Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
File: 323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa (raw, json)
Hash identifier: Uzm6ohnhwkG0sfd7gFJii0Vif8htGrRQ1J1k82G2Guc=
Subject key identifier: 21:4C:F2:A8:A6:6D:36:DA:C3:86:D6:6F:87:DE:50:DA:10:88:79:E2
Certificate issuer: /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial: 23363E48EC5460C2082FA1C7187F342DCB729DED
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
Signing time: Tue 04 Feb 2025 18:34:53 +0000
ROA not before: Tue 04 Feb 2025 18:29:53 +0000
ROA not after: Tue 03 Feb 2026 18:34:53 +0000
asID: 267854
IP address blocks: 2801:13:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:36:3e:48:ec:54:60:c2:08:2f:a1:c7:18:7f:34:2d:cb:72:9d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
Validity
Not Before: Feb 4 18:29:53 2025 GMT
Not After : Feb 3 18:34:53 2026 GMT
Subject: CN=214CF2A8A66D36DAC386D66F87DE50DA108879E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:ca:ce:68:39:cd:7a:0e:f9:72:77:c9:49:
c8:87:2c:ab:d8:c9:32:df:74:cc:95:d0:7a:d2:5c:
76:0c:c5:b3:9b:62:81:c3:b2:05:55:0c:41:47:b6:
08:e8:aa:34:39:f8:36:5b:87:9c:64:7d:f8:a8:9c:
3a:a5:eb:0d:95:66:4e:75:7e:52:89:71:96:4d:66:
8e:b4:b9:71:a5:af:58:80:05:ab:be:25:8d:1d:ba:
35:58:94:da:ea:6f:ab:20:95:8a:66:db:95:b7:7b:
c4:a1:10:43:ea:b0:95:ff:4c:cd:c7:6c:49:c2:29:
00:1c:1c:a9:b7:0e:34:a8:f1:8a:83:fb:17:5e:70:
6b:b1:ee:e0:44:5b:e5:07:9f:57:90:91:8a:89:db:
96:6f:db:c0:0a:74:2a:a6:e8:14:14:8c:3a:ed:73:
b7:16:b7:5c:13:a3:06:02:05:8c:f2:77:4c:64:8f:
b3:90:0a:e7:fb:26:88:b9:5c:5e:33:8f:0a:5f:d8:
92:e7:28:5e:e0:bb:f3:6b:6a:72:97:cf:0e:b7:4a:
85:23:2a:ea:be:bf:b2:a7:94:ca:62:a0:89:1a:a3:
39:8c:16:70:30:ec:db:8e:78:7f:16:51:6c:78:91:
7b:db:8e:68:22:d8:f8:e7:7b:fe:f4:e1:6c:74:01:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:F2:A8:A6:6D:36:DA:C3:86:D6:6F:87:DE:50:DA:10:88:79:E2
X509v3 Authority Key Identifier:
keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:13:800::/48
Signature Algorithm: sha256WithRSAEncryption
73:75:7c:00:79:a8:0e:03:0e:b0:05:30:29:86:d3:e5:e1:9b:
79:62:19:5d:87:1f:78:76:2b:06:7c:21:7c:48:38:b4:c7:7e:
de:c2:e6:06:3b:d6:8c:b6:c4:24:0d:2e:ba:c3:25:6c:9c:19:
76:8a:db:fe:50:fe:29:c0:ce:33:e3:8d:da:bc:f0:10:fd:2c:
88:b4:00:71:4c:a7:a2:07:06:d1:f3:eb:e1:1f:5a:5c:cd:70:
87:d5:44:53:0d:8f:0f:01:23:91:b7:6a:0a:12:db:5f:6b:24:
45:77:cb:8a:63:1b:dc:bc:94:e3:24:e4:64:f1:b8:b8:17:90:
14:a2:eb:22:a7:c0:e8:7d:64:14:81:ea:bb:c9:ac:f5:ac:18:
e4:f5:2b:ae:b1:b4:a9:98:f4:cd:c1:0e:79:4f:06:5e:e6:04:
d7:66:3c:3b:9f:ee:c0:ea:22:0e:74:33:8d:fb:a3:55:23:04:
b2:67:9c:00:f5:ba:45:db:ef:08:f8:81:66:fe:42:4f:75:b2:
53:6e:31:a1:cc:74:09:40:9c:01:7e:56:ee:6b:c4:83:17:c6:
0b:c2:72:1b:b1:2f:af:df:6f:3d:40:e0:69:c8:34:20:26:7d:
c2:4b:6a:32:67:4b:8b:f2:dc:2a:b0:43:05:bb:c3:28:4f:27:
84:e9:0a:ae
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUIzY+SOxUYMIIL6HHGH80Lctyne0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVCQ0YxN0UwNjUyOEM2MTZCNjk1NzU1MTk4MTY1M0VF
MDc0OEQzQzAeFw0yNTAyMDQxODI5NTNaFw0yNjAyMDMxODM0NTNaMDMxMTAvBgNV
BAMTKDIxNENGMkE4QTY2RDM2REFDMzg2RDY2Rjg3REU1MERBMTA4ODc5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZcrOaDnNeg75cnfJSciHLKvY
yTLfdMyV0HrSXHYMxbObYoHDsgVVDEFHtgjoqjQ5+DZbh5xkffionDql6w2VZk51
flKJcZZNZo60uXGlr1iABau+JY0dujVYlNrqb6sglYpm25W3e8ShEEPqsJX/TM3H
bEnCKQAcHKm3DjSo8YqD+xdecGux7uBEW+UHn1eQkYqJ25Zv28AKdCqm6BQUjDrt
c7cWt1wTowYCBYzyd0xkj7OQCuf7Joi5XF4zjwpf2JLnKF7gu/NranKXzw63SoUj
Kuq+v7KnlMpioIkaozmMFnAw7NuOeH8WUWx4kXvbjmgi2Pjne/704Wx0AVz/AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUIUzyqKZtNtrDhtZvh95Q2hCIeeIwHwYDVR0j
BBgwFoAUXrzxfgZSjGFraVdVGYFlPuB0jTwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQ0VFMEUzN0ZEQTE4N0IwRkMwRkE3MTI5MjFCOENFQTkx
RjJDNTVCQkNBMDc3N0FDRTUxREU2MzA5Q0M1Q0I3LzAvNUVCQ0YxN0UwNjUyOEM2
MTZCNjk1NzU1MTk4MTY1M0VFMDc0OEQzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUJDRjE3RTA2NTI4QzYxNkI2
OTU3NTUxOTgxNjUzRUUwNzQ4RDNDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUNFRTBFMzdGREExODdCMEZDMEZBNzEyOTIxQjhDRUE5MUYyQzU1QkJD
QTA3NzdBQ0U1MURFNjMwOUNDNUNCNy8wLzMyMzgzMDMxM2EzMTMzM2EzODMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQATCAAwDQYJKoZIhvcNAQELBQADggEBAHN1fAB5qA4DDrAFMCmG0+Xhm3liGV2H
H3h2KwZ8IXxIOLTHft7C5gY71oy2xCQNLrrDJWycGXaK2/5Q/inAzjPjjdq88BD9
LIi0AHFMp6IHBtHz6+EfWlzNcIfVRFMNjw8BI5G3agoS219rJEV3y4pjG9y8lOMk
5GTxuLgXkBSi6yKnwOh9ZBSB6rvJrPWsGOT1K66xtKmY9M3BDnlPBl7mBNdmPDuf
7sDqIg50M437o1UjBLJnnAD1ukXb7wj4gWb+Qk91slNuMaHMdAlAnAF+Vu5rxIMX
xgvCchuxL6/fbz1A4GnINCAmfcJLajJnS4vy3CqwQwW7wyhPJ4TpCq4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:38:09 2025 by rpki-client