Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
File: 323830333a616636303a3a2f33322d3332203d3e20323634363337.roa (raw, json)
Hash identifier: hjsMfWjkusJew0Nke68rWhLZF/fL7+V7QwNjP6K2kOw=
Subject key identifier: DB:4C:3F:8C:C8:A2:E3:6F:15:1C:E6:16:61:DD:50:2C:84:C6:66:DB
Certificate issuer: /CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
Certificate serial: 5C39EB3777958A0EA0A0222DF41EC2F4CECF4990
Authority key identifier: 09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
Signing time: Tue 04 Feb 2025 18:13:29 +0000
ROA not before: Tue 04 Feb 2025 18:08:29 +0000
ROA not after: Tue 03 Feb 2026 18:13:29 +0000
asID: 264637
IP address blocks: 2803:af60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:39:eb:37:77:95:8a:0e:a0:a0:22:2d:f4:1e:c2:f4:ce:cf:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
Validity
Not Before: Feb 4 18:08:29 2025 GMT
Not After : Feb 3 18:13:29 2026 GMT
Subject: CN=DB4C3F8CC8A2E36F151CE61661DD502C84C666DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:e7:a7:71:06:28:e0:8c:c3:42:f5:9f:ec:
91:ff:82:f1:cd:28:7c:dd:08:73:fc:c7:da:17:c0:
ee:65:ff:d9:9f:df:16:68:1c:d0:9f:d6:1a:c3:4c:
8b:b8:70:04:60:58:bb:6b:2e:58:68:68:b8:1b:24:
f7:da:c3:fa:7d:af:ad:d8:08:72:f2:5d:ff:90:59:
d7:84:67:7e:2b:1c:cf:d6:83:2b:f8:46:42:f1:d6:
41:da:e2:0b:3d:b7:77:66:2e:27:56:0c:8a:6e:03:
55:c8:b3:a3:90:2d:4d:11:2b:5e:9a:cb:70:ab:79:
de:40:5b:49:8a:cd:21:92:16:c9:65:28:42:7f:e7:
bb:90:f3:a6:00:0a:4d:90:65:89:a8:ec:c0:9f:9e:
22:86:ff:ce:68:58:1e:31:2a:18:03:8f:b5:09:e2:
55:f9:7c:a4:bb:88:be:69:0a:a2:13:22:7a:e4:ea:
35:24:64:3c:79:e2:7a:98:a2:9a:c4:63:62:09:ab:
0a:ae:e9:9b:ab:f7:25:f9:a8:bd:1a:4f:ca:f6:dc:
36:b1:31:02:ca:89:f3:84:64:91:09:20:6c:1c:ee:
24:2c:51:3d:ad:ce:e8:07:47:e7:08:fe:c8:6f:d7:
e9:5b:9b:c5:17:f6:88:2b:70:a6:20:72:ab:c4:22:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:3F:8C:C8:A2:E3:6F:15:1C:E6:16:61:DD:50:2C:84:C6:66:DB
X509v3 Authority Key Identifier:
keyid:09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:af60::/32
Signature Algorithm: sha256WithRSAEncryption
59:5f:2c:61:fe:21:c0:23:04:91:d7:52:72:e0:15:34:10:39:
5b:0b:b5:ec:b6:68:88:e9:6c:ed:7d:f5:a1:56:22:c0:07:82:
6f:d6:d1:7c:56:d5:c2:ef:b1:8c:4e:84:e9:7f:da:a7:6c:46:
e8:0f:8d:34:bb:d2:43:23:63:6a:15:cd:35:bf:4d:57:2c:5d:
1c:de:ea:d8:17:c7:c9:6a:a8:fa:cd:c7:5a:94:4c:d8:27:2a:
4f:18:4e:9d:6a:f7:00:3b:1e:75:9f:3e:d3:40:3e:f3:48:87:
81:14:74:f1:46:59:02:3d:85:3c:6b:75:22:95:30:63:32:bd:
be:ef:7b:ee:37:d6:96:97:d7:67:35:8f:38:76:f5:08:ce:c5:
35:ef:e6:f4:70:07:47:60:64:8b:d1:68:74:7e:7e:11:04:45:
a9:bf:d0:28:5f:b9:c8:0d:63:3a:13:e7:b9:d6:b4:b8:87:c3:
54:91:b9:7e:7e:e6:68:9a:d9:44:54:1e:30:2f:2c:a6:41:a7:
7d:ce:99:3b:1d:75:36:b9:6f:0d:c4:5e:c2:f1:e9:c6:d8:ca:
84:70:af:ff:28:4f:dc:91:f1:1f:70:ed:90:c2:71:39:c4:dd:
46:fa:73:d9:94:d8:84:5b:ae:70:73:1a:3c:98:f3:38:e9:77:
16:87:67:d8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXDnrN3eVig6goCIt9B7C9M7PSZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk1ODlFOTA0MENBMDFBRjQ2RTdBMzlBNzRDOEZCRkQ5
RUJBNzlGODAeFw0yNTAyMDQxODA4MjlaFw0yNjAyMDMxODEzMjlaMDMxMTAvBgNV
BAMTKERCNEMzRjhDQzhBMkUzNkYxNTFDRTYxNjYxREQ1MDJDODRDNjY2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tuencQYo4IzDQvWf7JH/gvHN
KHzdCHP8x9oXwO5l/9mf3xZoHNCf1hrDTIu4cARgWLtrLlhoaLgbJPfaw/p9r63Y
CHLyXf+QWdeEZ34rHM/Wgyv4RkLx1kHa4gs9t3dmLidWDIpuA1XIs6OQLU0RK16a
y3Cred5AW0mKzSGSFsllKEJ/57uQ86YACk2QZYmo7MCfniKG/85oWB4xKhgDj7UJ
4lX5fKS7iL5pCqITInrk6jUkZDx54nqYoprEY2IJqwqu6Zur9yX5qL0aT8r23Dax
MQLKifOEZJEJIGwc7iQsUT2tzugHR+cI/shv1+lbm8UX9ogrcKYgcqvEIrMhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU20w/jMii428VHOYWYd1QLITGZtswHwYDVR0j
BBgwFoAUCViekEDKAa9G56OadMj7/Z66efgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDM2RjM2QjQzMkRDN0IzQkZCQUEwOTk5MzE2MjkzNEM2
NTUyODgxRkJEOTM4OTc0RkNGRTBGMkRFNzgxM0RELzAvMDk1ODlFOTA0MENBMDFB
RjQ2RTdBMzlBNzRDOEZCRkQ5RUJBNzlGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTU4OUU5MDQwQ0EwMUFGNDZF
N0EzOUE3NEM4RkJGRDlFQkE3OUY4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzAzNkYzNkI0MzJEQzdCM0JGQkFBMDk5OTMxNjI5MzRDNjU1Mjg4MUZC
RDkzODk3NEZDRkUwRjJERTc4MTNERC8wLzMyMzgzMDMzM2E2MTY2MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDr2Aw
DQYJKoZIhvcNAQELBQADggEBAFlfLGH+IcAjBJHXUnLgFTQQOVsLtey2aIjpbO19
9aFWIsAHgm/W0XxW1cLvsYxOhOl/2qdsRugPjTS70kMjY2oVzTW/TVcsXRze6tgX
x8lqqPrNx1qUTNgnKk8YTp1q9wA7HnWfPtNAPvNIh4EUdPFGWQI9hTxrdSKVMGMy
vb7ve+431paX12c1jzh29QjOxTXv5vRwB0dgZIvRaHR+fhEERam/0ChfucgNYzoT
57nWtLiHw1SRuX5+5mia2URUHjAvLKZBp33OmTsddTa5bw3EXsLx6cbYyoRwr/8o
T9yR8R9w7ZDCcTnE3Ub6c9mU2IRbrnBzGjyY8zjpdxaHZ9g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:54 2025 by rpki-client