O5qqvENC
CanBLZOJYCgLo/ZJS60C2QaKjw5FFzeglL8VHSY//12tbjsFhXkCFE8uK/vo83yM
sbVbYuLbrKfYo04KSyDGJStUi9GRfID6CxlfgrXHPKJ6gis64KeQt4d4f7IHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUuYR4Pi0kJCOrB1clKgMkjFoxMUAwHwYDVR0j
BBgwFoAUAABES8osOdZRcXWvzYBdd6QNHm4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REIyNkYyNENDRkE3QkM0QjQzNTAxOEZBRkYxMEFDMDM4
NzlFNUNDMEFBNkVEODM5MDU5QkI5NDRDRDc0NkI1LzAvMDAwMDQ0NEJDQTJDMzlE
NjUxNzE3NUFGQ0Q4MDVENzdBNDBEMUU2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDAwNDQ0QkNBMkMzOUQ2NTE3
MTc1QUZDRDgwNUQ3N0E0MEQxRTZFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURCMjZGMjRDQ0ZBN0JDNEI0MzUwMThGQUZGMTBBQzAzODc5RTVDQzBB
QTZFRDgzOTA1OUJCOTQ0Q0Q3NDZCNS8wLzMyMzgzMDMzM2E2MTY2MzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA68AMA0G
CSqGSIb3DQEBCwUAA4IBAQCJVbwV7Sq6eTkTq5HAVRR+kmQfyJhkzGGXNnC5ytLJ
v8h7e3EGTW6JGLjB+IFX62sdD9GXdWMt3r0bo7eUxBXJliPutFJBNVaeX07vSLh2
1pvhp570Mndh/IfdKSqhVx9d6zhPME2AHto+v4FtEPXJeLPMnGZX1oidpN2wiaRT
0yU5vv+BfndfwdKVxBY/ZZU3p8YTsRBafV2TYfiJs6fgU0yHtpn/VawEWP97e/VN
7VuO219D/kbbSmg+EGEC1yRDEVSlqPhH30IN3tDar54YaB+DkQJLvCucer1blomf
7TXkWjCM6ZTIRsG2v0/Dm6L6FqqvbCgqBoQsaX7W5e/v
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:32:21 2025 by rpki-client