Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5ce3c0f3a8a265241f12db21b563352179c5e438.roa
File: 5ce3c0f3a8a265241f12db21b563352179c5e438.roa (raw, json)
Hash identifier: LsFKvdrQFPbiHxwjcM9gzdi32vBgSIPCLRQ4rP0Mp1U=
Subject key identifier: 5C:C0:0F:B5:EF:30:06:D5:E3:AF:63:A4:88:C1:D1:65:E5:6E:56:ED
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 246E5A
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5ce3c0f3a8a265241f12db21b563352179c5e438.roa
Signing time: Fri 09 Jun 2023 21:33:10 +0000
ROA not before: Thu 08 Jun 2023 21:33:10 +0000
ROA not after: Mon 09 Jun 2025 21:33:10 +0000
asID: 28002
IP address blocks: 2001:13c7:7020::/44 maxlen: 55
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387546 (0x246e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Jun 8 21:33:10 2023 GMT
Not After : Jun 9 21:33:10 2025 GMT
Subject: CN=5ce3c0f3a8a265241f12db21b563352179c5e438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:35:a0:88:45:ec:ba:c9:aa:d8:28:b7:3b:
7d:da:4e:9b:74:19:28:cc:d4:c3:3c:00:f2:8f:87:
a0:6c:34:73:4f:66:3e:b1:63:66:d5:86:79:b9:4e:
40:30:8c:58:d3:8e:42:45:97:62:e7:fc:c7:05:90:
28:e4:7e:f9:28:08:b5:e5:b8:3a:59:b5:d1:36:70:
d0:46:4a:44:fe:ca:7d:d9:b2:ee:59:9a:08:87:38:
b5:5a:66:0c:be:d9:f1:75:90:9b:b6:d7:70:63:f3:
ed:98:74:0f:af:94:2e:53:83:52:67:c6:e2:06:fe:
61:ba:2f:fc:53:ad:5d:14:55:34:d8:7a:fe:b7:3e:
f0:cb:16:dd:ab:d2:5e:a7:83:bd:a9:c5:38:45:73:
ce:43:08:05:2c:38:f5:ea:93:66:b7:d5:93:7d:4e:
56:bd:6f:35:f0:a9:b6:5e:51:d0:96:ff:78:3b:56:
f9:f0:d6:f7:fb:00:fb:72:d6:f6:c8:4d:e9:b7:00:
78:a0:35:b9:94:1e:da:7a:99:5b:45:c1:01:33:ef:
44:8d:29:0a:82:28:d1:4a:9e:fa:ab:c9:51:be:65:
0f:7f:59:5a:8e:6f:a4:14:5a:7a:09:bd:b7:1e:ed:
7f:cc:50:99:d5:ff:6b:49:84:6a:4e:f7:58:97:97:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:0F:B5:EF:30:06:D5:E3:AF:63:A4:88:C1:D1:65:E5:6E:56:ED
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5ce3c0f3a8a265241f12db21b563352179c5e438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:13c7:7020::/44
Signature Algorithm: sha256WithRSAEncryption
15:83:1d:7b:fd:0c:cf:8b:48:49:92:a3:c1:6a:20:bd:46:5b:
02:b5:c7:9f:3a:39:de:58:91:9f:bd:a7:dc:6f:e5:65:5e:69:
09:57:7a:e0:b0:5e:40:cb:72:b4:5b:e1:1f:b0:94:4c:f6:fe:
7b:ad:93:af:4e:ff:73:b9:d8:77:62:b5:25:36:99:16:6a:96:
15:93:14:e8:54:12:40:c3:32:6f:12:36:e4:8f:30:6d:e9:b8:
43:1a:a3:d3:63:5d:48:e7:92:3d:71:d5:28:70:45:11:bc:c3:
5f:68:6b:1c:b3:d2:9b:e3:02:6e:77:66:cf:a2:69:9c:07:e1:
21:dd:20:4a:4d:0b:5b:64:f1:17:31:d5:75:b3:7b:3d:fd:d2:
2f:b0:52:df:c5:3f:17:9d:62:13:4f:05:bd:ed:6a:8d:fe:06:
48:cb:eb:69:a2:aa:c7:0f:27:7e:97:0e:e0:58:74:c5:77:ee:
71:b3:b0:48:74:17:1e:37:e7:eb:66:a6:91:d6:fb:96:96:ac:
93:0a:c9:8a:87:6f:30:98:cf:67:ec:3a:a7:db:98:2d:84:c5:
67:ad:72:ce:9c:a6:da:70:7a:8e:3d:26:cf:2e:20:0a:87:09:
81:56:5c:d4:35:7c:73:73:0e:ea:b7:6c:90:34:41:ba:cc:af:
3a:d2:2e:cb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJG5aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNjA4
MjEzMzEwWhcNMjUwNjA5MjEzMzEwWjAzMTEwLwYDVQQDEyg1Y2UzYzBmM2E4YTI2
NTI0MWYxMmRiMjFiNTYzMzUyMTc5YzVlNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk5I1oIhF7LrJqtgotzt92k6bdBkozNTDPADyj4egbDRzT2Y+
sWNm1YZ5uU5AMIxY045CRZdi5/zHBZAo5H75KAi15bg6WbXRNnDQRkpE/sp92bLu
WZoIhzi1WmYMvtnxdZCbttdwY/PtmHQPr5QuU4NSZ8biBv5hui/8U61dFFU02Hr+
tz7wyxbdq9Jep4O9qcU4RXPOQwgFLDj16pNmt9WTfU5WvW818Km2XlHQlv94O1b5
8Nb3+wD7ctb2yE3ptwB4oDW5lB7aeplbRcEBM+9EjSkKgijRSp76q8lRvmUPf1la
jm+kFFp6Cb23Hu1/zFCZ1f9rSYRqTvdYl5dhdQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFzAD7XvMAbV469jpIjB0WXlblbtMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzVjZTNjMGYzYThhMjY1MjQxZjEyZGIyMWI1NjMzNTIxNzljNWU0Mzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCABE8dwIDANBgkqhkiG9w0BAQsFAAOCAQEAFYMde/0Mz4tI
SZKjwWogvUZbArXHnzo53liRn72n3G/lZV5pCVd64LBeQMtytFvhH7CUTPb+e62T
r07/c7nYd2K1JTaZFmqWFZMU6FQSQMMybxI25I8wbem4Qxqj02NdSOeSPXHVKHBF
EbzDX2hrHLPSm+MCbndmz6JpnAfhId0gSk0LW2TxFzHVdbN7Pf3SL7BS38U/F51i
E08Fve1qjf4GSMvraaKqxw8nfpcO4Fh0xXfucbOwSHQXHjfn62amkdb7lpaskwrJ
iodvMJjPZ+w6p9uYLYTFZ61yzpym2nB6jj0mzy4gCocJgVZc1DV8c3MO6rdskDRB
usyvOtIuyw==
-----END CERTIFICATE-----
Generated at Sun Jun 22 15:48:39 2025 by rpki-client