Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
File: 323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: 0PKO1WAOjPsRxCHPCzd3nT9XFtyndJAozuiHrVyjNxk=
Subject key identifier: DE:8C:3E:03:8B:4A:1B:DB:E7:86:75:A1:29:6E:4C:71:A1:17:91:9B
Certificate issuer: /CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Certificate serial: 08D788C6C4EFE5E94CE0785274C15CF8A3EA2CB2
Authority key identifier: 9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
Signing time: Mon 13 Jan 2025 14:20:00 +0000
ROA not before: Mon 13 Jan 2025 14:15:00 +0000
ROA not after: Mon 12 Jan 2026 14:20:00 +0000
asID: 13489
IP address blocks: 2801:1d:8800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d7:88:c6:c4:ef:e5:e9:4c:e0:78:52:74:c1:5c:f8:a3:ea:2c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Validity
Not Before: Jan 13 14:15:00 2025 GMT
Not After : Jan 12 14:20:00 2026 GMT
Subject: CN=DE8C3E038B4A1BDBE78675A1296E4C71A117919B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:2d:87:59:35:d1:e7:4f:4e:f0:4d:73:31:
ae:cf:5f:81:d2:af:ce:15:0b:43:08:6c:3d:25:70:
d6:7e:4d:36:8d:91:3a:9b:65:15:ab:70:61:2d:97:
6c:9e:5d:ac:5c:27:51:16:8b:23:35:2d:3b:6a:7a:
03:63:81:f5:9a:ed:0b:66:0b:85:d4:35:da:b2:1d:
02:9a:dc:71:17:d2:b6:04:63:b3:f6:1e:fc:8a:b5:
62:2e:16:65:78:cf:2a:7e:e4:ae:81:77:dd:d4:66:
1a:cd:18:d2:c7:37:8b:80:d5:e7:c4:a3:4e:c6:c7:
c3:e2:31:eb:8e:ef:81:b0:73:b0:07:04:f9:57:33:
d0:7f:00:33:d7:a1:29:c7:c7:bd:45:a5:92:dc:86:
b3:1a:84:56:e2:6e:1d:23:7c:c5:8e:c7:e2:fe:29:
ba:35:32:2f:94:99:c6:c0:d9:0d:f5:72:a4:5d:d4:
d8:21:87:94:1e:ae:91:07:de:15:38:3b:3a:14:01:
06:2a:23:eb:27:fb:3b:9d:41:62:b1:82:c6:1c:b7:
8d:de:38:89:bd:49:e5:03:95:15:84:8e:97:3e:3d:
7e:59:ce:38:b3:84:45:01:da:5d:a2:e2:ee:fb:9c:
a6:ae:03:eb:01:f2:7b:64:91:13:69:31:bc:d8:ea:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:3E:03:8B:4A:1B:DB:E7:86:75:A1:29:6E:4C:71:A1:17:91:9B
X509v3 Authority Key Identifier:
keyid:9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:8800::/48
Signature Algorithm: sha256WithRSAEncryption
19:c4:ee:73:7b:af:00:c7:45:ad:62:70:eb:66:69:ce:5e:6f:
31:aa:f1:96:5e:97:08:6c:4c:b5:17:90:dc:29:1c:6b:bb:f8:
22:ed:a2:8e:5c:a1:b2:12:7a:8d:27:53:2d:63:a6:a4:8e:38:
2c:f1:11:7f:dd:56:cd:44:0f:d7:78:0b:d7:fc:3b:b3:60:62:
91:a8:5a:ff:ed:c9:2d:6e:a8:0d:de:ce:81:88:69:46:5c:eb:
90:6b:8a:52:7e:71:ea:11:2b:fb:1f:79:e7:ab:45:07:da:94:
5a:46:8e:16:7b:73:0d:11:b8:10:bf:85:ac:1f:c8:2d:d6:7c:
3e:92:fd:a5:00:4f:bf:90:af:db:0c:a6:49:77:81:79:90:01:
7b:b7:7e:82:51:12:a7:ba:c5:8e:55:ea:94:d7:eb:63:0d:6f:
8d:d3:0c:b0:08:06:7c:7f:f2:57:1c:8d:0c:0b:9a:1e:35:e8:
d6:65:11:80:9e:8e:e8:8c:18:33:73:96:6a:36:bf:45:81:bf:
5a:90:00:e0:8f:5c:dd:f8:27:5b:cd:90:b4:51:17:d3:c5:58:
ff:03:cd:e7:9f:c2:f8:f8:17:e0:a9:b7:c0:45:31:3f:57:26:
be:13:de:6c:56:a9:27:3c:ab:f2:ce:05:c0:e5:e7:69:b9:00:
bc:94:7a:38
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCNeIxsTv5elM4HhSdMFc+KPqLLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwMDQ0NkY5NENDMzNEQTM3QjM3M0ZBRkYxM0Y3RTVC
MjJCODgxMzAeFw0yNTAxMTMxNDE1MDBaFw0yNjAxMTIxNDIwMDBaMDMxMTAvBgNV
BAMTKERFOEMzRTAzOEI0QTFCREJFNzg2NzVBMTI5NkU0QzcxQTExNzkxOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtiS2HWTXR509O8E1zMa7PX4HS
r84VC0MIbD0lcNZ+TTaNkTqbZRWrcGEtl2yeXaxcJ1EWiyM1LTtqegNjgfWa7Qtm
C4XUNdqyHQKa3HEX0rYEY7P2HvyKtWIuFmV4zyp+5K6Bd93UZhrNGNLHN4uA1efE
o07Gx8PiMeuO74Gwc7AHBPlXM9B/ADPXoSnHx71FpZLchrMahFbibh0jfMWOx+L+
Kbo1Mi+UmcbA2Q31cqRd1Nghh5QerpEH3hU4OzoUAQYqI+sn+zudQWKxgsYct43e
OIm9SeUDlRWEjpc+PX5ZzjizhEUB2l2i4u77nKauA+sB8ntkkRNpMbzY6t9LAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU3ow+A4tKG9vnhnWhKW5McaEXkZswHwYDVR0j
BBgwFoAUngBEb5TMM9o3s3P6/xP35bIriBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRjlGMDUxNDEwNTc1QUNDQ0NBRTkyRjlBNENFMDgyQTEx
QTgxNzJDNzlGOUY2M0UyOTYzRUQ3QUNDMjc4NkNCLzAvOUUwMDQ0NkY5NENDMzNE
QTM3QjM3M0ZBRkYxM0Y3RTVCMjJCODgxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTAwNDQ2Rjk0Q0MzM0RBMzdC
MzczRkFGRjEzRjdFNUIyMkI4ODEzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkY5RjA1MTQxMDU3NUFDQ0NDQUU5MkY5QTRDRTA4MkExMUE4MTcyQzc5
RjlGNjNFMjk2M0VEN0FDQzI3ODZDQi8wLzMyMzgzMDMxM2EzMTY0M2EzODM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAdiAAwDQYJKoZIhvcNAQELBQADggEBABnE7nN7rwDHRa1icOtmac5ebzGq8ZZe
lwhsTLUXkNwpHGu7+CLtoo5cobISeo0nUy1jpqSOOCzxEX/dVs1ED9d4C9f8O7Ng
YpGoWv/tyS1uqA3ezoGIaUZc65BrilJ+ceoRK/sfeeerRQfalFpGjhZ7cw0RuBC/
hawfyC3WfD6S/aUAT7+Qr9sMpkl3gXmQAXu3foJREqe6xY5V6pTX62MNb43TDLAI
Bnx/8lccjQwLmh416NZlEYCejuiMGDNzlmo2v0WBv1qQAOCPXN34J1vNkLRRF9PF
WP8Dzeefwvj4F+Cpt8BFMT9XJr4T3mxWqSc8q/LOBcDl52m5ALyUejg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:43 2025 by rpki-client