Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383030303a3a2f33352d3433203d3e203634313230.roa
File: 323830333a663038303a383030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier: yq3qvO7bupnA4/RndybILkgAX+neVI2ATy+dcxfQkLI=
Subject key identifier: A3:AB:E6:7C:74:9C:DE:D1:B6:80:2B:0E:A0:E5:54:33:D6:E7:76:F8
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 4677A32DA090C2166727218D36D1177CC74CB5C7
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383030303a3a2f33352d3433203d3e203634313230.roa
Signing time: Tue 04 Feb 2025 18:42:03 +0000
ROA not before: Tue 04 Feb 2025 18:37:03 +0000
ROA not after: Tue 03 Feb 2026 18:42:03 +0000
asID: 64120
IP address blocks: 2803:f080:8000::/35 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:77:a3:2d:a0:90:c2:16:67:27:21:8d:36:d1:17:7c:c7:4c:b5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Feb 4 18:37:03 2025 GMT
Not After : Feb 3 18:42:03 2026 GMT
Subject: CN=A3ABE67C749CDED1B6802B0EA0E55433D6E776F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:40:c3:ed:9c:97:77:3b:73:f9:49:79:f0:
06:32:cf:17:2d:b3:d2:26:dd:5f:77:7d:d8:f6:94:
4a:69:1c:6e:f8:a1:6d:15:80:5f:7e:9a:11:2a:21:
e7:31:16:80:0b:7a:13:69:ef:15:17:fa:97:22:b1:
f6:b1:d2:fc:77:65:0a:df:af:33:08:b0:ee:47:48:
9b:44:1a:96:79:ec:1e:5f:fb:7c:dc:9f:1a:1e:f3:
fb:9d:54:f3:6a:b6:2e:01:ee:7d:e0:a8:0c:d8:41:
6b:02:ef:87:89:c2:66:87:b4:82:23:e0:7d:8d:fc:
85:1c:86:40:06:58:38:9d:bb:83:50:fa:ba:e8:7e:
3d:b5:3e:11:e2:8c:a6:46:f5:50:5a:6b:b6:d5:31:
8f:5e:a0:58:c3:47:3b:de:20:f5:2d:dc:98:c0:8a:
09:3d:b6:b2:b8:a0:89:91:4a:5e:0b:00:ad:e3:ac:
72:82:60:f0:c5:de:47:52:ed:f7:45:93:68:de:aa:
1b:fe:0f:d4:02:e6:80:08:3f:9b:07:67:e5:a0:2b:
37:22:86:c7:cc:72:af:59:d9:01:3a:c1:79:fc:87:
4d:5d:d3:16:bf:cd:c7:97:4a:48:83:37:95:fa:6c:
dc:98:72:f6:67:0d:fd:29:27:a9:f6:94:2d:ce:52:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:E6:7C:74:9C:DE:D1:B6:80:2B:0E:A0:E5:54:33:D6:E7:76:F8
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383030303a3a2f33352d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:8000::/35
Signature Algorithm: sha256WithRSAEncryption
50:a4:ef:42:c4:62:aa:24:e9:c0:93:ce:1f:b2:f1:3f:10:fc:
9b:59:a6:89:47:10:d8:a6:79:11:62:a8:76:98:62:23:03:ff:
bc:c7:6e:8b:8a:be:33:40:a2:da:45:18:36:07:c9:1c:35:b2:
51:45:84:89:1f:fe:de:6a:ab:0a:e0:c4:b9:3e:11:ef:0c:26:
69:32:6c:80:b0:0c:15:5c:a4:f5:14:b2:76:45:c4:a3:b5:e8:
ff:c8:c9:bb:45:97:4b:b3:01:10:42:93:9a:56:49:21:78:74:
c2:4e:1a:0a:92:58:ee:48:7c:12:7a:bc:a9:46:db:64:af:af:
1a:52:3b:0c:8a:3a:35:03:cb:56:41:1b:1d:d0:bf:f7:88:97:
ff:06:33:dc:78:c2:a2:9a:17:86:95:83:1a:56:47:79:97:f4:
f8:85:44:44:2b:43:08:d7:ed:36:bc:4f:cd:8e:40:83:2c:46:
15:4f:00:99:5f:a8:24:48:6c:0b:7a:13:49:9a:7a:a2:be:83:
20:1c:ef:40:64:dc:44:1d:80:f6:4e:47:17:3d:52:42:16:23:
a8:9f:f5:0c:ef:c8:ca:23:37:a7:46:bf:48:33:b5:1e:e8:c3:
a7:99:78:24:8f:a7:57:5e:0f:19:27:05:85:f1:95:8e:00:df:
75:d2:93:e3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURnejLaCQwhZnJyGNNtEXfMdMtccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTAyMDQxODM3MDNaFw0yNjAyMDMxODQyMDNaMDMxMTAvBgNV
BAMTKEEzQUJFNjdDNzQ5Q0RFRDFCNjgwMkIwRUEwRTU1NDMzRDZFNzc2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GkDD7ZyXdztz+Ul58AYyzxct
s9Im3V93fdj2lEppHG74oW0VgF9+mhEqIecxFoALehNp7xUX+pcisfax0vx3ZQrf
rzMIsO5HSJtEGpZ57B5f+3zcnxoe8/udVPNqti4B7n3gqAzYQWsC74eJwmaHtIIj
4H2N/IUchkAGWDidu4NQ+rrofj21PhHijKZG9VBaa7bVMY9eoFjDRzveIPUt3JjA
igk9trK4oImRSl4LAK3jrHKCYPDF3kdS7fdFk2jeqhv+D9QC5oAIP5sHZ+WgKzci
hsfMcq9Z2QE6wXn8h01d0xa/zceXSkiDN5X6bNyYcvZnDf0pJ6n2lC3OUlaVAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUo6vmfHSc3tG2gCsOoOVUM9bndvgwHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzgz
MDMwMzAzYTNhMmYzMzM1MmQzNDMzMjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPwgIAwDQYJKoZIhvcNAQELBQADggEBAFCk70LEYqok6cCTzh+y8T8Q/JtZ
polHENimeRFiqHaYYiMD/7zHbouKvjNAotpFGDYHyRw1slFFhIkf/t5qqwrgxLk+
Ee8MJmkybICwDBVcpPUUsnZFxKO16P/IybtFl0uzARBCk5pWSSF4dMJOGgqSWO5I
fBJ6vKlG22SvrxpSOwyKOjUDy1ZBGx3Qv/eIl/8GM9x4wqKaF4aVgxpWR3mX9PiF
REQrQwjX7Ta8T82OQIMsRhVPAJlfqCRIbAt6E0maeqK+gyAc70Bk3EQdgPZORxc9
UkIWI6if9QzvyMojN6dGv0gztR7ow6eZeCSPp1deDxknBYXxlY4A33XSk+M=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:21:49 2025 by rpki-client