Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
File: 3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier: L4ujQ47jVmxvHu+mAQfeLMDc52aBOjhFS8VQiZNyF/s=
Subject key identifier: B5:67:05:8D:CB:51:31:D6:35:4D:4A:5F:B3:C5:FC:C5:F6:A3:0B:4B
Certificate issuer: /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial: 555A730209697D3E89FC06FC1F6F9EDCEBC1C406
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
Signing time: Tue 05 Mar 2024 18:04:18 +0000
ROA not before: Tue 05 Mar 2024 17:59:18 +0000
ROA not after: Tue 04 Mar 2025 18:04:18 +0000
asID: 269750
IP address blocks: 168.194.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5a:73:02:09:69:7d:3e:89:fc:06:fc:1f:6f:9e:dc:eb:c1:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Validity
Not Before: Mar 5 17:59:18 2024 GMT
Not After : Mar 4 18:04:18 2025 GMT
Subject: CN=B567058DCB5131D6354D4A5FB3C5FCC5F6A30B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:d2:00:25:cc:ff:ab:52:ae:42:48:d5:06:
b6:0b:9e:b6:4c:b2:ac:f7:ec:4c:34:32:52:b9:5e:
af:3b:8e:21:f9:27:7c:e6:c2:54:82:22:e5:c2:7e:
e3:eb:bd:b4:99:d3:a5:53:6e:db:fc:16:40:bc:65:
16:ea:72:c7:61:c4:09:ff:d6:6f:b6:53:02:09:87:
e3:64:91:b3:aa:6d:a2:72:ef:4c:86:b6:89:8d:2a:
de:a3:81:0b:66:d3:21:fc:e5:ac:a3:3c:86:46:22:
87:bf:51:4d:75:f9:0a:f4:6a:63:18:98:38:9b:b6:
59:8a:b1:a1:e4:b6:ee:4f:90:f2:73:63:5a:d1:1e:
bb:aa:74:e3:a0:d1:fd:13:4d:7d:5b:aa:ef:42:4a:
b4:71:c2:5c:47:fb:d7:8f:8e:09:bd:ce:b2:36:57:
40:9a:b4:98:78:e5:f9:b9:06:c1:b7:88:fd:e8:4f:
23:ec:a7:a0:7e:58:c0:f9:6e:06:42:64:2a:d0:95:
ba:13:01:41:76:66:8e:69:2e:2b:30:26:ee:cb:1c:
75:e1:b8:01:7a:c6:75:1d:da:7c:0b:f9:c0:99:1c:
da:93:07:b2:fe:1c:7a:ae:5c:c8:5a:ea:71:4b:3e:
b8:69:61:31:85:63:e9:3d:91:0e:b9:82:30:63:71:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:05:8D:CB:51:31:D6:35:4D:4A:5F:B3:C5:FC:C5:F6:A3:0B:4B
X509v3 Authority Key Identifier:
keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.108.0/22
Signature Algorithm: sha256WithRSAEncryption
78:84:f8:cc:c8:8a:ae:91:7a:34:af:8a:d4:8a:04:66:6a:ea:
c3:39:c1:6c:4b:35:fb:07:e1:cf:55:5b:22:c2:0e:be:a9:4e:
ae:41:d0:14:91:e8:70:36:91:e9:4a:83:6a:94:c8:b8:b2:8b:
94:29:09:fb:d1:04:f8:63:70:5a:fd:5e:42:fc:f0:b9:26:f3:
5e:9d:81:aa:fd:bf:b1:f4:4d:d3:3b:a4:77:ee:19:84:f2:63:
06:fa:ac:18:be:1d:1d:8c:1d:f9:cf:07:8d:a6:78:89:df:af:
17:54:d0:df:2a:75:7e:86:e2:24:62:0e:d4:2c:dc:3d:c9:e9:
8c:09:ad:b7:2b:06:27:7c:e5:08:e7:fb:20:44:b1:09:cb:63:
c5:d0:6f:f6:70:bd:23:5b:9f:a8:9a:70:61:a8:96:fb:75:05:
4f:73:2b:70:96:3d:0d:5d:49:3a:f5:65:f0:fa:44:5b:91:a7:
37:70:2b:43:52:f1:e5:a3:ce:b5:f4:ec:2a:cf:14:2f:80:7f:
f9:a2:b1:35:b9:ed:41:48:a1:bb:0f:eb:eb:eb:e3:f7:4e:66:
fc:74:29:e7:6b:d3:77:1c:9b:85:cb:bc:c2:dc:22:f7:c3:58:
6e:45:04:71:d2:1a:7e:62:a2:ff:70:97:68:5f:fc:33:b0:e4:
83:07:0a:e6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVVpzAglpfT6J/Ab8H2+e3OvBxAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw
RkFCMDRDNTAeFw0yNDAzMDUxNzU5MThaFw0yNTAzMDQxODA0MThaMDMxMTAvBgNV
BAMTKEI1NjcwNThEQ0I1MTMxRDYzNTRENEE1RkIzQzVGQ0M1RjZBMzBCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaItIAJcz/q1KuQkjVBrYLnrZM
sqz37Ew0MlK5Xq87jiH5J3zmwlSCIuXCfuPrvbSZ06VTbtv8FkC8ZRbqcsdhxAn/
1m+2UwIJh+NkkbOqbaJy70yGtomNKt6jgQtm0yH85ayjPIZGIoe/UU11+Qr0amMY
mDibtlmKsaHktu5PkPJzY1rRHruqdOOg0f0TTX1bqu9CSrRxwlxH+9ePjgm9zrI2
V0CatJh45fm5BsG3iP3oTyPsp6B+WMD5bgZCZCrQlboTAUF2Zo5pLiswJu7LHHXh
uAF6xnUd2nwL+cCZHNqTB7L+HHquXMha6nFLPrhpYTGFY+k9kQ65gjBjcdFfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUtWcFjctRMdY1TUpfs8X8xfajC0swHwYDVR0j
BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1
NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw
MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG
NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx
NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wLzMxMzYzODJlMzEzOTM0MmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzNzM1MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
wmwwDQYJKoZIhvcNAQELBQADggEBAHiE+MzIiq6RejSvitSKBGZq6sM5wWxLNfsH
4c9VWyLCDr6pTq5B0BSR6HA2kelKg2qUyLiyi5QpCfvRBPhjcFr9XkL88Lkm816d
gar9v7H0TdM7pHfuGYTyYwb6rBi+HR2MHfnPB42meInfrxdU0N8qdX6G4iRiDtQs
3D3J6YwJrbcrBid85Qjn+yBEsQnLY8XQb/ZwvSNbn6iacGGolvt1BU9zK3CWPQ1d
STr1ZfD6RFuRpzdwK0NS8eWjzrX07CrPFC+Af/misTW57UFIobsP6+vr4/dOZvx0
Kedr03ccm4XLvMLcIvfDWG5FBHHSGn5iov9wl2hf/DOw5IMHCuY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:46:32 2025 by rpki-client