Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4B063307741B77F8B436706D7BC4CCF2452C67299076B058EF55BC0775B534D/0/323830313a31333a653830303a3a2f34382d3438203d3e20323731393235.roa
File: 323830313a31333a653830303a3a2f34382d3438203d3e20323731393235.roa (raw, json)
Hash identifier: lrA4nqaVV1UQZNtdgh5Iy76WN1Dc5Vc5eWdttKy4i9E=
Subject key identifier: BA:C3:F4:17:C6:49:0E:90:61:96:57:64:3B:3F:FB:20:29:48:91:46
Certificate issuer: /CN=EF54A721A5B23CCD0658DC6EBDDF4A80FA80AC7B
Certificate serial: 36BABA8EC446DC055BB62BCBBAD71EB841C177A0
Authority key identifier: EF:54:A7:21:A5:B2:3C:CD:06:58:DC:6E:BD:DF:4A:80:FA:80:AC:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF54A721A5B23CCD0658DC6EBDDF4A80FA80AC7B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F4B063307741B77F8B436706D7BC4CCF2452C67299076B058EF55BC0775B534D/0/323830313a31333a653830303a3a2f34382d3438203d3e20323731393235.roa
Signing time: Tue 04 Feb 2025 18:04:41 +0000
ROA not before: Tue 04 Feb 2025 17:59:41 +0000
ROA not after: Tue 03 Feb 2026 18:04:41 +0000
asID: 271925
IP address blocks: 2801:13:e800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ba:ba:8e:c4:46:dc:05:5b:b6:2b:cb:ba:d7:1e:b8:41:c1:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF54A721A5B23CCD0658DC6EBDDF4A80FA80AC7B
Validity
Not Before: Feb 4 17:59:41 2025 GMT
Not After : Feb 3 18:04:41 2026 GMT
Subject: CN=BAC3F417C6490E90619657643B3FFB2029489146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:3b:52:fc:c6:f1:06:bd:f8:93:27:21:d5:
d7:7d:88:46:c6:18:12:f1:92:c4:60:c4:67:6f:92:
92:ea:5e:1b:74:b7:a9:79:45:73:c0:18:d1:ac:46:
a7:7e:a0:37:7a:29:00:41:d7:4e:56:07:c5:63:d7:
1b:c4:73:e5:ce:5b:18:26:90:f5:e5:8f:35:ac:f5:
1b:be:52:f3:61:75:bb:fb:cd:eb:34:45:78:f7:9f:
c2:4c:d9:d8:02:07:ca:47:e5:2a:e3:05:ef:c5:3f:
17:fe:34:e0:98:38:a8:c1:b9:8c:6a:98:9b:d9:0e:
68:a6:42:8d:83:23:0a:78:ab:67:1f:80:60:ce:9b:
a5:37:03:eb:9f:b7:75:7b:0c:7c:11:f1:a1:ab:4e:
00:7a:36:69:60:5c:23:45:ef:4d:4c:8e:5e:10:e1:
2c:63:fd:d5:3f:6a:fc:c6:d8:65:63:17:79:b9:6d:
28:07:88:4e:fc:7b:ee:d6:29:d9:7b:e1:a0:08:4b:
6b:8e:ad:2d:e0:3f:6d:db:05:58:f9:27:57:06:c3:
72:71:62:ac:5f:b3:2a:75:a6:e9:f3:88:f5:c2:cc:
e0:12:43:8d:0e:d3:d0:e3:ad:83:bd:fb:2f:37:df:
83:a4:00:65:97:11:a9:ea:d2:e1:1f:62:af:58:88:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:F4:17:C6:49:0E:90:61:96:57:64:3B:3F:FB:20:29:48:91:46
X509v3 Authority Key Identifier:
keyid:EF:54:A7:21:A5:B2:3C:CD:06:58:DC:6E:BD:DF:4A:80:FA:80:AC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F4B063307741B77F8B436706D7BC4CCF2452C67299076B058EF55BC0775B534D/0/EF54A721A5B23CCD0658DC6EBDDF4A80FA80AC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF54A721A5B23CCD0658DC6EBDDF4A80FA80AC7B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4B063307741B77F8B436706D7BC4CCF2452C67299076B058EF55BC0775B534D/0/323830313a31333a653830303a3a2f34382d3438203d3e20323731393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:13:e800::/48
Signature Algorithm: sha256WithRSAEncryption
03:91:07:3b:b2:4b:72:80:ab:a0:db:cd:4c:65:69:f0:49:36:
9e:ae:d1:10:80:cb:ba:b7:84:23:d0:bf:d3:1d:0c:6a:d7:53:
16:90:9c:bb:74:87:17:3b:f5:e7:89:fa:70:b3:f3:aa:0a:a3:
e9:65:43:d1:c8:6a:63:4a:0f:86:fb:dd:65:5b:41:2e:35:a8:
90:65:08:d4:02:de:c3:33:ac:a7:43:0f:30:6f:f6:09:be:91:
87:04:cd:46:3e:ac:71:cf:5c:ef:b4:bc:a6:54:a0:40:5e:e1:
33:fb:97:78:20:27:0b:c8:3a:a2:3e:9f:0c:a2:18:89:e9:10:
b7:74:49:f3:62:43:07:3d:4b:3d:bb:47:72:5f:c1:ec:b7:59:
14:5d:f7:6f:89:22:58:c9:b7:09:28:45:ae:e0:ad:df:34:43:
6c:b9:11:89:4f:e4:22:aa:61:1a:06:9a:8c:ca:f6:0d:43:f3:
73:8e:ff:a7:8f:4f:ea:63:db:7b:db:97:64:d0:ca:dc:5b:ac:
98:c4:30:0f:e4:69:37:69:7b:1b:fb:b1:87:50:d0:ab:c2:b8:
7d:63:81:8d:cc:8b:55:14:b8:d9:10:98:11:a3:1a:d8:e3:1d:
9f:d4:a9:d5:aa:0f:2c:d4:06:5f:32:a5:2b:03:42:8a:01:35:
df:3f:8c:25
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUNrq6jsRG3AVbtivLutceuEHBd6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY1NEE3MjFBNUIyM0NDRDA2NThEQzZFQkRERjRBODBG
QTgwQUM3QjAeFw0yNTAyMDQxNzU5NDFaFw0yNjAyMDMxODA0NDFaMDMxMTAvBgNV
BAMTKEJBQzNGNDE3QzY0OTBFOTA2MTk2NTc2NDNCM0ZGQjIwMjk0ODkxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbjtS/MbxBr34kych1dd9iEbG
GBLxksRgxGdvkpLqXht0t6l5RXPAGNGsRqd+oDd6KQBB105WB8Vj1xvEc+XOWxgm
kPXljzWs9Ru+UvNhdbv7zes0RXj3n8JM2dgCB8pH5SrjBe/FPxf+NOCYOKjBuYxq
mJvZDmimQo2DIwp4q2cfgGDOm6U3A+uft3V7DHwR8aGrTgB6NmlgXCNF701Mjl4Q
4Sxj/dU/avzG2GVjF3m5bSgHiE78e+7WKdl74aAIS2uOrS3gP23bBVj5J1cGw3Jx
Yqxfsyp1punziPXCzOASQ40O09DjrYO9+y8334OkAGWXEanq0uEfYq9YiDR/AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUusP0F8ZJDpBhlldkOz/7IClIkUYwHwYDVR0j
BBgwFoAU71SnIaWyPM0GWNxuvd9KgPqArHswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNEIwNjMzMDc3NDFCNzdGOEI0MzY3MDZEN0JDNENDRjI0
NTJDNjcyOTkwNzZCMDU4RUY1NUJDMDc3NUI1MzRELzAvRUY1NEE3MjFBNUIyM0ND
RDA2NThEQzZFQkRERjRBODBGQTgwQUM3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjU0QTcyMUE1QjIzQ0NEMDY1
OERDNkVCRERGNEE4MEZBODBBQzdCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjRCMDYzMzA3NzQxQjc3RjhCNDM2NzA2RDdCQzRDQ0YyNDUyQzY3Mjk5
MDc2QjA1OEVGNTVCQzA3NzVCNTM0RC8wLzMyMzgzMDMxM2EzMTMzM2E2NTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMTM5MzIzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABPoADANBgkqhkiG9w0BAQsFAAOCAQEAA5EHO7JLcoCroNvNTGVp8Ek2nq7R
EIDLureEI9C/0x0MatdTFpCcu3SHFzv154n6cLPzqgqj6WVD0chqY0oPhvvdZVtB
LjWokGUI1ALewzOsp0MPMG/2Cb6RhwTNRj6scc9c77S8plSgQF7hM/uXeCAnC8g6
oj6fDKIYiekQt3RJ82JDBz1LPbtHcl/B7LdZFF33b4kiWMm3CShFruCt3zRDbLkR
iU/kIqphGgaajMr2DUPzc47/p49P6mPbe9uXZNDK3FusmMQwD+RpN2l7G/uxh1DQ
q8K4fWOBjcyLVRS42RCYEaMa2OMdn9Sp1aoPLNQGXzKlKwNCigE13z+MJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:39 2025 by rpki-client