Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
File: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (raw, json)
Hash identifier: d0C919K0JaTtOE06Zc4OgCW+UnmbncTkQKyn0Uh+a/Y=
Subject key identifier: 95:96:3A:CA:E1:AC:88:AF:D4:68:DA:D9:B6:AF:77:BF:24:62:07:BF
Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial: 6B0B5BDF11D4D64F871A55ED11B2B7C1B5417147
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
Signing time: Tue 05 Mar 2024 17:56:16 +0000
ROA not before: Tue 05 Mar 2024 17:51:16 +0000
ROA not after: Tue 04 Mar 2025 17:56:16 +0000
asID: 269828
IP address blocks: 45.186.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0b:5b:df:11:d4:d6:4f:87:1a:55:ed:11:b2:b7:c1:b5:41:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
Validity
Not Before: Mar 5 17:51:16 2024 GMT
Not After : Mar 4 17:56:16 2025 GMT
Subject: CN=95963ACAE1AC88AFD468DAD9B6AF77BF246207BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:76:ef:21:d6:20:a9:d3:59:da:a3:51:61:
0a:2f:56:d9:91:6f:2c:24:4a:57:25:0b:f2:8b:2c:
f6:72:ed:6b:9e:91:f7:95:7d:a2:96:c3:0f:af:03:
53:49:0a:01:58:10:8d:22:e9:fc:d6:ce:82:e1:9b:
d9:ee:6f:ba:af:c0:c4:05:cc:8e:b4:b5:c7:6b:f2:
d4:1f:bc:b1:b3:bb:d6:46:c1:3a:81:2a:ba:c6:30:
55:77:f5:9a:38:d4:5d:0b:47:23:32:7d:ba:fd:48:
94:d3:3c:1e:56:ba:c7:ba:ba:2c:ab:27:b3:c7:59:
1d:eb:05:13:e5:ff:b9:88:5c:05:12:67:76:51:97:
bd:ff:ca:f4:0d:1b:86:ac:36:39:16:e0:f8:51:e6:
e4:e6:10:e5:04:f8:53:a3:f1:e1:0d:14:67:f0:d8:
aa:74:d7:08:b1:4d:94:a0:bf:af:a8:65:25:dc:42:
61:07:47:4b:33:da:43:bc:24:ad:dc:0b:50:24:c5:
53:ff:f7:41:c0:9f:5a:5b:6f:6d:c5:61:55:35:c8:
8b:78:8f:4a:3e:b6:59:e6:57:f8:3b:67:c0:39:f4:
37:83:8f:3a:e8:a4:29:27:38:bf:c9:b9:bf:7b:50:
34:70:55:30:b0:a9:32:66:c8:8c:95:63:2c:b3:92:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:3A:CA:E1:AC:88:AF:D4:68:DA:D9:B6:AF:77:BF:24:62:07:BF
X509v3 Authority Key Identifier:
keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.148.0/22
Signature Algorithm: sha256WithRSAEncryption
83:3e:1a:de:c2:5e:ff:9b:1d:4f:64:30:4b:8c:90:3d:60:8f:
8a:41:23:3f:3b:1a:2a:a0:94:06:4a:24:c0:83:b3:93:34:83:
ff:4f:d8:e2:a0:3f:73:6a:a2:80:4b:34:c2:d5:93:12:ac:0f:
91:09:fd:c0:71:61:91:94:38:e5:09:d0:11:fc:bc:68:60:23:
9d:c7:fa:ea:8d:2a:a6:a1:16:89:9d:db:3f:cd:b3:fa:ce:fe:
a6:71:1c:cb:53:86:fe:14:7b:e1:10:59:09:c8:3a:41:34:36:
50:22:31:5b:fc:b5:0f:b5:c6:4f:a6:bd:94:fd:f6:30:4d:1a:
e5:a6:ce:15:f8:d5:b6:fd:ba:47:91:12:5d:ad:9c:44:ec:1b:
9f:31:da:b9:b1:45:57:90:9d:b8:2f:8c:62:24:61:58:a3:6d:
d7:6b:9d:b6:e9:bc:29:f4:00:a3:52:09:78:86:8f:18:d9:68:
4e:6e:26:e1:8b:3e:66:14:6f:32:47:cf:c5:4f:8a:ed:b7:66:
18:35:a9:7a:80:65:12:9e:a8:bf:61:16:72:ec:26:ea:28:35:
28:a4:1b:1e:1a:d9:60:3c:81:0d:55:73:1e:6a:5d:7c:2a:c4:
c1:a1:5b:56:08:f0:a2:30:5e:ef:57:5d:39:f9:15:b2:6c:a7:
4e:01:c7:75
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUawtb3xHU1k+HGlXtEbK3wbVBcUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4
OEZGMzZFNTAeFw0yNDAzMDUxNzUxMTZaFw0yNTAzMDQxNzU2MTZaMDMxMTAvBgNV
BAMTKDk1OTYzQUNBRTFBQzg4QUZENDY4REFEOUI2QUY3N0JGMjQ2MjA3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC473bvIdYgqdNZ2qNRYQovVtmR
bywkSlclC/KLLPZy7WuekfeVfaKWww+vA1NJCgFYEI0i6fzWzoLhm9nub7qvwMQF
zI60tcdr8tQfvLGzu9ZGwTqBKrrGMFV39Zo41F0LRyMyfbr9SJTTPB5Wuse6uiyr
J7PHWR3rBRPl/7mIXAUSZ3ZRl73/yvQNG4asNjkW4PhR5uTmEOUE+FOj8eENFGfw
2Kp01wixTZSgv6+oZSXcQmEHR0sz2kO8JK3cC1AkxVP/90HAn1pbb23FYVU1yIt4
j0o+tlnmV/g7Z8A59DeDjzropCknOL/Jub97UDRwVTCwqTJmyIyVYyyzkskhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlZY6yuGsiK/UaNrZtq93vyRiB78wHwYDVR0j
BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE
OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5
QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3
OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF
MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzM0MzUyZTMxMzgzNjJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbqU
MA0GCSqGSIb3DQEBCwUAA4IBAQCDPhrewl7/mx1PZDBLjJA9YI+KQSM/OxoqoJQG
SiTAg7OTNIP/T9jioD9zaqKASzTC1ZMSrA+RCf3AcWGRlDjlCdAR/LxoYCOdx/rq
jSqmoRaJnds/zbP6zv6mcRzLU4b+FHvhEFkJyDpBNDZQIjFb/LUPtcZPpr2U/fYw
TRrlps4V+NW2/bpHkRJdrZxE7BufMdq5sUVXkJ24L4xiJGFYo23Xa5226bwp9ACj
Ugl4ho8Y2WhObibhiz5mFG8yR8/FT4rtt2YYNal6gGUSnqi/YRZy7CbqKDUopBse
GtlgPIENVXMeal18KsTBoVtWCPCiMF7vV105+RWybKdOAcd1
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:23:56 2025 by rpki-client