Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa
File: 323830313a323a3a2f33322d3332203d3e203137313437.roa (raw, json)
Hash identifier: kSK/41zWVoGpmBI3QiQXkjn7l5J6LNw+S3gvJMyCGCY=
Subject key identifier: 69:E6:52:71:B2:9E:36:20:F0:1F:87:D5:E0:FC:33:95:F5:80:DB:66
Certificate issuer: /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial: 7E0675B13A7295B753FED50356C95445972CCF9B
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa
Signing time: Tue 05 Mar 2024 17:49:09 +0000
ROA not before: Tue 05 Mar 2024 17:44:09 +0000
ROA not after: Tue 04 Mar 2025 17:49:09 +0000
asID: 17147
IP address blocks: 2801:2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:06:75:b1:3a:72:95:b7:53:fe:d5:03:56:c9:54:45:97:2c:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Validity
Not Before: Mar 5 17:44:09 2024 GMT
Not After : Mar 4 17:49:09 2025 GMT
Subject: CN=69E65271B29E3620F01F87D5E0FC3395F580DB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:58:34:c6:30:27:cf:08:fe:f3:b6:64:7b:
d0:fa:6f:e7:89:9e:e7:88:a7:fb:a4:74:c2:9c:98:
de:de:0b:02:45:c2:db:13:17:c8:79:be:b7:79:9b:
c4:04:a7:3f:b2:b7:fa:af:78:9c:a1:41:40:f9:80:
71:29:47:a7:71:a6:f6:27:2c:ab:4d:63:fb:38:fd:
e6:c9:d7:2d:b5:c9:09:86:10:4d:8d:91:5f:37:02:
2b:c1:17:d2:15:58:7e:bf:af:04:06:51:c9:11:f1:
56:96:df:8a:b9:a3:e3:76:d7:ce:d1:e6:54:4b:6f:
2c:26:52:a5:fd:59:ae:4e:f2:12:1e:16:85:6b:19:
c9:ae:99:d1:f2:83:f8:55:de:de:e1:a5:99:ed:51:
55:34:c5:ba:64:ac:6a:64:cf:d7:38:75:2e:b0:2a:
b9:13:34:47:a1:26:5a:ec:df:02:dd:5d:f7:87:e1:
c4:0e:05:35:46:d8:ac:72:91:89:7f:28:d2:fd:28:
df:f8:89:0f:1e:cf:8b:57:4e:8a:4b:12:73:9d:85:
2d:67:d8:3e:6d:dc:c5:84:af:18:ce:6a:df:2a:d4:
20:39:8d:b4:9e:c7:b7:5f:ad:cc:46:f3:5c:11:cf:
44:fa:55:a7:b1:1a:51:8e:c0:ef:97:48:02:ab:28:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:52:71:B2:9E:36:20:F0:1F:87:D5:E0:FC:33:95:F5:80:DB:66
X509v3 Authority Key Identifier:
keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:2::/32
Signature Algorithm: sha256WithRSAEncryption
62:10:21:58:0f:3a:ba:e3:7b:67:a5:ec:a6:32:6f:8b:62:b3:
f4:49:04:f7:56:98:c8:c9:30:b2:4f:5c:6e:11:ab:5b:1f:11:
86:f2:cf:e5:b1:b5:da:68:6e:e5:1a:24:fe:55:f2:6e:31:41:
1d:ee:98:af:59:39:eb:04:aa:80:2d:07:ef:9a:95:6e:ed:bc:
38:05:58:36:4e:50:8b:0a:9a:96:d4:69:ce:ec:9d:ff:f1:17:
af:5c:d2:28:02:ee:9a:51:90:c4:c6:9a:aa:3b:a3:63:22:87:
cf:ca:fa:7d:cf:91:c4:b4:5f:3d:c0:30:05:1d:4d:0e:09:59:
c3:f6:43:75:01:ae:8e:f6:2e:e9:75:0b:f3:1a:cb:af:a0:73:
80:9b:be:af:f7:14:f6:19:3a:aa:db:40:e6:7e:ea:30:b9:ac:
f8:a6:be:89:25:33:96:3a:0b:1f:b5:b9:b2:2a:e4:70:cc:2a:
fe:1f:0e:7c:87:e0:7e:83:56:42:69:5a:e9:01:8f:fb:39:60:
ac:b6:53:c9:67:69:32:8a:0d:79:89:5d:9b:04:9c:e8:97:d6:
01:43:1b:a3:c2:34:e9:f5:6b:c1:0a:65:1d:ff:de:a9:02:7f:
90:8e:44:15:bc:07:8a:48:04:bb:56:2d:6f:34:2d:8b:84:b9:
a2:3d:79:1e
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUfgZ1sTpylbdT/tUDVslURZcsz5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNDAzMDUxNzQ0MDlaFw0yNTAzMDQxNzQ5MDlaMDMxMTAvBgNV
BAMTKDY5RTY1MjcxQjI5RTM2MjBGMDFGODdENUUwRkMzMzk1RjU4MERCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ylg0xjAnzwj+87Zke9D6b+eJ
nueIp/ukdMKcmN7eCwJFwtsTF8h5vrd5m8QEpz+yt/qveJyhQUD5gHEpR6dxpvYn
LKtNY/s4/ebJ1y21yQmGEE2NkV83AivBF9IVWH6/rwQGUckR8VaW34q5o+N2187R
5lRLbywmUqX9Wa5O8hIeFoVrGcmumdHyg/hV3t7hpZntUVU0xbpkrGpkz9c4dS6w
KrkTNEehJlrs3wLdXfeH4cQOBTVG2KxykYl/KNL9KN/4iQ8ez4tXTopLEnOdhS1n
2D5t3MWErxjOat8q1CA5jbSex7dfrcxG81wRz0T6VaexGlGOwO+XSAKrKOEnAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUaeZScbKeNiDwH4fV4PwzlfWA22YwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMyMzgzMDMxM2EzMjNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzczMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAQACMA0GCSqGSIb3
DQEBCwUAA4IBAQBiECFYDzq643tnpeymMm+LYrP0SQT3VpjIyTCyT1xuEatbHxGG
8s/lsbXaaG7lGiT+VfJuMUEd7pivWTnrBKqALQfvmpVu7bw4BVg2TlCLCpqW1GnO
7J3/8RevXNIoAu6aUZDExpqqO6NjIofPyvp9z5HEtF89wDAFHU0OCVnD9kN1Aa6O
9i7pdQvzGsuvoHOAm76v9xT2GTqq20Dmfuowuaz4pr6JJTOWOgsftbmyKuRwzCr+
Hw58h+B+g1ZCaVrpAY/7OWCstlPJZ2kyig15iV2bBJzol9YBQxujwjTp9WvBCmUd
/96pAn+QjkQVvAeKSAS7Vi1vNC2LhLmiPXke
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:01 2025 by rpki-client