Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa
File: 3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier: g+aPHfKiIOV4ZbsgKcH+/noZS9M+Qglq450EqOIEiPQ=
Subject key identifier: 58:33:CC:67:1E:AA:CF:BA:5E:97:EC:C9:A7:60:74:2C:7C:A1:24:6B
Certificate issuer: /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial: 67EA96917663755AA83605A648DEDF19F3F82B30
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa
Signing time: Tue 05 Mar 2024 18:15:32 +0000
ROA not before: Tue 05 Mar 2024 18:10:32 +0000
ROA not after: Tue 04 Mar 2025 18:15:32 +0000
asID: 262253
IP address blocks: 167.250.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ea:96:91:76:63:75:5a:a8:36:05:a6:48:de:df:19:f3:f8:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Validity
Not Before: Mar 5 18:10:32 2024 GMT
Not After : Mar 4 18:15:32 2025 GMT
Subject: CN=5833CC671EAACFBA5E97ECC9A760742C7CA1246B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:00:2c:6e:ff:72:25:46:e7:06:41:7c:77:
01:8a:5b:19:09:f9:71:5e:af:98:6c:87:56:63:49:
ae:39:51:05:48:9d:7a:8d:2e:7c:52:49:6e:e8:ae:
92:fd:e9:ed:fa:98:50:5a:7e:f7:7f:ec:78:60:59:
ec:df:b0:6e:1e:fe:5d:ce:62:da:6f:a4:07:cf:b5:
dd:49:64:b4:09:c4:c8:73:d9:36:d3:fa:de:53:7a:
60:27:f9:da:7c:11:f9:6a:b5:f7:82:1b:20:27:34:
41:7f:7f:86:ec:80:95:64:b0:f4:a9:cf:98:ae:ec:
f5:c3:36:31:33:fc:70:89:30:10:30:df:77:d7:2a:
90:5a:5e:63:1f:ce:5e:cc:ab:1e:3f:4b:69:1d:c4:
14:36:b3:4c:89:7c:1f:67:57:4f:c4:4c:23:d7:7a:
7e:cf:b1:35:bc:31:a1:34:53:f8:0b:ea:43:3d:88:
f9:1a:d4:ed:9a:26:1f:66:11:5d:9d:cc:e3:e5:71:
29:cf:0c:b5:74:d8:e4:bd:d9:6e:4d:3f:1a:bb:a2:
d4:87:a7:1b:f0:a2:bc:8c:c4:db:4f:b8:12:e5:ff:
85:6f:42:d8:a8:da:0c:cf:3e:81:c4:17:7c:3b:00:
56:24:0b:8a:2c:a0:92:10:d0:5e:a4:ee:47:52:5c:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:CC:67:1E:AA:CF:BA:5E:97:EC:C9:A7:60:74:2C:7C:A1:24:6B
X509v3 Authority Key Identifier:
keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.205.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6e:6e:18:f5:fd:f7:42:4a:f1:45:17:52:78:13:4b:e3:16:
fd:f7:33:9d:06:ca:c3:91:e0:f5:07:b0:71:51:03:e7:42:a0:
76:f8:e7:f5:43:73:7f:4b:29:c9:8e:25:1e:33:3d:ac:bc:22:
ef:83:a4:7e:16:f4:47:45:39:0b:37:eb:4c:49:c1:13:8c:ad:
f5:34:5a:a2:d8:d8:53:0f:cd:9a:f1:6c:1f:10:a1:09:f7:b6:
1c:cf:80:ab:64:87:b0:cb:a0:06:05:48:c1:33:ab:7d:03:7d:
58:cc:cc:04:77:fa:33:bc:bf:04:74:eb:64:0b:2f:da:fc:83:
c0:32:f0:0d:d6:c7:75:6b:1e:67:32:48:d5:5d:79:bd:55:e2:
92:21:60:cd:23:09:62:56:0a:09:e0:d5:c7:23:49:e0:2c:eb:
23:a7:c6:70:3b:11:77:c4:99:b9:05:45:b3:8b:bc:fa:b3:02:
20:10:71:2f:3a:aa:83:bb:d7:78:8b:ad:43:6a:29:8d:64:33:
f5:88:bf:4a:fe:94:f0:7f:a0:08:7a:1b:7c:63:df:2d:d3:ad:
66:88:a1:b3:24:c6:32:d8:b0:94:f2:28:d0:b5:b5:94:fa:fa:
93:c2:b3:9c:ad:53:80:c8:34:b4:83:64:2f:40:f3:1c:96:fa:
47:84:53:b6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ+qWkXZjdVqoNgWmSN7fGfP4KzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGQzY3NzIwNUIwREE5Q0E5NzlCNkQ2OEI5NUI0OUM0
QjZDMzI2NzAeFw0yNDAzMDUxODEwMzJaFw0yNTAzMDQxODE1MzJaMDMxMTAvBgNV
BAMTKDU4MzNDQzY3MUVBQUNGQkE1RTk3RUNDOUE3NjA3NDJDN0NBMTI0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19AAsbv9yJUbnBkF8dwGKWxkJ
+XFer5hsh1ZjSa45UQVInXqNLnxSSW7orpL96e36mFBafvd/7HhgWezfsG4e/l3O
YtpvpAfPtd1JZLQJxMhz2TbT+t5TemAn+dp8EflqtfeCGyAnNEF/f4bsgJVksPSp
z5iu7PXDNjEz/HCJMBAw33fXKpBaXmMfzl7Mqx4/S2kdxBQ2s0yJfB9nV0/ETCPX
en7PsTW8MaE0U/gL6kM9iPka1O2aJh9mEV2dzOPlcSnPDLV02OS92W5NPxq7otSH
pxvworyMxNtPuBLl/4VvQtio2gzPPoHEF3w7AFYkC4osoJIQ0F6k7kdSXOk5AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWDPMZx6qz7pel+zJp2B0LHyhJGswHwYDVR0j
BBgwFoAU2PxncgWw2pypebbWi5W0nEtsMmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEMzNEI4RjFDNDY1ODY5RTIxOUE2NUNBMzY5RTAyM0Iy
MUZEQUIyQ0MxQUQ2OTEwODhCM0Q4OEMxNERDRUIwLzAvRDhGQzY3NzIwNUIwREE5
Q0E5NzlCNkQ2OEI5NUI0OUM0QjZDMzI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEZDNjc3MjA1QjBEQTlDQTk3
OUI2RDY4Qjk1QjQ5QzRCNkMzMjY3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDMzRCOEYxQzQ2NTg2OUUyMTlBNjVDQTM2OUUwMjNCMjFGREFCMkND
MUFENjkxMDg4QjNEODhDMTREQ0VCMC8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACn
+s0wDQYJKoZIhvcNAQELBQADggEBABNubhj1/fdCSvFFF1J4E0vjFv33M50GysOR
4PUHsHFRA+dCoHb45/VDc39LKcmOJR4zPay8Iu+DpH4W9EdFOQs360xJwROMrfU0
WqLY2FMPzZrxbB8QoQn3thzPgKtkh7DLoAYFSMEzq30DfVjMzAR3+jO8vwR062QL
L9r8g8Ay8A3Wx3VrHmcySNVdeb1V4pIhYM0jCWJWCgng1ccjSeAs6yOnxnA7EXfE
mbkFRbOLvPqzAiAQcS86qoO713iLrUNqKY1kM/WIv0r+lPB/oAh6G3xj3y3TrWaI
obMkxjLYsJTyKNC1tZT6+pPCs5ytU4DINLSDZC9A8xyW+keEU7Y=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:06:11 2025 by rpki-client