Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
File: 323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa (raw, json)
Hash identifier: 0VX0V8iZ/Y9eNRbGH7YAUaeep4LLjoElIHj2q5b5+oQ=
Subject key identifier: 44:7D:28:AB:BC:11:28:6F:9D:C9:53:6A:FB:90:CF:60:96:F9:98:5B
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 7170F3611133CB334BF145047ED1D357C911D4C4
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
Signing time: Tue 05 Mar 2024 18:22:51 +0000
ROA not before: Tue 05 Mar 2024 18:17:51 +0000
ROA not after: Tue 04 Mar 2025 18:22:51 +0000
asID: 52442
IP address blocks: 2800:110:1018::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:70:f3:61:11:33:cb:33:4b:f1:45:04:7e:d1:d3:57:c9:11:d4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Mar 5 18:17:51 2024 GMT
Not After : Mar 4 18:22:51 2025 GMT
Subject: CN=447D28ABBC11286F9DC9536AFB90CF6096F9985B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:d1:7a:75:4b:cd:49:4e:59:f9:f7:b3:e5:
dd:af:6e:3c:82:cc:cd:ab:aa:22:de:ea:af:58:39:
2a:d9:36:56:98:1d:3c:86:67:a7:15:d6:66:14:8c:
fb:03:bb:76:2c:ed:19:64:ea:b1:31:1f:72:8d:13:
e9:c1:9a:fe:cd:d1:dd:4c:c2:ee:d8:98:69:54:e8:
06:ce:33:a2:f6:1f:7f:5b:81:2f:b7:e1:a9:56:3b:
16:8e:af:f9:23:d2:7d:db:cd:2b:12:21:a5:b6:08:
75:08:40:35:07:ca:ce:0e:52:26:53:19:d2:5b:e9:
d1:f1:a0:a7:56:fc:07:34:84:14:68:6f:ef:74:8b:
76:1e:0f:79:68:e6:48:72:d0:8a:6a:48:f0:b5:47:
50:99:67:b4:96:ad:db:b0:54:1a:c7:9f:63:48:31:
56:34:8d:7e:4d:a2:bc:5b:ae:0d:c6:ea:cf:a7:68:
8d:c7:8e:29:47:7b:d0:dd:8d:e0:a6:45:60:b9:3e:
e4:6a:eb:3d:60:53:f5:5b:b5:4a:8f:e6:3c:57:80:
d4:65:17:06:19:50:b6:51:14:ac:b6:27:42:76:99:
01:05:68:74:a1:7c:d7:f2:cf:06:5a:cc:d6:a4:a8:
a6:aa:cb:a9:7d:42:7a:fe:69:a2:ce:50:22:0c:d2:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:28:AB:BC:11:28:6F:9D:C9:53:6A:FB:90:CF:60:96:F9:98:5B
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:110:1018::/48
Signature Algorithm: sha256WithRSAEncryption
3c:84:ac:33:14:7b:75:c9:af:18:4a:62:ba:23:e7:fb:31:f8:
52:d4:d7:3a:e0:e0:7b:be:96:00:4f:a3:33:3c:6b:f9:87:77:
4f:c1:a3:fb:cd:9a:dc:eb:6c:cb:71:5a:a9:f8:58:1d:bb:56:
22:26:4a:86:e7:5d:14:bc:18:4c:01:4b:2f:7e:10:30:28:f3:
43:b7:ba:5f:ea:8c:ac:5a:4b:d8:aa:81:95:e2:c0:6a:2c:ba:
e2:eb:31:10:f9:eb:d9:17:fe:ac:ef:e2:7f:02:21:54:4e:2a:
bb:60:a3:8c:29:fe:b1:67:57:0c:e3:aa:db:85:df:6a:d5:f3:
55:2e:44:7e:88:a3:0a:36:c3:66:cc:cc:f0:42:74:48:d1:4d:
21:aa:8a:ab:e2:52:49:f6:96:6b:ca:35:f9:b1:bd:3f:8f:c5:
a8:eb:f9:fa:aa:8c:fe:1e:34:59:75:fc:05:fc:96:73:30:2d:
f0:58:f7:10:12:87:2e:c2:bd:38:5d:bb:91:0f:6d:50:f8:c8:
a2:76:18:23:f5:c0:49:f4:af:7c:c6:c7:5b:c2:1b:29:a7:90:
cb:ce:ed:20:60:74:87:9c:08:70:e4:89:74:4d:3f:29:3e:63:
c6:20:aa:89:b9:79:c4:c0:e5:31:84:2d:39:32:71:d7:f9:2a:
00:44:d8:8b
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUcXDzYREzyzNL8UUEftHTV8kR1MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNDAzMDUxODE3NTFaFw0yNTAzMDQxODIyNTFaMDMxMTAvBgNV
BAMTKDQ0N0QyOEFCQkMxMTI4NkY5REM5NTM2QUZCOTBDRjYwOTZGOTk4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstNF6dUvNSU5Z+fez5d2vbjyC
zM2rqiLe6q9YOSrZNlaYHTyGZ6cV1mYUjPsDu3Ys7Rlk6rExH3KNE+nBmv7N0d1M
wu7YmGlU6AbOM6L2H39bgS+34alWOxaOr/kj0n3bzSsSIaW2CHUIQDUHys4OUiZT
GdJb6dHxoKdW/Ac0hBRob+90i3YeD3lo5khy0IpqSPC1R1CZZ7SWrduwVBrHn2NI
MVY0jX5Norxbrg3G6s+naI3HjilHe9DdjeCmRWC5PuRq6z1gU/VbtUqP5jxXgNRl
FwYZULZRFKy2J0J2mQEFaHShfNfyzwZazNakqKaqy6l9Qnr+aaLOUCIM0pndAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQURH0oq7wRKG+dyVNq+5DPYJb5mFswHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMyMzgzMDMwM2EzMTMxMzAzYTMxMzAz
MTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzQzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAARAQGDANBgkqhkiG9w0BAQsFAAOCAQEAPISsMxR7dcmvGEpiuiPn+zH4UtTX
OuDge76WAE+jMzxr+Yd3T8Gj+82a3Otsy3FaqfhYHbtWIiZKhuddFLwYTAFLL34Q
MCjzQ7e6X+qMrFpL2KqBleLAaiy64usxEPnr2Rf+rO/ifwIhVE4qu2CjjCn+sWdX
DOOq24XfatXzVS5EfoijCjbDZszM8EJ0SNFNIaqKq+JSSfaWa8o1+bG9P4/FqOv5
+qqM/h40WXX8BfyWczAt8Fj3EBKHLsK9OF27kQ9tUPjIonYYI/XASfSvfMbHW8Ib
KaeQy87tIGB0h5wIcOSJdE0/KT5jxiCqibl5xMDlMYQtOTJx1/kqAETYiw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:13:17 2025 by rpki-client