Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
File: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (raw, json)
Hash identifier: dPe34YdYz3FQ7rF+gqdOJUUyLMl/cBDX2N6XkytR91k=
Subject key identifier: FF:10:DF:05:14:3B:F5:9A:14:A4:E9:97:58:A4:27:FB:B0:B2:6B:06
Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial: 0FE8A223843F6C1EDBDA5FF6E17B671DC0EFBC20
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
Signing time: Thu 07 Mar 2024 12:15:00 +0000
ROA not before: Thu 07 Mar 2024 12:10:00 +0000
ROA not after: Thu 06 Mar 2025 12:15:00 +0000
asID: 266710
IP address blocks: 45.230.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e8:a2:23:84:3f:6c:1e:db:da:5f:f6:e1:7b:67:1d:c0:ef:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Validity
Not Before: Mar 7 12:10:00 2024 GMT
Not After : Mar 6 12:15:00 2025 GMT
Subject: CN=FF10DF05143BF59A14A4E99758A427FBB0B26B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:de:bf:82:9e:90:74:2f:e6:12:07:24:84:
d9:ad:b0:20:4f:b6:6b:22:65:38:e8:ce:25:55:d9:
36:c4:78:6b:b9:5f:ca:94:16:2a:58:9a:9b:26:86:
7b:74:65:58:1f:49:87:79:46:20:ab:04:9c:4d:92:
b0:f0:c6:b8:f6:75:8f:e4:db:fb:a6:06:cb:fc:d0:
e1:c9:92:cf:3b:83:65:15:3a:9d:b5:b4:04:52:4d:
28:ff:1f:87:25:49:3e:5c:e5:f8:1c:0a:e2:1d:70:
30:72:be:59:85:8e:5c:23:b5:bf:5b:b1:3f:04:67:
4e:6b:18:c8:98:67:f5:7b:10:94:ad:39:cf:61:fa:
64:50:f5:70:ca:9f:2a:2b:b1:c2:79:0b:e3:85:99:
b6:e5:ba:19:46:df:0f:58:62:06:f1:5b:0e:6d:29:
39:b9:fe:55:3a:a9:82:9b:ac:61:fc:72:f9:25:d1:
b6:32:96:0a:d6:a1:ce:ca:ff:76:6c:66:e0:ef:0b:
92:3f:71:00:cf:7c:94:f0:6f:71:20:6a:d1:80:e4:
00:06:b4:0e:1d:34:ce:44:09:94:10:d9:49:e1:9a:
ad:00:36:58:9b:b5:b5:d7:b2:80:ff:3d:ea:e9:d2:
31:fa:c8:c1:aa:a3:d7:0b:15:e3:f8:ac:38:d0:3a:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:DF:05:14:3B:F5:9A:14:A4:E9:97:58:A4:27:FB:B0:B2:6B:06
X509v3 Authority Key Identifier:
keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:ab:48:2f:16:a5:54:28:58:76:4d:d5:47:9a:0d:ba:5c:fe:
db:13:54:74:46:cc:be:81:24:6a:5e:24:ef:0c:ea:ec:54:ec:
1c:78:e2:d1:e9:79:cb:33:68:c2:d3:64:87:fa:b0:e4:50:ad:
05:3f:31:7b:bd:72:63:06:25:21:bd:97:68:90:15:b2:6f:66:
b5:64:17:55:e8:84:ce:41:5b:94:bc:95:ff:d2:5d:12:f6:61:
75:1b:d8:d7:b3:ff:f6:9c:8e:08:48:82:54:2b:06:19:6d:80:
9f:d5:7f:cb:f0:66:a3:e3:9e:79:55:56:40:fc:0a:2e:43:95:
62:29:71:b1:21:55:ef:1d:22:3e:19:99:4c:93:aa:c2:aa:3b:
d1:9b:5a:a3:e6:17:2e:3c:3b:5a:b2:69:fc:15:07:61:79:fb:
34:d9:ba:c6:fa:2c:a1:2d:b2:5e:1d:d1:37:31:3f:c6:24:d3:
42:e2:02:0e:9d:37:92:ed:87:21:ab:77:ad:88:2f:8b:ec:06:
6e:05:5b:96:b1:3f:c0:40:38:59:e5:69:69:f4:d8:ce:77:09:
e9:c4:63:ea:68:f6:14:af:12:e2:5f:50:f6:93:00:34:02:f3:
8d:25:c1:0a:cb:a1:9b:1b:11:c8:33:43:18:1b:be:59:33:92:
26:80:fa:f5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUD+iiI4Q/bB7b2l/24XtnHcDvvCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw
ODgwNTlFNTAeFw0yNDAzMDcxMjEwMDBaFw0yNTAzMDYxMjE1MDBaMDMxMTAvBgNV
BAMTKEZGMTBERjA1MTQzQkY1OUExNEE0RTk5NzU4QTQyN0ZCQjBCMjZCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1P96/gp6QdC/mEgckhNmtsCBP
tmsiZTjoziVV2TbEeGu5X8qUFipYmpsmhnt0ZVgfSYd5RiCrBJxNkrDwxrj2dY/k
2/umBsv80OHJks87g2UVOp21tARSTSj/H4clST5c5fgcCuIdcDByvlmFjlwjtb9b
sT8EZ05rGMiYZ/V7EJStOc9h+mRQ9XDKnyorscJ5C+OFmbbluhlG3w9YYgbxWw5t
KTm5/lU6qYKbrGH8cvkl0bYylgrWoc7K/3ZsZuDvC5I/cQDPfJTwb3EgatGA5AAG
tA4dNM5ECZQQ2Unhmq0ANlibtbXXsoD/Perp0jH6yMGqo9cLFeP4rDjQOrsNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/xDfBRQ79ZoUpOmXWKQn+7CyawYwHwYDVR0j
BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3
NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz
ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1
QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE
RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wLzM0MzUyZTMyMzMzMDJlMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt5ggwDQYJ
KoZIhvcNAQELBQADggEBAD6rSC8WpVQoWHZN1UeaDbpc/tsTVHRGzL6BJGpeJO8M
6uxU7Bx44tHpecszaMLTZIf6sORQrQU/MXu9cmMGJSG9l2iQFbJvZrVkF1XohM5B
W5S8lf/SXRL2YXUb2Nez//acjghIglQrBhltgJ/Vf8vwZqPjnnlVVkD8Ci5DlWIp
cbEhVe8dIj4ZmUyTqsKqO9GbWqPmFy48O1qyafwVB2F5+zTZusb6LKEtsl4d0Tcx
P8Yk00LiAg6dN5LthyGrd62IL4vsBm4FW5axP8BAOFnlaWn02M53CenEY+po9hSv
EuJfUPaTADQC840lwQrLoZsbEcgzQxgbvlkzkiaA+vU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:15 2025 by rpki-client