Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
File: 3136382e3139372e39382e302f32332d3234203d3e203532343233.roa (raw, json)
Hash identifier: JG/5P3K+tWum1ltvw9j5lZv5BCSkf2TqX5JvbLmddWE=
Subject key identifier: 37:A0:8F:60:EE:7D:89:6D:4A:A6:AB:3A:86:9A:FC:E8:75:D8:E1:D0
Certificate issuer: /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial: 2B4C9402CBD48DF7C1DFBA884B43073083884028
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
Signing time: Tue 05 Mar 2024 17:56:50 +0000
ROA not before: Tue 05 Mar 2024 17:51:50 +0000
ROA not after: Tue 04 Mar 2025 17:56:50 +0000
asID: 52423
IP address blocks: 168.197.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4c:94:02:cb:d4:8d:f7:c1:df:ba:88:4b:43:07:30:83:88:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Validity
Not Before: Mar 5 17:51:50 2024 GMT
Not After : Mar 4 17:56:50 2025 GMT
Subject: CN=37A08F60EE7D896D4AA6AB3A869AFCE875D8E1D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:ee:94:fd:7e:8e:ef:37:be:04:49:69:2b:
f8:51:aa:c1:e2:92:7f:d3:72:85:99:36:65:f0:86:
4c:a4:3d:25:e5:53:2e:7e:44:bb:76:fe:fc:b8:cb:
cf:04:4e:42:9d:28:bf:bc:59:14:65:be:b0:01:6a:
55:c0:5f:95:8d:bd:bf:4e:67:75:fd:43:25:4f:b1:
01:f7:ea:8a:e9:1a:b1:7e:7e:02:6f:41:47:53:d8:
34:ba:42:72:59:ae:f3:0b:c3:a6:7b:b6:23:18:b7:
e3:e6:96:b5:b1:67:88:0d:04:51:fd:19:6a:28:6f:
6d:bb:90:51:bb:4b:9e:69:1f:40:50:af:e7:69:52:
d6:d5:5a:2e:2e:0f:7b:02:07:46:69:bf:7d:d6:2b:
1b:5c:19:79:79:53:76:77:95:5d:40:d1:a4:1b:3c:
ee:7d:13:0e:d5:6e:7c:c9:96:87:e1:fa:00:11:d8:
c1:75:a7:3e:3d:d9:b6:d9:11:28:c4:33:3b:a5:50:
6f:0a:11:f1:4d:ca:06:76:f4:c0:b6:37:ee:44:4a:
5e:fc:88:44:92:23:76:44:80:d7:df:2d:37:17:26:
82:37:e3:a8:16:f3:e2:e9:bb:a1:95:3b:3a:bd:05:
70:1f:1a:6b:32:f6:c2:39:a8:96:10:6a:35:86:7a:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:8F:60:EE:7D:89:6D:4A:A6:AB:3A:86:9A:FC:E8:75:D8:E1:D0
X509v3 Authority Key Identifier:
keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.98.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e9:31:cd:02:1b:e6:dd:50:3f:2c:8b:62:4f:bd:30:47:49:
bb:d8:c8:36:52:d1:0c:cb:c1:1a:06:cb:65:c1:ac:62:0d:b8:
4e:28:c9:b2:a2:60:57:05:2b:a0:97:b3:a3:34:89:98:50:e0:
16:4b:1b:47:ba:7f:42:d3:6e:ed:2e:b2:fc:d1:c5:38:71:0f:
08:c0:18:25:16:d0:be:f3:49:83:1e:01:8b:cc:a5:64:d8:48:
d6:8e:b4:b3:17:3c:3e:38:09:95:4f:fc:ca:5f:64:dd:de:a1:
23:47:fa:58:25:34:4c:0a:da:44:e9:cd:0e:fb:d1:5b:fa:b5:
4e:13:2b:c3:37:a1:17:bf:9e:60:bd:8e:c4:9a:94:80:62:62:
9f:f8:e0:33:79:f1:de:1b:25:c4:89:9c:13:64:24:af:39:38:
99:33:47:31:82:07:fb:4d:d5:ba:ae:d2:2b:eb:b0:34:8e:9a:
e3:f7:7b:3f:f4:87:2b:11:ea:3f:1d:ad:a0:53:c8:d3:d3:aa:
d3:5b:54:b5:e1:a5:56:5b:84:fc:a1:47:84:8e:c1:a6:af:13:
8a:f4:8b:92:ba:6f:52:e5:09:6f:01:32:e2:94:c1:17:2a:10:
e9:18:e4:72:30:0c:d4:54:94:28:c1:8f:fb:c9:62:36:f3:05:
2f:66:2f:2c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUK0yUAsvUjffB37qIS0MHMIOIQCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ0MzI4QjU4OEQ3RTZBQjRGMDQ5RDI2RjlFNkZEQkIy
RkI1MTk3MDAeFw0yNDAzMDUxNzUxNTBaFw0yNTAzMDQxNzU2NTBaMDMxMTAvBgNV
BAMTKDM3QTA4RjYwRUU3RDg5NkQ0QUE2QUIzQTg2OUFGQ0U4NzVEOEUxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfu6U/X6O7ze+BElpK/hRqsHi
kn/TcoWZNmXwhkykPSXlUy5+RLt2/vy4y88ETkKdKL+8WRRlvrABalXAX5WNvb9O
Z3X9QyVPsQH36orpGrF+fgJvQUdT2DS6QnJZrvMLw6Z7tiMYt+PmlrWxZ4gNBFH9
GWoob227kFG7S55pH0BQr+dpUtbVWi4uD3sCB0Zpv33WKxtcGXl5U3Z3lV1A0aQb
PO59Ew7VbnzJlofh+gAR2MF1pz492bbZESjEMzulUG8KEfFNygZ29MC2N+5ESl78
iESSI3ZEgNffLTcXJoI346gW8+Lpu6GVOzq9BXAfGmsy9sI5qJYQajWGemNJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUN6CPYO59iW1Kpqs6hpr86HXY4dAwHwYDVR0j
BBgwFoAUBEMotYjX5qtPBJ0m+eb9uy+1GXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjAwQzBBMzI0NDg0QTBFNTMyMTg5RUU2OEI0MjZBQTIy
MDMzMTQzNUJBNDUwQ0ZGQ0YzODE2QkYxMDMxOTg5LzAvMDQ0MzI4QjU4OEQ3RTZB
QjRGMDQ5RDI2RjlFNkZEQkIyRkI1MTk3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNDQzMjhCNTg4RDdFNkFCNEYw
NDlEMjZGOUU2RkRCQjJGQjUxOTcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYwMEMwQTMyNDQ4NEEwRTUzMjE4OUVFNjhCNDI2QUEyMjAzMzE0MzVC
QTQ1MENGRkNGMzgxNkJGMTAzMTk4OS8wLzMxMzYzODJlMzEzOTM3MmUzOTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjM0MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAajFYjAN
BgkqhkiG9w0BAQsFAAOCAQEAMekxzQIb5t1QPyyLYk+9MEdJu9jINlLRDMvBGgbL
ZcGsYg24TijJsqJgVwUroJezozSJmFDgFksbR7p/QtNu7S6y/NHFOHEPCMAYJRbQ
vvNJgx4Bi8ylZNhI1o60sxc8PjgJlU/8yl9k3d6hI0f6WCU0TAraROnNDvvRW/q1
ThMrwzehF7+eYL2OxJqUgGJin/jgM3nx3hslxImcE2Qkrzk4mTNHMYIH+03Vuq7S
K+uwNI6a4/d7P/SHKxHqPx2toFPI09Oq01tUteGlVluE/KFHhI7Bpq8TivSLkrpv
UuUJbwEy4pTBFyoQ6RjkcjAM1FSUKMGP+8liNvMFL2YvLA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:21:02 2025 by rpki-client