Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa
File: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier: pi7J5bXFqKl1Mkinll8S7C259HEwV9nV1UDqsp7G6NI=
Subject key identifier: E1:58:11:16:EB:05:E8:05:82:8B:63:28:FE:43:45:D7:A9:9D:E2:F3
Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial: 498E2FD7D6EF8D84D7BB9F3DF0F515811515CD93
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa
Signing time: Tue 05 Mar 2024 17:55:08 +0000
ROA not before: Tue 05 Mar 2024 17:50:08 +0000
ROA not after: Tue 04 Mar 2025 17:55:08 +0000
asID: 32034
IP address blocks: 143.208.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8e:2f:d7:d6:ef:8d:84:d7:bb:9f:3d:f0:f5:15:81:15:15:cd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Validity
Not Before: Mar 5 17:50:08 2024 GMT
Not After : Mar 4 17:55:08 2025 GMT
Subject: CN=E1581116EB05E805828B6328FE4345D7A99DE2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:df:99:5b:19:c7:4b:c0:77:42:26:ea:d0:
ce:e1:9b:b7:d3:8d:57:a7:d8:ae:fa:d3:a1:d9:33:
29:95:69:94:8c:0d:ac:fe:e6:38:3a:49:8d:48:f4:
d2:89:b8:b4:3b:bd:21:75:69:3f:5d:0c:5c:ff:b0:
e8:f0:3b:42:6a:ee:e5:4c:7d:83:74:a1:0a:ca:6a:
82:07:3a:02:68:9e:a1:7d:96:d6:3d:03:c0:ab:a2:
78:51:f3:ed:f2:0c:de:3e:ca:5a:65:b0:44:7f:ae:
3d:bc:d5:27:a5:f3:a3:d0:41:3f:20:b5:e7:47:ee:
82:43:c1:dc:be:5d:14:e6:b5:f5:bd:f3:69:f8:15:
42:e4:e0:78:32:8b:a1:28:bd:8e:85:fa:92:6c:c9:
0f:0b:db:c5:7d:7f:b6:ab:4f:e4:d5:5d:19:a4:2e:
f1:7d:7c:f3:ea:f0:44:e4:e3:74:9c:52:b7:1e:5e:
4a:3a:4c:19:2c:50:4c:61:e7:d8:af:5b:ac:03:15:
ba:93:c4:63:11:3d:86:03:16:bc:57:74:27:fc:b6:
0f:59:b9:02:bd:df:8c:d2:88:92:08:22:b5:05:56:
15:79:73:8c:8a:77:5e:99:31:3e:7d:68:3a:ba:29:
8e:7a:4a:f8:8b:32:60:e3:0b:a6:fb:61:7f:fb:92:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:11:16:EB:05:E8:05:82:8B:63:28:FE:43:45:D7:A9:9D:E2:F3
X509v3 Authority Key Identifier:
keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.64.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c5:0a:43:a5:d4:79:be:b1:ff:38:33:93:e1:ae:cd:68:28:
a9:5c:7d:4d:f6:51:2d:75:4c:5d:2b:75:fb:b6:f5:8d:98:22:
c7:50:99:c5:ec:ba:40:b7:5d:10:28:b5:db:1f:d8:ee:26:8a:
cb:46:52:38:28:a0:18:c5:60:da:c4:a0:71:10:99:7d:33:f5:
76:d6:e6:87:9d:6b:bf:75:15:b8:29:b4:ef:df:32:00:d6:69:
65:06:2a:21:f2:43:17:0d:ee:f6:2e:95:dc:f8:ed:1c:f9:49:
39:28:8f:da:46:a3:79:94:0c:67:14:ef:47:ef:00:7e:b6:4a:
87:60:00:fe:58:15:cf:a4:12:d7:21:8e:11:7d:3b:ac:01:19:
3c:d0:bb:5d:75:e3:74:36:63:eb:9e:08:c1:1a:91:71:6e:92:
fb:48:d2:18:42:ef:89:8f:c5:81:39:8f:1d:64:d8:06:35:d9:
d9:0b:bd:86:8b:8a:4b:f7:24:1b:da:90:dc:9b:53:3f:0a:ec:
5f:d1:bf:54:06:42:e9:75:72:71:a4:bc:a2:ef:83:5d:7a:7c:
ce:a6:2e:e4:a3:41:66:39:6a:5c:af:ba:77:bb:8e:2f:1b:84:
55:48:a2:30:d2:91:a5:70:1a:eb:8c:f1:aa:74:14:c0:60:7c:
9e:fc:00:34
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSY4v19bvjYTXu5898PUVgRUVzZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREQ0VBNURCRDVEQ0QwMEIwM0MyMUU0RjM0NjlCRjdE
MUY4QkNFMjAeFw0yNDAzMDUxNzUwMDhaFw0yNTAzMDQxNzU1MDhaMDMxMTAvBgNV
BAMTKEUxNTgxMTE2RUIwNUU4MDU4MjhCNjMyOEZFNDM0NUQ3QTk5REUyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkN+ZWxnHS8B3Qibq0M7hm7fT
jVen2K7606HZMymVaZSMDaz+5jg6SY1I9NKJuLQ7vSF1aT9dDFz/sOjwO0Jq7uVM
fYN0oQrKaoIHOgJonqF9ltY9A8CronhR8+3yDN4+ylplsER/rj281Sel86PQQT8g
tedH7oJDwdy+XRTmtfW982n4FULk4Hgyi6EovY6F+pJsyQ8L28V9f7arT+TVXRmk
LvF9fPPq8ETk43ScUrceXko6TBksUExh59ivW6wDFbqTxGMRPYYDFrxXdCf8tg9Z
uQK934zSiJIIIrUFVhV5c4yKd16ZMT59aDq6KY56SviLMmDjC6b7YX/7kksZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4VgRFusF6AWCi2Mo/kNF16md4vMwHwYDVR0j
BBgwFoAUTdzqXb1dzQCwPCHk80ab99H4vOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUVDNUY5QjBBNkQ5NTQ4NjREMjc0NEQ1NUNEREUxQkU4
NUQ0NDcxMDAyMURDNkIxRDNGNDJGQUQ4RjRCODdFLzAvNEREQ0VBNURCRDVEQ0Qw
MEIwM0MyMUU0RjM0NjlCRjdEMUY4QkNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RERDRUE1REJENURDRDAwQjAz
QzIxRTRGMzQ2OUJGN0QxRjhCQ0UyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlFQzVGOUIwQTZEOTU0ODY0RDI3NDRENTVDRERFMUJFODVENDQ3MTAw
MjFEQzZCMUQzRjQyRkFEOEY0Qjg3RS8wLzMxMzQzMzJlMzIzMDM4MmUzNjM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzMjMwMzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QQDAN
BgkqhkiG9w0BAQsFAAOCAQEAdcUKQ6XUeb6x/zgzk+GuzWgoqVx9TfZRLXVMXSt1
+7b1jZgix1CZxey6QLddECi12x/Y7iaKy0ZSOCigGMVg2sSgcRCZfTP1dtbmh51r
v3UVuCm0798yANZpZQYqIfJDFw3u9i6V3PjtHPlJOSiP2kajeZQMZxTvR+8AfrZK
h2AA/lgVz6QS1yGOEX07rAEZPNC7XXXjdDZj654IwRqRcW6S+0jSGELviY/FgTmP
HWTYBjXZ2Qu9houKS/ckG9qQ3JtTPwrsX9G/VAZC6XVycaS8ou+DXXp8zqYu5KNB
ZjlqXK+6d7uOLxuEVUiiMNKRpXAa64zxqnQUwGB8nvwANA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:52 2025 by rpki-client