Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa
File: 323830333a623831303a3a2f33322d3332203d3e20323731393733.roa (raw, json)
Hash identifier: a2vhpQB5GpUaPVP2siE1NJw9bRpT2CAKJdU6DLAjXek=
Subject key identifier: 9A:2D:FE:0C:35:E7:17:9C:C1:2E:45:68:48:B1:65:5B:B6:8E:C7:77
Certificate issuer: /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Certificate serial: 6C72514BDE00562930C03659F3B7E2EA364FCBEA
Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa
Signing time: Tue 05 Mar 2024 18:22:37 +0000
ROA not before: Tue 05 Mar 2024 18:17:37 +0000
ROA not after: Tue 04 Mar 2025 18:22:37 +0000
asID: 271973
IP address blocks: 2803:b810::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:72:51:4b:de:00:56:29:30:c0:36:59:f3:b7:e2:ea:36:4f:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Validity
Not Before: Mar 5 18:17:37 2024 GMT
Not After : Mar 4 18:22:37 2025 GMT
Subject: CN=9A2DFE0C35E7179CC12E456848B1655BB68EC777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:e2:84:8f:c0:6a:ca:5d:a7:43:a4:63:17:
84:ee:25:1b:1c:ba:10:80:63:af:db:58:1d:d4:7b:
86:22:9b:ed:c6:a3:63:a0:95:dd:cc:66:0b:36:4e:
77:f8:62:2f:69:32:8d:eb:c2:56:57:e9:7a:45:86:
3c:f0:7d:12:6c:cd:96:17:2f:95:27:99:3d:54:b7:
26:2e:f5:29:7c:02:d8:5b:68:95:da:6e:41:02:fd:
ee:76:6d:71:5a:4e:1f:07:99:81:bf:de:18:da:87:
81:cb:e6:29:2e:35:33:95:a6:34:77:49:3b:63:b7:
bc:f1:77:14:68:d5:4d:d7:38:32:7a:c4:db:7d:72:
62:92:f2:2e:3f:08:8d:86:4f:df:fd:bd:9e:91:b8:
7e:56:98:7b:1c:79:a2:8a:26:9e:7f:4b:24:5f:71:
85:6d:ab:b8:5d:0a:04:67:ca:f7:1d:05:94:b4:73:
8e:31:20:f8:5e:ad:ef:f7:7b:f1:f6:01:0e:2f:1f:
24:3b:83:a0:55:7f:7c:7f:6e:45:ab:09:31:6a:5d:
dc:4c:fc:9d:c4:3f:de:4b:4f:04:10:8e:40:0c:7f:
19:17:27:99:66:66:35:21:b0:57:fe:9d:46:1a:69:
7d:74:87:ba:d3:b4:b7:8a:1b:ea:2c:51:0c:b3:59:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:FE:0C:35:E7:17:9C:C1:2E:45:68:48:B1:65:5B:B6:8E:C7:77
X509v3 Authority Key Identifier:
keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b810::/32
Signature Algorithm: sha256WithRSAEncryption
4f:e0:5e:90:2b:39:3e:29:91:55:a6:a9:05:1e:72:7e:fd:b2:
c2:66:10:91:95:99:be:ab:3a:fe:d9:38:22:41:0f:38:cb:3a:
3a:e9:a8:1d:52:a8:e7:36:89:b5:8f:66:16:d2:67:ee:ee:7e:
8d:9e:57:3a:f5:77:08:67:91:2e:40:b9:39:21:b7:85:54:fb:
78:ad:b9:11:51:45:dc:be:64:37:15:fe:d9:e3:d8:f4:9e:59:
d3:71:41:7f:84:d6:53:a1:c2:e3:e6:ca:b6:d3:92:86:69:d5:
0d:73:f2:e2:25:43:3b:77:4a:e2:f7:0d:d0:a4:31:44:77:d0:
17:ad:01:f7:e3:04:6a:2d:70:30:a6:2a:ff:be:7d:49:15:32:
89:a2:e4:46:bd:fb:4c:fa:55:5f:5b:50:a3:ea:3e:5f:99:02:
ca:71:a6:b8:57:17:9d:e3:b7:4a:27:78:0c:c3:14:d0:34:3b:
de:fa:4e:4c:36:06:90:69:6c:dd:77:f4:67:9e:13:c0:5b:00:
9b:e2:b7:69:8f:0c:53:8d:cf:3f:19:d2:78:75:e3:b6:18:f2:
ab:eb:29:97:8b:12:16:a2:b8:bd:5c:a0:90:e7:18:01:d5:ca:
6d:b8:7f:d5:5b:e8:33:73:f4:11:5d:60:bc:ed:55:0e:eb:4e:
01:42:2d:2c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbHJRS94AVikwwDZZ87fi6jZPy+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY0QTExQTlBNzdFNTI5OEQ2OTY3MjhDNjc5NkVGN0I3
QjJERTdEMDAeFw0yNDAzMDUxODE3MzdaFw0yNTAzMDQxODIyMzdaMDMxMTAvBgNV
BAMTKDlBMkRGRTBDMzVFNzE3OUNDMTJFNDU2ODQ4QjE2NTVCQjY4RUM3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkuKEj8Bqyl2nQ6RjF4TuJRsc
uhCAY6/bWB3Ue4Yim+3Go2Ogld3MZgs2Tnf4Yi9pMo3rwlZX6XpFhjzwfRJszZYX
L5UnmT1UtyYu9Sl8AthbaJXabkEC/e52bXFaTh8HmYG/3hjah4HL5ikuNTOVpjR3
STtjt7zxdxRo1U3XODJ6xNt9cmKS8i4/CI2GT9/9vZ6RuH5WmHsceaKKJp5/SyRf
cYVtq7hdCgRnyvcdBZS0c44xIPhere/3e/H2AQ4vHyQ7g6BVf3x/bkWrCTFqXdxM
/J3EP95LTwQQjkAMfxkXJ5lmZjUhsFf+nUYaaX10h7rTtLeKG+osUQyzWZNTAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmi3+DDXnF5zBLkVoSLFlW7aOx3cwHwYDVR0j
BBgwFoAU1koRqad+UpjWlnKMZ5bve3st59AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTQ0Njc1NTkzRkNCNTYyMDEwMDQzOUNDODY0RjE5QzQw
ODYzNDNEMjFCMjBDOUVGNDI3OUM4Q0I1MDU5MDYwLzAvRDY0QTExQTlBNzdFNTI5
OEQ2OTY3MjhDNjc5NkVGN0I3QjJERTdEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjRBMTFBOUE3N0U1Mjk4RDY5
NjcyOEM2Nzk2RUY3QjdCMkRFN0QwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U0NDY3NTU5M0ZDQjU2MjAxMDA0MzlDQzg2NEYxOUM0MDg2MzQzRDIx
QjIwQzlFRjQyNzlDOENCNTA1OTA2MC8wLzMyMzgzMDMzM2E2MjM4MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDuBAw
DQYJKoZIhvcNAQELBQADggEBAE/gXpArOT4pkVWmqQUecn79ssJmEJGVmb6rOv7Z
OCJBDzjLOjrpqB1SqOc2ibWPZhbSZ+7ufo2eVzr1dwhnkS5AuTkht4VU+3ituRFR
Rdy+ZDcV/tnj2PSeWdNxQX+E1lOhwuPmyrbTkoZp1Q1z8uIlQzt3SuL3DdCkMUR3
0BetAffjBGotcDCmKv++fUkVMomi5Ea9+0z6VV9bUKPqPl+ZAspxprhXF53jt0on
eAzDFNA0O976Tkw2BpBpbN139GeeE8BbAJvit2mPDFONzz8Z0nh147YY8qvrKZeL
EhaiuL1coJDnGAHVym24f9Vb6DNz9BFdYLztVQ7rTgFCLSw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:00:21 2025 by rpki-client