Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
File: 323830303a613031303a3a2f33322d313238203d3e203139313932.roa (raw, json)
Hash identifier: Yo1QOL+0dF9F/QW1JjBWasDJx303U91ivzrX/GVWZf8=
Subject key identifier: 0B:C2:8F:CE:B0:6B:81:78:99:25:3C:54:5F:07:85:12:57:80:2F:05
Certificate issuer: /CN=898729973C2338366642A6EE0E3DA10797106F7B
Certificate serial: 3199739E293F9DECA1CC9C8FCB381B3CA046D686
Authority key identifier: 89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
Signing time: Tue 04 Feb 2025 18:02:19 +0000
ROA not before: Tue 04 Feb 2025 17:57:19 +0000
ROA not after: Tue 03 Feb 2026 18:02:19 +0000
asID: 19192
IP address blocks: 2800:a010::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:99:73:9e:29:3f:9d:ec:a1:cc:9c:8f:cb:38:1b:3c:a0:46:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898729973C2338366642A6EE0E3DA10797106F7B
Validity
Not Before: Feb 4 17:57:19 2025 GMT
Not After : Feb 3 18:02:19 2026 GMT
Subject: CN=0BC28FCEB06B817899253C545F07851257802F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:47:89:95:48:a3:64:9c:e9:26:c7:e8:df:
23:f8:ba:fe:dd:37:67:f3:d8:f9:80:c9:8c:95:e0:
fe:24:6d:a6:78:b6:b3:09:3a:fb:b3:01:d9:9e:31:
4a:d7:66:f1:d5:b3:87:c4:c8:95:f3:2f:ec:8b:5b:
de:8e:60:77:ad:63:bd:b0:a7:3b:79:86:ef:bb:49:
13:70:3f:a7:24:9d:6d:f0:af:14:08:81:68:6b:79:
77:85:28:e1:0e:c7:2f:81:c2:ed:a2:31:88:c9:bb:
a3:fe:19:12:d3:70:b8:75:1a:d1:1e:4b:32:5a:72:
9d:06:66:d3:68:01:da:cc:6d:1e:7c:df:7c:c1:0f:
ba:eb:ca:90:9e:95:96:81:94:e8:7c:b1:8a:17:7d:
db:fa:cb:a9:e4:b6:5f:29:3f:53:c3:cd:84:17:3d:
31:06:c1:1d:3f:28:51:36:bd:48:7d:e9:d5:b4:63:
d0:66:5d:8e:0c:df:c1:6e:3c:80:82:f8:19:57:52:
5c:46:08:a9:cf:fd:63:0e:3d:bb:3c:a9:22:66:5e:
b5:0b:53:b1:5e:e7:03:f9:af:0a:1f:8e:04:8b:30:
1d:b8:66:e5:98:be:6b:c3:8a:72:e8:84:ca:b8:56:
51:7d:3c:69:a9:be:90:d2:51:52:3a:0d:17:a3:15:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:8F:CE:B0:6B:81:78:99:25:3C:54:5F:07:85:12:57:80:2F:05
X509v3 Authority Key Identifier:
keyid:89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:a010::/32
Signature Algorithm: sha256WithRSAEncryption
9f:81:68:2b:7f:6d:87:9e:2d:ad:cb:68:3a:e6:9e:78:cf:32:
e4:5e:79:71:f9:d3:ff:f1:aa:57:73:dc:33:f0:65:d0:06:c5:
0f:70:a1:1b:1c:0b:f8:c6:35:c6:ae:7c:02:05:7d:8d:5b:19:
4c:4d:54:7c:ff:6e:81:5b:7b:b0:53:7c:4f:40:76:6d:bb:11:
aa:68:e5:00:be:3c:31:b4:0a:5a:d0:ab:61:fe:ea:42:a2:fb:
19:9b:69:f2:3c:b4:43:fd:bd:c3:b4:49:a5:a2:0c:0a:82:7f:
63:45:e1:9e:b1:e2:98:12:e8:2a:f0:1f:53:73:10:1e:38:3a:
a9:f4:20:09:5d:93:f8:ee:45:f9:c2:5a:f5:ec:00:c0:7e:eb:
fb:93:c3:ed:60:2b:aa:51:65:1d:15:5d:b3:d1:89:5a:02:03:
20:19:6f:ad:a1:2c:75:0d:21:2e:5c:20:11:24:0f:7a:54:a4:
00:b4:fc:53:e5:fe:4c:e9:82:ad:a9:47:b6:e1:b4:24:1d:aa:
1d:fd:c1:91:a2:66:fd:e1:81:44:03:86:09:a2:9c:9d:d7:dd:
5b:79:d8:2d:e0:c2:3a:1c:f5:dc:b5:f6:21:80:fd:7c:44:25:
ce:10:66:3a:b5:58:06:91:ca:2a:cf:8f:d1:f3:6e:e0:86:68:
31:57:d8:89
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMZlznik/neyhzJyPyzgbPKBG1oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk4NzI5OTczQzIzMzgzNjY2NDJBNkVFMEUzREExMDc5
NzEwNkY3QjAeFw0yNTAyMDQxNzU3MTlaFw0yNjAyMDMxODAyMTlaMDMxMTAvBgNV
BAMTKDBCQzI4RkNFQjA2QjgxNzg5OTI1M0M1NDVGMDc4NTEyNTc4MDJGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUkeJlUijZJzpJsfo3yP4uv7d
N2fz2PmAyYyV4P4kbaZ4trMJOvuzAdmeMUrXZvHVs4fEyJXzL+yLW96OYHetY72w
pzt5hu+7SRNwP6cknW3wrxQIgWhreXeFKOEOxy+Bwu2iMYjJu6P+GRLTcLh1GtEe
SzJacp0GZtNoAdrMbR5833zBD7rrypCelZaBlOh8sYoXfdv6y6nktl8pP1PDzYQX
PTEGwR0/KFE2vUh96dW0Y9BmXY4M38FuPICC+BlXUlxGCKnP/WMOPbs8qSJmXrUL
U7Fe5wP5rwofjgSLMB24ZuWYvmvDinLohMq4VlF9PGmpvpDSUVI6DRejFTlPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUC8KPzrBrgXiZJTxUXweFEleALwUwHwYDVR0j
BBgwFoAUiYcplzwjODZmQqbuDj2hB5cQb3swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkU1Nzc2RjZGRTA2Qjk5QkUxRUJFNkE2ODFDMjBEMTZC
QzdCMzAzOTg3NDFBNTlDMEQyRTQ1MDcxQkE1NDZBLzAvODk4NzI5OTczQzIzMzgz
NjY2NDJBNkVFMEUzREExMDc5NzEwNkY3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTg3Mjk5NzNDMjMzODM2NjY0
MkE2RUUwRTNEQTEwNzk3MTA2RjdCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZFNTc3NkY2RkUwNkI5OUJFMUVCRTZBNjgxQzIwRDE2QkM3QjMwMzk4
NzQxQTU5QzBEMkU0NTA3MUJBNTQ2QS8wLzMyMzgzMDMwM2E2MTMwMzEzMDNhM2Ey
ZjMzMzIyZDMxMzIzODIwM2QzZTIwMzEzOTMxMzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAoBAw
DQYJKoZIhvcNAQELBQADggEBAJ+BaCt/bYeeLa3LaDrmnnjPMuReeXH50//xqldz
3DPwZdAGxQ9woRscC/jGNcaufAIFfY1bGUxNVHz/boFbe7BTfE9Adm27Eapo5QC+
PDG0ClrQq2H+6kKi+xmbafI8tEP9vcO0SaWiDAqCf2NF4Z6x4pgS6CrwH1NzEB44
Oqn0IAldk/juRfnCWvXsAMB+6/uTw+1gK6pRZR0VXbPRiVoCAyAZb62hLHUNIS5c
IBEkD3pUpAC0/FPl/kzpgq2pR7bhtCQdqh39wZGiZv3hgUQDhgminJ3X3Vt52C3g
wjoc9dy19iGA/XxEJc4QZjq1WAaRyirPj9HzbuCGaDFX2Ik=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client