Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
File: 3137302e37392e38382e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier: IgvT+xOQTMnmrWelE+aRk3dwG8czefB3C2XLMiGzhBQ=
Subject key identifier: EE:69:8A:66:6A:DF:61:FA:E8:79:71:F4:42:3A:12:9F:2F:7C:7D:55
Certificate issuer: /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial: 4C941405DB688FFA58D8E1EBB2A5BFB40F67CEA5
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
Signing time: Tue 05 Mar 2024 17:53:23 +0000
ROA not before: Tue 05 Mar 2024 17:48:23 +0000
ROA not after: Tue 04 Mar 2025 17:53:23 +0000
asID: 267857
IP address blocks: 170.79.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:94:14:05:db:68:8f:fa:58:d8:e1:eb:b2:a5:bf:b4:0f:67:ce:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Validity
Not Before: Mar 5 17:48:23 2024 GMT
Not After : Mar 4 17:53:23 2025 GMT
Subject: CN=EE698A666ADF61FAE87971F4423A129F2F7C7D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:f0:7f:f0:0a:45:2d:5d:aa:80:03:c2:76:
5e:4b:12:3b:b1:2f:23:25:1f:35:98:d2:e7:04:92:
5c:19:e2:66:02:59:ea:43:0e:61:e3:ff:89:97:29:
ae:71:b5:4b:92:21:5f:d1:2d:57:25:86:b0:16:00:
33:17:87:88:e0:b5:82:7b:97:d3:69:9b:de:ef:f3:
42:97:8f:0c:69:f0:3c:f2:a4:8d:47:0e:1a:e7:a2:
45:e0:45:34:71:1e:a1:cd:11:ed:6d:cd:0d:56:d5:
d2:18:70:69:18:7a:87:39:b5:36:74:8b:7e:ec:52:
c7:b0:66:5d:43:c5:08:50:9d:f3:20:9f:b1:a2:38:
02:7a:50:86:a5:5c:29:80:64:3b:8d:ea:c0:6d:15:
75:c7:87:c8:de:17:db:4b:2a:6a:09:b5:90:3e:f2:
7a:5d:43:0b:e9:66:ce:fb:ad:b0:8d:79:b3:a0:24:
df:7b:0f:24:8e:d7:1a:c7:d0:a1:fa:54:ac:58:d2:
2d:bd:34:b9:7e:d0:a6:38:21:2e:03:b5:24:87:ec:
34:e8:26:d5:e7:fe:8e:20:d9:6b:d2:df:de:2d:a7:
6f:a9:a8:9b:69:64:0a:97:2f:8b:bd:2d:e7:e7:6d:
22:53:55:24:35:a6:ae:57:33:73:06:30:9d:2f:85:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:8A:66:6A:DF:61:FA:E8:79:71:F4:42:3A:12:9F:2F:7C:7D:55
X509v3 Authority Key Identifier:
keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:7c:8b:19:01:c5:09:a6:36:8a:7a:ce:8f:46:e7:11:60:93:
ee:15:89:01:92:cd:49:70:10:0b:77:a9:73:0a:5c:e9:07:b6:
d2:20:fc:71:77:93:b1:54:74:59:f6:ff:6b:53:93:49:4e:1e:
d2:7a:70:02:38:40:58:0f:d2:c7:3c:e6:55:e5:03:9a:e5:30:
23:f2:27:9e:d3:1a:e9:e8:57:5a:77:5e:72:b1:e5:93:8e:b1:
24:1d:67:9c:95:80:5f:d9:64:8e:d9:6e:53:10:c6:f6:3e:34:
4a:ca:ec:8a:64:ad:48:58:0d:f0:6d:6c:f5:ae:07:b2:1d:52:
a1:26:88:94:ff:5b:dd:13:4b:45:b0:c7:00:99:f4:e8:1e:b1:
8b:d7:9a:ac:f6:80:ea:b0:09:86:26:2e:d7:df:5b:23:89:92:
b3:29:b7:78:c8:75:ab:05:62:d2:3a:2e:c6:75:30:d0:0d:0d:
be:72:85:71:77:89:aa:d9:a6:44:4a:db:67:9b:06:8e:9f:48:
40:17:c3:a8:10:f5:ff:a1:e3:67:01:b4:9b:46:4f:52:50:9a:
c9:66:1c:15:c4:49:f0:b0:76:f5:34:f8:02:f9:94:2c:89:6f:
41:ba:b5:3b:98:00:72:f4:58:79:4c:1e:a2:6f:4d:14:46:3e:
a3:e2:9e:63
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTJQUBdtoj/pY2OHrsqW/tA9nzqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDNUFBNEJFREVBOUE4M0JERTg4MjJBNzc0NzIxMTBC
N0E1N0M3NjAeFw0yNDAzMDUxNzQ4MjNaFw0yNTAzMDQxNzUzMjNaMDMxMTAvBgNV
BAMTKEVFNjk4QTY2NkFERjYxRkFFODc5NzFGNDQyM0ExMjlGMkY3QzdENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBfB/8ApFLV2qgAPCdl5LEjux
LyMlHzWY0ucEklwZ4mYCWepDDmHj/4mXKa5xtUuSIV/RLVclhrAWADMXh4jgtYJ7
l9Npm97v80KXjwxp8DzypI1HDhrnokXgRTRxHqHNEe1tzQ1W1dIYcGkYeoc5tTZ0
i37sUsewZl1DxQhQnfMgn7GiOAJ6UIalXCmAZDuN6sBtFXXHh8jeF9tLKmoJtZA+
8npdQwvpZs77rbCNebOgJN97DySO1xrH0KH6VKxY0i29NLl+0KY4IS4DtSSH7DTo
JtXn/o4g2WvS394tp2+pqJtpZAqXL4u9LefnbSJTVSQ1pq5XM3MGMJ0vhdyzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7mmKZmrfYfroeXH0QjoSny98fVUwHwYDVR0j
BBgwFoAUDMWqS+3qmoO96IIqd0chELelfHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODM4OUI1RTNCMThCN0RBRjUyRDAzMzUzRERFRDI5NUE4
MDk2OTY0M0Q5MkREOUQ4MkRBRUZFOUQwQjczOTc1LzAvMENDNUFBNEJFREVBOUE4
M0JERTg4MjJBNzc0NzIxMTBCN0E1N0M3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0M1QUE0QkVERUE5QTgzQkRF
ODgyMkE3NzQ3MjExMEI3QTU3Qzc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjgzODlCNUUzQjE4QjdEQUY1MkQwMzM1M0RERUQyOTVBODA5Njk2NDNE
OTJERDlEODJEQUVGRTlEMEI3Mzk3NS8wLzMxMzczMDJlMzczOTJlMzgzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzM4MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpPWDAN
BgkqhkiG9w0BAQsFAAOCAQEAuHyLGQHFCaY2inrOj0bnEWCT7hWJAZLNSXAQC3ep
cwpc6Qe20iD8cXeTsVR0Wfb/a1OTSU4e0npwAjhAWA/SxzzmVeUDmuUwI/InntMa
6ehXWndecrHlk46xJB1nnJWAX9lkjtluUxDG9j40SsrsimStSFgN8G1s9a4Hsh1S
oSaIlP9b3RNLRbDHAJn06B6xi9earPaA6rAJhiYu199bI4mSsym3eMh1qwVi0jou
xnUw0A0NvnKFcXeJqtmmRErbZ5sGjp9IQBfDqBD1/6HjZwG0m0ZPUlCayWYcFcRJ
8LB29TT4AvmULIlvQbq1O5gAcvRYeUweom9NFEY+o+KeYw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:41 2025 by rpki-client