Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa
File: 323830313a3130343a3a2f34302d3437203d3e203237383238.roa (raw, json)
Hash identifier: U0g+ZhC8/zG80aq7e5Hpc9RnzXpIMukrBY3+kAVFjYE=
Subject key identifier: 29:23:1B:4D:5B:4F:6E:7B:FB:A7:3D:9C:54:71:46:F1:C8:FB:8A:C0
Certificate issuer: /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial: 237CE5841D41B20539961B8E95ECA422DD825C8C
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa
Signing time: Tue 04 Feb 2025 18:40:45 +0000
ROA not before: Tue 04 Feb 2025 18:35:45 +0000
ROA not after: Tue 03 Feb 2026 18:40:45 +0000
asID: 27828
IP address blocks: 2801:104::/40 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7c:e5:84:1d:41:b2:05:39:96:1b:8e:95:ec:a4:22:dd:82:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
Validity
Not Before: Feb 4 18:35:45 2025 GMT
Not After : Feb 3 18:40:45 2026 GMT
Subject: CN=29231B4D5B4F6E7BFBA73D9C547146F1C8FB8AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:db:1e:b4:0c:56:24:9b:28:b5:9f:71:98:
0c:9f:84:a0:7b:ba:8e:24:87:4e:b3:94:5b:5e:d4:
2c:74:bb:b0:8b:14:ce:fe:a9:e8:b5:cb:a9:d3:96:
3a:05:3c:49:6d:d0:40:bd:81:97:ea:c4:ce:ad:c6:
ce:be:07:66:14:6d:85:e4:15:fb:e8:9f:1e:ed:96:
e3:4b:e9:a3:4b:c4:7f:e6:72:01:86:0e:e3:19:12:
2c:64:10:59:5d:5b:bb:27:5e:0b:89:b1:39:30:20:
a0:dc:b1:e8:14:d9:83:0d:08:b2:cd:62:00:2c:bd:
9c:54:0a:87:95:e9:0e:88:a2:c4:26:0c:7b:d3:39:
dc:f0:4e:a6:5d:ba:fa:64:98:39:00:3f:41:dc:a8:
f2:9d:2f:9a:6c:c9:9b:e0:fa:05:88:d4:a9:7a:8d:
fd:38:7f:a5:72:c4:8a:8a:de:6b:a9:9f:15:fb:f9:
13:e3:81:0c:77:d1:eb:bb:ad:17:a5:7d:a6:f4:10:
31:86:01:f2:6b:d9:14:97:5d:a0:b6:47:de:25:d8:
a1:07:be:77:01:f3:a0:34:a8:cd:49:63:50:60:49:
6b:4a:43:96:04:05:c7:bd:40:ad:e0:cc:96:f0:40:
f0:fc:67:82:a3:ae:1c:76:cc:1a:92:3c:1c:c5:f1:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:23:1B:4D:5B:4F:6E:7B:FB:A7:3D:9C:54:71:46:F1:C8:FB:8A:C0
X509v3 Authority Key Identifier:
keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:104::/40
Signature Algorithm: sha256WithRSAEncryption
09:3e:00:58:81:b4:1a:2a:5b:3b:aa:86:12:88:39:9a:be:0d:
4e:33:ec:cc:05:3f:82:fd:2f:d2:9a:32:ae:00:40:8c:91:8d:
4f:83:43:2c:b4:46:4a:2f:17:08:9a:e1:2c:5f:11:f5:c4:a5:
6b:16:29:f9:62:9c:c2:fa:a2:42:37:4c:23:99:19:b3:1b:46:
9c:da:e4:30:14:a5:44:0e:12:12:23:e5:2c:06:8c:14:ba:d6:
37:7c:a2:cf:97:47:c7:a1:e5:48:b6:26:d4:92:1b:0c:63:6f:
bf:e4:0d:8d:35:70:ff:cb:85:0b:03:b2:5e:a6:85:86:7b:d9:
09:d2:07:a9:84:23:81:f5:d1:c0:b7:34:2d:1b:df:ba:40:e5:
c1:57:52:5d:30:d7:51:ef:e3:33:90:8e:5c:3d:2f:82:b3:f1:
26:59:4a:cf:f7:d7:82:db:36:99:3c:69:39:1e:94:af:21:be:
f6:39:cd:88:80:d9:f9:4c:7f:66:39:c8:72:db:01:65:d9:36:
88:ef:46:af:5f:e7:3d:19:90:9e:63:d5:ae:d7:63:01:83:92:
ff:1f:a7:1b:7c:a8:27:cf:15:18:2d:3d:76:eb:52:d1:29:1a:
c5:03:c0:23:49:22:31:ff:c3:7e:7c:9b:7b:12:ce:6a:93:ce:
3c:7f:68:aa
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUI3zlhB1BsgU5lhuOleykIt2CXIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNTAyMDQxODM1NDVaFw0yNjAyMDMxODQwNDVaMDMxMTAvBgNV
BAMTKDI5MjMxQjRENUI0RjZFN0JGQkE3M0Q5QzU0NzE0NkYxQzhGQjhBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB49setAxWJJsotZ9xmAyfhKB7
uo4kh06zlFte1Cx0u7CLFM7+qei1y6nTljoFPElt0EC9gZfqxM6txs6+B2YUbYXk
Ffvonx7tluNL6aNLxH/mcgGGDuMZEixkEFldW7snXguJsTkwIKDcsegU2YMNCLLN
YgAsvZxUCoeV6Q6IosQmDHvTOdzwTqZduvpkmDkAP0HcqPKdL5psyZvg+gWI1Kl6
jf04f6VyxIqK3mupnxX7+RPjgQx30eu7rRelfab0EDGGAfJr2RSXXaC2R94l2KEH
vncB86A0qM1JY1BgSWtKQ5YEBce9QK3gzJbwQPD8Z4Kjrhx2zBqSPBzF8btfAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKSMbTVtPbnv7pz2cVHFG8cj7isAwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzgzMDMxM2EzMTMwMzQzYTNhMmYz
NDMwMmQzNDM3MjAzZDNlMjAzMjM3MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBBAAwDQYJ
KoZIhvcNAQELBQADggEBAAk+AFiBtBoqWzuqhhKIOZq+DU4z7MwFP4L9L9KaMq4A
QIyRjU+DQyy0RkovFwia4SxfEfXEpWsWKflinML6okI3TCOZGbMbRpza5DAUpUQO
EhIj5SwGjBS61jd8os+XR8eh5Ui2JtSSGwxjb7/kDY01cP/LhQsDsl6mhYZ72QnS
B6mEI4H10cC3NC0b37pA5cFXUl0w11Hv4zOQjlw9L4Kz8SZZSs/314LbNpk8aTke
lK8hvvY5zYiA2flMf2Y5yHLbAWXZNojvRq9f5z0ZkJ5j1a7XYwGDkv8fpxt8qCfP
FRgtPXbrUtEpGsUDwCNJIjH/w358m3sSzmqTzjx/aKo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:29 2025 by rpki-client