Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa
File: 323830333a626232303a3a2f33322d3438203d3e20323636373532.roa (raw, json)
Hash identifier: rhNCgBlsLwOK0QQo1KU14Fo/iGglxtIlmTD7qgSABhE=
Subject key identifier: 84:C3:98:C4:C7:28:4D:5F:64:13:36:57:6E:BE:E4:C7:F2:AB:75:0B
Certificate issuer: /CN=211F35A7F8779E638FF375C42733BBC7754A8446
Certificate serial: 1DBE0026E43A6A968E089AEF91E23BE7A7B66016
Authority key identifier: 21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa
Signing time: Tue 05 Mar 2024 18:13:53 +0000
ROA not before: Tue 05 Mar 2024 18:08:53 +0000
ROA not after: Tue 04 Mar 2025 18:13:53 +0000
asID: 266752
IP address blocks: 2803:bb20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:be:00:26:e4:3a:6a:96:8e:08:9a:ef:91:e2:3b:e7:a7:b6:60:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211F35A7F8779E638FF375C42733BBC7754A8446
Validity
Not Before: Mar 5 18:08:53 2024 GMT
Not After : Mar 4 18:13:53 2025 GMT
Subject: CN=84C398C4C7284D5F641336576EBEE4C7F2AB750B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:95:a5:ec:a4:7e:2a:73:81:c6:d0:2c:1e:
58:ee:d7:84:69:5e:4c:57:a2:0e:da:a3:bf:b6:5d:
f2:7c:f1:34:6c:ee:13:ba:72:5d:8f:02:ee:cf:91:
d1:b6:e9:d1:c2:54:de:9f:37:75:6f:4a:3b:7d:e6:
a6:f4:f5:e8:a7:60:8d:b0:38:65:c1:91:4b:da:6b:
50:fe:d8:93:5b:1b:7d:e5:db:0a:ea:48:16:31:a4:
b6:e7:6a:c1:f8:95:6e:62:22:82:c6:c7:97:75:9b:
41:1a:8b:d1:90:ed:1e:46:0c:6a:82:b6:c4:0f:4f:
d9:25:5f:fc:1b:2f:d7:35:46:f2:f2:77:30:02:46:
75:8e:d9:11:3f:64:71:d8:21:25:ea:b6:d4:a1:75:
b0:f8:4c:1c:7d:0a:84:29:88:97:82:4e:f1:f4:ba:
93:3a:a6:d5:54:02:d1:59:20:ad:d3:8a:51:82:57:
94:e9:c6:8e:33:22:9b:0b:6e:41:3e:64:dc:3b:82:
bc:21:ae:94:24:18:04:5b:22:4c:be:8e:2d:c7:53:
66:ac:cd:a9:a0:76:0d:6e:7d:11:fc:36:88:d9:96:
58:8f:35:97:64:af:1a:aa:1f:29:6c:47:ce:2f:d2:
fa:19:9b:83:63:ba:c7:e4:04:db:54:79:de:61:99:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:98:C4:C7:28:4D:5F:64:13:36:57:6E:BE:E4:C7:F2:AB:75:0B
X509v3 Authority Key Identifier:
keyid:21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:bb20::/32
Signature Algorithm: sha256WithRSAEncryption
ae:e3:c4:4c:83:02:0a:b9:b1:23:05:33:9c:a9:4b:65:76:fb:
41:75:85:76:a1:22:84:8a:e4:0e:90:11:1b:f8:13:d7:27:49:
38:6d:a6:bc:ad:8d:79:85:f5:ec:fa:67:e8:aa:ab:2f:46:fb:
2a:6d:0b:c4:86:47:9d:31:9f:a1:bc:a7:18:42:06:04:f4:84:
d0:dc:99:a9:6e:af:06:58:40:f7:9f:02:41:a5:1d:91:81:d5:
52:b0:af:b6:e0:3d:25:42:07:5d:f7:d9:97:cb:45:6b:70:b5:
80:12:ed:2b:c9:c4:d6:6c:e1:88:53:0a:03:65:1c:3b:fc:3c:
98:00:f2:5c:d3:dc:1c:7c:a6:10:e5:d9:b0:1d:52:4c:43:e6:
a4:aa:cd:31:b9:cd:7e:cf:86:4f:c3:b5:57:07:fd:41:cc:b1:
2c:91:14:ea:1b:db:fc:22:5d:ba:67:fa:73:df:eb:b6:9d:9e:
26:1f:01:12:32:13:56:fe:e0:8a:02:a2:63:3b:b6:62:c6:fe:
61:25:86:52:b3:eb:b6:db:95:95:81:f0:00:eb:30:a0:a4:09:
6f:6b:6a:52:7c:67:59:e3:b9:b5:3d:5f:6b:35:3f:35:4f:cb:
ab:15:1e:25:68:29:7f:2f:f7:51:38:09:b3:1f:c1:90:35:72:
45:86:2d:9a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHb4AJuQ6apaOCJrvkeI756e2YBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExRjM1QTdGODc3OUU2MzhGRjM3NUM0MjczM0JCQzc3
NTRBODQ0NjAeFw0yNDAzMDUxODA4NTNaFw0yNTAzMDQxODEzNTNaMDMxMTAvBgNV
BAMTKDg0QzM5OEM0QzcyODRENUY2NDEzMzY1NzZFQkVFNEM3RjJBQjc1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSZWl7KR+KnOBxtAsHlju14Rp
XkxXog7ao7+2XfJ88TRs7hO6cl2PAu7PkdG26dHCVN6fN3VvSjt95qb09einYI2w
OGXBkUvaa1D+2JNbG33l2wrqSBYxpLbnasH4lW5iIoLGx5d1m0Eai9GQ7R5GDGqC
tsQPT9klX/wbL9c1RvLydzACRnWO2RE/ZHHYISXqttShdbD4TBx9CoQpiJeCTvH0
upM6ptVUAtFZIK3TilGCV5Tpxo4zIpsLbkE+ZNw7grwhrpQkGARbIky+ji3HU2as
zamgdg1ufRH8NojZlliPNZdkrxqqHylsR84v0voZm4NjusfkBNtUed5hmTQzAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUhMOYxMcoTV9kEzZXbr7kx/KrdQswHwYDVR0j
BBgwFoAUIR81p/h3nmOP83XEJzO7x3VKhEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNUE0MjNDM0M1MDk0OUYxMDY4NDRCNzEyQkM0QkEwQjcz
ODk1RUZEQjdERkUyQUMzMkY4MTQzOEVFMDA4MTQwLzAvMjExRjM1QTdGODc3OUU2
MzhGRjM3NUM0MjczM0JCQzc3NTRBODQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTFGMzVBN0Y4Nzc5RTYzOEZG
Mzc1QzQyNzMzQkJDNzc1NEE4NDQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjVBNDIzQzNDNTA5NDlGMTA2ODQ0QjcxMkJDNEJBMEI3Mzg5NUVGREI3
REZFMkFDMzJGODE0MzhFRTAwODE0MC8wLzMyMzgzMDMzM2E2MjYyMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzUzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDuyAw
DQYJKoZIhvcNAQELBQADggEBAK7jxEyDAgq5sSMFM5ypS2V2+0F1hXahIoSK5A6Q
ERv4E9cnSThtprytjXmF9ez6Z+iqqy9G+yptC8SGR50xn6G8pxhCBgT0hNDcmalu
rwZYQPefAkGlHZGB1VKwr7bgPSVCB1332ZfLRWtwtYAS7SvJxNZs4YhTCgNlHDv8
PJgA8lzT3Bx8phDl2bAdUkxD5qSqzTG5zX7Phk/DtVcH/UHMsSyRFOob2/wiXbpn
+nPf67adniYfARIyE1b+4IoComM7tmLG/mElhlKz67bblZWB8ADrMKCkCW9ralJ8
Z1njubU9X2s1PzVPy6sVHiVoKX8v91E4CbMfwZA1ckWGLZo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:42 2025 by rpki-client