Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: ZukWfkOiJBrjj/a7LFNS0Jq32EyYlJOsfygz9HBiatI=
Subject key identifier: 05:56:49:F2:5E:66:03:1D:BD:B5:0A:C1:DB:BA:39:C5:9E:5F:CD:31
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 48D199778CF63F59133CF654875B68F1C0D716F0
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 05 Mar 2024 18:16:08 +0000
ROA not before: Tue 05 Mar 2024 18:11:08 +0000
ROA not after: Tue 04 Mar 2025 18:16:08 +0000
asID: 262191
IP address blocks: 2800:b70:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d1:99:77:8c:f6:3f:59:13:3c:f6:54:87:5b:68:f1:c0:d7:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Mar 5 18:11:08 2024 GMT
Not After : Mar 4 18:16:08 2025 GMT
Subject: CN=055649F25E66031DBDB50AC1DBBA39C59E5FCD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:a2:a1:10:81:5d:ae:ad:59:4f:9a:ba:4a:
43:9e:ac:76:e4:83:3c:07:13:b7:b9:f9:3f:af:d0:
98:88:75:97:f9:53:2e:28:fb:37:69:28:a9:35:94:
71:e4:df:4e:f9:ee:7b:59:3f:ed:95:59:2e:46:fe:
e6:db:05:7c:64:60:99:40:c8:07:0f:af:b0:72:a9:
88:71:ed:ce:81:e0:8e:fd:8b:84:2d:9b:4c:e0:59:
bf:aa:55:9a:7f:91:3d:6b:88:da:a2:4c:5d:d9:16:
df:b0:2e:16:4e:53:79:13:9e:cc:55:96:40:02:ba:
db:c2:20:14:02:58:d0:ce:1c:16:af:0b:84:4a:fd:
33:6d:b2:21:cf:fa:9e:91:63:32:ad:d9:27:bc:83:
51:74:82:7e:35:c8:54:a4:94:d0:eb:23:37:f7:09:
30:72:29:83:22:3f:e1:ee:2a:2d:48:8b:c4:01:24:
ca:16:6d:a9:01:7b:ac:22:aa:ca:28:5d:d4:57:41:
9c:4f:13:f1:9e:c1:59:f7:b7:43:71:05:73:7a:89:
82:c8:09:09:53:02:f7:cf:66:24:bd:be:f5:73:f4:
1f:11:16:a6:99:d6:a5:f8:45:e8:2f:8f:80:9d:e4:
b5:2c:43:85:2a:05:04:29:46:f6:1d:53:7c:1f:12:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:49:F2:5E:66:03:1D:BD:B5:0A:C1:DB:BA:39:C5:9E:5F:CD:31
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:15::/48
Signature Algorithm: sha256WithRSAEncryption
70:75:e6:1d:d1:a8:53:eb:01:a1:db:bd:78:52:04:5f:92:d9:
d7:64:7e:52:10:25:4f:5d:ca:63:f2:11:1c:02:8b:aa:54:c0:
9c:2a:e4:4c:9e:7b:10:e2:b2:38:e1:c6:12:81:27:c2:41:e0:
17:e9:9a:1f:2d:2e:ad:2f:65:9e:68:de:ec:fa:51:a6:04:16:
4a:f9:bd:95:e3:81:22:5e:85:57:ff:fd:0b:49:42:2d:15:e6:
cf:c2:29:8c:7d:a5:9b:64:5b:a2:9e:2c:e8:d4:19:d0:ba:86:
f5:de:70:09:58:49:25:92:94:b3:45:c6:ef:48:ae:4a:ca:ea:
a7:99:03:34:52:24:f5:90:d9:65:d2:56:01:26:0b:8a:6d:08:
e7:d0:23:3f:cd:2e:4c:a4:b1:66:6e:50:ee:d4:3e:43:64:40:
28:99:4e:87:37:31:2b:62:90:18:3b:43:b1:a1:ac:e3:05:1b:
b6:99:fb:72:12:46:43:cf:57:6a:8f:c7:1b:9b:51:d3:b9:54:
51:83:b8:34:de:14:d3:50:de:35:b3:58:a3:2a:3c:49:5a:9e:
8f:b5:43:ef:ac:95:ff:81:82:18:21:52:a3:c3:d7:44:13:9d:
40:d8:82:77:c3:2e:6c:7a:f2:ed:9b:81:ea:9f:07:38:8d:82:
c8:e2:ba:38
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUSNGZd4z2P1kTPPZUh1to8cDXFvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMDhaFw0yNTAzMDQxODE2MDhaMDMxMTAvBgNV
BAMTKDA1NTY0OUYyNUU2NjAzMURCREI1MEFDMURCQkEzOUM1OUU1RkNEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWoaKhEIFdrq1ZT5q6SkOerHbk
gzwHE7e5+T+v0JiIdZf5Uy4o+zdpKKk1lHHk30757ntZP+2VWS5G/ubbBXxkYJlA
yAcPr7ByqYhx7c6B4I79i4Qtm0zgWb+qVZp/kT1riNqiTF3ZFt+wLhZOU3kTnsxV
lkACutvCIBQCWNDOHBavC4RK/TNtsiHP+p6RYzKt2Se8g1F0gn41yFSklNDrIzf3
CTByKYMiP+HuKi1Ii8QBJMoWbakBe6wiqsooXdRXQZxPE/GewVn3t0NxBXN6iYLI
CQlTAvfPZiS9vvVz9B8RFqaZ1qX4Regvj4Cd5LUsQ4UqBQQpRvYdU3wfEvMNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUBVZJ8l5mAx29tQrB27o5xZ5fzTEwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwABUwDQYJKoZIhvcNAQELBQADggEBAHB15h3RqFPrAaHbvXhSBF+S2ddkflIQ
JU9dymPyERwCi6pUwJwq5EyeexDisjjhxhKBJ8JB4Bfpmh8tLq0vZZ5o3uz6UaYE
Fkr5vZXjgSJehVf//QtJQi0V5s/CKYx9pZtkW6KeLOjUGdC6hvXecAlYSSWSlLNF
xu9IrkrK6qeZAzRSJPWQ2WXSVgEmC4ptCOfQIz/NLkyksWZuUO7UPkNkQCiZToc3
MStikBg7Q7GhrOMFG7aZ+3ISRkPPV2qPxxubUdO5VFGDuDTeFNNQ3jWzWKMqPEla
no+1Q++slf+BghghUqPD10QTnUDYgnfDLmx68u2bgeqfBziNgsjiujg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:52:15 2025 by rpki-client