Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
File: 323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa (raw, json)
Hash identifier: rqe9aKQzsnXen7ExODv4LBvdwJNXnCEFB00pZDnt9+0=
Subject key identifier: B2:A4:B5:EF:15:32:C2:58:AB:30:90:68:18:5B:E8:58:CC:63:F2:0E
Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial: 47707B414880D025285632E6C71181337E9A2C4A
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
Signing time: Tue 04 Feb 2025 18:31:36 +0000
ROA not before: Tue 04 Feb 2025 18:26:36 +0000
ROA not after: Tue 03 Feb 2026 18:31:36 +0000
asID: 28032
IP address blocks: 2800:650:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:70:7b:41:48:80:d0:25:28:56:32:e6:c7:11:81:33:7e:9a:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
Validity
Not Before: Feb 4 18:26:36 2025 GMT
Not After : Feb 3 18:31:36 2026 GMT
Subject: CN=B2A4B5EF1532C258AB309068185BE858CC63F20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:1f:8c:42:c3:c7:ff:f6:03:40:cb:67:d2:
f4:2c:a5:ac:e7:cf:75:73:fb:c7:a1:62:62:1c:16:
23:0b:cc:9a:a2:d4:d5:b1:b4:bd:55:d6:80:0d:5b:
b8:63:7d:90:c0:5f:94:3b:d0:16:f6:ba:49:f4:10:
b4:1d:8a:5e:b1:bd:c5:06:1e:1c:b4:d4:aa:8a:56:
80:c7:d8:53:de:c6:4a:49:c4:10:45:da:57:2e:28:
61:6d:b4:37:85:cc:01:be:df:fa:06:4f:ef:ff:97:
c5:c9:b0:c8:95:6c:88:a2:28:a0:99:f7:bb:18:1a:
7d:d0:3f:3d:19:f1:99:22:e8:58:d5:42:ec:e8:18:
ae:22:ca:ea:31:be:0a:fe:d6:07:71:0f:5c:7f:4e:
8a:cf:ff:2b:11:1b:4c:ce:eb:4b:8b:86:5c:ab:0a:
87:5c:ac:3c:e7:46:a5:3d:72:2e:35:fd:76:f0:75:
bd:96:d8:8b:c0:3d:80:5f:a3:ba:7d:a4:df:5f:ff:
c3:48:96:b1:b8:5e:7a:4d:0a:51:99:71:d6:e2:65:
ec:ea:92:30:21:bf:89:43:10:26:3b:f2:63:19:05:
8d:2e:8a:18:f5:bd:b6:dc:4a:9d:dd:db:3b:e4:6d:
62:82:68:a3:b5:76:d9:76:0a:5c:30:30:e2:30:b8:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:B5:EF:15:32:C2:58:AB:30:90:68:18:5B:E8:58:CC:63:F2:0E
X509v3 Authority Key Identifier:
keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:650:4::/48
Signature Algorithm: sha256WithRSAEncryption
29:b1:23:c9:a9:f8:a8:31:6c:90:86:70:6f:db:6f:1c:93:1f:
e6:51:99:a7:53:9a:a8:31:a3:eb:ff:a3:77:90:eb:81:60:0d:
79:7a:dd:f2:e7:fe:34:c4:9b:1a:e7:91:6b:45:8b:59:9d:e8:
98:00:f8:ea:94:6a:64:42:7d:91:eb:be:ac:f2:f4:ce:76:8f:
63:dc:d0:bc:40:26:ad:29:e4:42:4a:4c:d8:be:4e:d1:90:62:
01:c5:2b:8b:e7:7c:42:57:7e:18:9d:9e:06:0d:aa:b9:f7:2f:
19:45:9e:ac:28:86:b3:45:d3:40:6a:e7:b6:86:80:cf:fe:d1:
d9:84:5c:2b:bb:32:8d:25:5a:85:03:23:ec:75:62:9a:3a:67:
4f:f9:a5:7d:2d:bb:6a:fd:e1:e4:72:7a:c3:79:01:62:1a:c1:
17:1e:33:82:a1:94:8e:f3:ba:3c:0e:88:c2:7c:12:78:c2:c1:
a7:1c:8d:e7:a4:24:e1:bb:35:6e:e3:dd:ff:1d:2c:4a:58:b4:
7c:80:9c:d0:18:3b:37:a2:db:4f:8b:fc:a1:3b:f8:82:f9:d2:
2e:69:69:e4:f1:2c:d9:c3:11:2c:cf:86:a8:4d:73:a1:18:a7:
9d:5a:09:b3:5b:e7:a9:31:34:36:59:18:b4:68:56:12:7d:93:
12:3a:89:3a
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUR3B7QUiA0CUoVjLmxxGBM36aLEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNTAyMDQxODI2MzZaFw0yNjAyMDMxODMxMzZaMDMxMTAvBgNV
BAMTKEIyQTRCNUVGMTUzMkMyNThBQjMwOTA2ODE4NUJFODU4Q0M2M0YyMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchR+MQsPH//YDQMtn0vQspazn
z3Vz+8ehYmIcFiMLzJqi1NWxtL1V1oANW7hjfZDAX5Q70Bb2ukn0ELQdil6xvcUG
Hhy01KqKVoDH2FPexkpJxBBF2lcuKGFttDeFzAG+3/oGT+//l8XJsMiVbIiiKKCZ
97sYGn3QPz0Z8Zki6FjVQuzoGK4iyuoxvgr+1gdxD1x/TorP/ysRG0zO60uLhlyr
CodcrDznRqU9ci41/Xbwdb2W2IvAPYBfo7p9pN9f/8NIlrG4XnpNClGZcdbiZezq
kjAhv4lDECY78mMZBY0uihj1vbbcSp3d2zvkbWKCaKO1dtl2ClwwMOIwuBNDAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUsqS17xUywlirMJBoGFvoWMxj8g4wHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMyMzgzMDMwM2EzNjM1MzAzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODMwMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgABlAA
BDANBgkqhkiG9w0BAQsFAAOCAQEAKbEjyan4qDFskIZwb9tvHJMf5lGZp1OaqDGj
6/+jd5DrgWANeXrd8uf+NMSbGueRa0WLWZ3omAD46pRqZEJ9keu+rPL0znaPY9zQ
vEAmrSnkQkpM2L5O0ZBiAcUri+d8Qld+GJ2eBg2qufcvGUWerCiGs0XTQGrntoaA
z/7R2YRcK7syjSVahQMj7HVimjpnT/mlfS27av3h5HJ6w3kBYhrBFx4zgqGUjvO6
PA6IwnwSeMLBpxyN56Qk4bs1buPd/x0sSli0fICc0Bg7N6LbT4v8oTv4gvnSLmlp
5PEs2cMRLM+GqE1zoRinnVoJs1vnqTE0NlkYtGhWEn2TEjqJOg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:01 2025 by rpki-client