Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa
File: 323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (raw, json)
Hash identifier: 18xMO0NNwNyaNdizcbDbOb9L3682/hnZ6qO1xAyu8Is=
Subject key identifier: 0E:3A:DB:F0:F3:B3:5F:B2:A3:CD:C8:0B:DE:1D:89:CA:15:E0:6D:93
Certificate issuer: /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
Certificate serial: 3E50F1D43FDCE2F6BF467C3D61C48E30CB31D8EC
Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa
Signing time: Tue 04 Feb 2025 18:44:47 +0000
ROA not before: Tue 04 Feb 2025 18:39:47 +0000
ROA not after: Tue 03 Feb 2026 18:44:47 +0000
asID: 267920
IP address blocks: 2803:2e60::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:50:f1:d4:3f:dc:e2:f6:bf:46:7c:3d:61:c4:8e:30:cb:31:d8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
Validity
Not Before: Feb 4 18:39:47 2025 GMT
Not After : Feb 3 18:44:47 2026 GMT
Subject: CN=0E3ADBF0F3B35FB2A3CDC80BDE1D89CA15E06D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:2e:d4:1b:d9:18:e3:27:9e:6c:5b:75:20:
a9:10:37:ab:46:1f:93:e0:17:33:91:b4:f5:02:64:
41:47:f9:71:1a:d9:6f:1e:dc:23:ab:45:1f:48:e2:
5b:e7:18:4f:75:52:e6:f7:da:3a:d3:e1:f6:20:bb:
63:1e:0e:9d:dd:43:40:ef:4e:c5:87:6a:95:51:65:
08:70:c6:25:97:1f:47:6d:22:32:6b:0a:19:04:d1:
98:49:46:50:6f:bd:d6:68:ab:57:45:bb:5d:62:9a:
95:9a:4d:dc:3a:c5:9e:f9:69:8a:24:eb:a7:7e:96:
d9:b5:c1:33:4a:a9:36:df:96:b2:23:67:92:6b:5b:
6f:7d:4b:60:c7:6a:39:cc:f7:5e:07:13:67:ba:45:
4c:d3:34:75:d7:95:99:98:5d:3f:9d:59:ca:ac:e6:
50:ab:01:fe:e7:19:d2:c0:d6:fd:1f:c3:9b:a4:e0:
d0:20:1b:28:3c:3f:b4:ac:bb:b9:0f:cb:7c:74:c8:
5d:6f:0b:8e:d0:4b:a3:11:c9:03:98:d8:3e:01:e4:
5c:50:8b:f6:10:90:b1:7e:43:d1:22:1f:12:f8:59:
15:f1:d5:1e:eb:06:37:83:e7:33:5c:e6:92:bb:f2:
f1:6e:2c:ac:99:8d:d5:a8:d1:e9:50:e3:b2:fa:13:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:DB:F0:F3:B3:5F:B2:A3:CD:C8:0B:DE:1D:89:CA:15:E0:6D:93
X509v3 Authority Key Identifier:
keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2e60::/32
Signature Algorithm: sha256WithRSAEncryption
6a:6e:33:ae:de:65:82:8c:33:2b:62:96:d1:6c:cb:54:8e:b4:
ef:48:91:50:80:54:e7:4f:66:d9:42:d8:e5:f3:3b:ec:af:9e:
d6:b7:5f:e8:68:09:3d:b2:ef:e7:65:57:29:5a:a9:5a:67:ab:
04:18:49:06:cb:c4:6a:bc:5e:e0:d0:bd:71:95:d0:d8:84:94:
88:70:40:b9:d2:d1:ac:61:3f:74:6d:05:cc:91:42:6e:e6:3f:
35:a8:12:bd:2c:ea:fd:e2:fe:79:3d:e4:2b:d6:12:19:79:ee:
85:e2:ef:5d:68:df:b0:40:37:34:99:33:aa:a6:58:5f:5c:e3:
7b:ef:12:e4:8b:8e:1c:47:75:38:1b:99:6d:a3:3e:bf:db:55:
92:85:94:3a:dd:b6:1d:37:77:cf:8b:fe:f0:15:a1:da:e7:be:
81:c9:52:d1:6e:aa:87:b8:9b:f7:8a:73:08:05:a9:9b:23:11:
e3:76:d2:7d:06:ea:2d:1a:70:a5:1f:a6:17:92:23:8e:e8:f6:
ea:ba:7f:ca:e3:af:12:59:2b:95:de:a6:51:72:88:cd:08:41:
8b:87:79:34:dc:fc:45:63:b5:09:75:ce:fc:35:bf:65:88:c2:
f2:6f:9c:ef:66:32:8c:a2:33:f1:58:af:18:92:03:37:e3:4f:
b4:ff:c1:23
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPlDx1D/c4va/Rnw9YcSOMMsx2OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3OTcwRUE4MUNG
RTQ0RUE4ODAeFw0yNTAyMDQxODM5NDdaFw0yNjAyMDMxODQ0NDdaMDMxMTAvBgNV
BAMTKDBFM0FEQkYwRjNCMzVGQjJBM0NEQzgwQkRFMUQ4OUNBMTVFMDZEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVi7UG9kY4yeebFt1IKkQN6tG
H5PgFzORtPUCZEFH+XEa2W8e3COrRR9I4lvnGE91Uub32jrT4fYgu2MeDp3dQ0Dv
TsWHapVRZQhwxiWXH0dtIjJrChkE0ZhJRlBvvdZoq1dFu11impWaTdw6xZ75aYok
66d+ltm1wTNKqTbflrIjZ5JrW299S2DHajnM914HE2e6RUzTNHXXlZmYXT+dWcqs
5lCrAf7nGdLA1v0fw5uk4NAgGyg8P7Ssu7kPy3x0yF1vC47QS6MRyQOY2D4B5FxQ
i/YQkLF+Q9EiHxL4WRXx1R7rBjeD5zNc5pK78vFuLKyZjdWo0elQ47L6E+11AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDjrb8POzX7KjzcgL3h2JyhXgbZMwHwYDVR0j
BBgwFoAU2MlHfKW/EVWr9RcHlw6oHP5E6ogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJF
QTgxRTJGOEM0MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1
NUFCRjUxNzA3OTcwRUE4MUNGRTQ0RUE4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEM5NDc3Q0E1QkYxMTU1QUJG
NTE3MDc5NzBFQTgxQ0ZFNDRFQTg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURBQzlCMkJBRDhCRUE4MUUyRjhD
NDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wLzMyMzgzMDMzM2EzMjY1MzYzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzNzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLmAw
DQYJKoZIhvcNAQELBQADggEBAGpuM67eZYKMMytiltFsy1SOtO9IkVCAVOdPZtlC
2OXzO+yvnta3X+hoCT2y7+dlVylaqVpnqwQYSQbLxGq8XuDQvXGV0NiElIhwQLnS
0axhP3RtBcyRQm7mPzWoEr0s6v3i/nk95CvWEhl57oXi711o37BANzSZM6qmWF9c
43vvEuSLjhxHdTgbmW2jPr/bVZKFlDrdth03d8+L/vAVodrnvoHJUtFuqoe4m/eK
cwgFqZsjEeN20n0G6i0acKUfpheSI47o9uq6f8rjrxJZK5XeplFyiM0IQYuHeTTc
/EVjtQl1zvw1v2WIwvJvnO9mMoyiM/FYrxiSAzfjT7T/wSM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:14 2025 by rpki-client