Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
File: 34352e37302e35362e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier: lWCx+klno6vtC5bs98KDMzR4ViRyPSgP1n3ymdsrMFI=
Subject key identifier: CF:71:FB:A3:2E:EA:7F:BA:69:8B:30:BF:36:54:45:B1:C7:17:B1:B1
Certificate issuer: /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial: 0875D63101D2A9A12124ED424753490D9E6191F0
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
Signing time: Tue 05 Mar 2024 17:54:47 +0000
ROA not before: Tue 05 Mar 2024 17:49:47 +0000
ROA not after: Tue 04 Mar 2025 17:54:47 +0000
asID: 264668
IP address blocks: 45.70.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:75:d6:31:01:d2:a9:a1:21:24:ed:42:47:53:49:0d:9e:61:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Validity
Not Before: Mar 5 17:49:47 2024 GMT
Not After : Mar 4 17:54:47 2025 GMT
Subject: CN=CF71FBA32EEA7FBA698B30BF365445B1C717B1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:80:63:5a:a7:c3:99:83:62:29:73:11:45:
29:09:ce:42:0c:d3:bc:a3:d5:58:9c:80:01:75:6b:
2f:ac:d8:f9:fa:09:43:26:9f:e4:0e:97:ba:e0:ef:
70:ee:92:6d:2d:5f:07:aa:8a:ee:7a:1e:b0:25:25:
44:6e:fe:b9:ce:1e:c3:f4:2f:02:22:c5:a9:47:7c:
6d:e5:f8:e9:f1:6e:81:70:3a:17:f1:cb:6a:81:ef:
27:5c:30:e0:f0:0c:30:ae:28:fc:14:04:fd:6b:fd:
54:2c:98:a1:4b:19:ba:98:7c:e6:83:04:a3:7c:38:
28:e8:9b:05:1a:6f:39:44:05:98:45:f4:6b:13:5e:
71:86:2b:58:6f:17:21:a6:77:76:3d:1b:2b:16:f3:
7a:fa:71:18:02:ed:9d:5d:23:2f:17:7b:4c:7b:e0:
6b:29:e1:04:18:23:2b:54:db:af:1c:a9:77:af:48:
7d:30:25:b7:02:65:ce:a0:f0:bc:e3:76:2a:d1:9b:
85:b9:33:47:1a:ce:f8:65:1d:1d:12:3d:96:97:c3:
dc:aa:f7:8b:19:ef:f0:34:f4:22:e1:e4:fd:09:59:
e1:95:42:f4:75:fd:53:e0:07:59:98:1e:4c:cf:2b:
ca:6f:9b:bb:97:fa:05:13:95:0d:92:73:12:fc:5f:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:FB:A3:2E:EA:7F:BA:69:8B:30:BF:36:54:45:B1:C7:17:B1:B1
X509v3 Authority Key Identifier:
keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:53:17:17:34:b7:17:02:ba:bd:a1:77:50:11:8b:75:eb:84:
22:19:aa:07:d9:3d:a6:13:73:f3:23:97:6e:dc:d1:92:ab:d1:
61:39:24:c1:4c:0b:7c:8d:55:f7:c0:db:75:29:ef:6d:68:92:
44:dd:b9:88:08:b0:e4:46:c0:ff:27:10:bd:52:1b:bf:05:6e:
d8:16:c6:45:d3:19:e7:15:57:ee:47:e0:12:ac:f2:58:f5:30:
fb:aa:d1:7a:69:25:9c:51:b8:a9:1e:cd:b6:08:5e:44:ca:09:
5a:59:01:2f:f3:19:15:51:05:26:c5:f1:4d:b4:aa:2d:91:5d:
f8:b6:4b:05:09:0c:ac:9b:cf:cc:36:67:b1:1f:05:79:b5:f3:
a2:c6:6e:81:d9:75:82:8f:fb:84:2f:e3:95:da:9c:5f:0a:70:
3c:84:e8:07:53:e8:db:86:71:8e:06:b1:32:85:3b:fc:3e:85:
09:23:3f:fa:0b:e4:c9:e4:12:6c:ab:9c:ac:60:e7:7a:18:33:
9b:1e:10:97:e2:c7:69:fd:9d:6a:e8:e0:18:55:29:e4:27:7b:
7f:0b:90:91:4e:31:59:08:b8:a9:96:42:a4:16:5c:f5:c0:78:
db:41:a8:ba:98:82:59:98:97:6c:31:27:6f:b4:7a:98:19:e1:
47:2d:2b:e9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCHXWMQHSqaEhJO1CR1NJDZ5hkfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFCQzNEMEYyNERCODkwRUEzN0M5NzlDQ0M2QkU4OEM3
RkVEMzM0MDAeFw0yNDAzMDUxNzQ5NDdaFw0yNTAzMDQxNzU0NDdaMDMxMTAvBgNV
BAMTKENGNzFGQkEzMkVFQTdGQkE2OThCMzBCRjM2NTQ0NUIxQzcxN0IxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8YBjWqfDmYNiKXMRRSkJzkIM
07yj1VicgAF1ay+s2Pn6CUMmn+QOl7rg73Dukm0tXweqiu56HrAlJURu/rnOHsP0
LwIixalHfG3l+OnxboFwOhfxy2qB7ydcMODwDDCuKPwUBP1r/VQsmKFLGbqYfOaD
BKN8OCjomwUabzlEBZhF9GsTXnGGK1hvFyGmd3Y9GysW83r6cRgC7Z1dIy8Xe0x7
4Gsp4QQYIytU268cqXevSH0wJbcCZc6g8LzjdirRm4W5M0cazvhlHR0SPZaXw9yq
94sZ7/A09CLh5P0JWeGVQvR1/VPgB1mYHkzPK8pvm7uX+gUTlQ2ScxL8X0dXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUz3H7oy7qf7ppizC/NlRFsccXsbEwHwYDVR0j
BBgwFoAUgbw9DyTbiQ6jfJeczGvojH/tM0AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OEFDNkJGNzMxRkQzMkEyNUJCMTFEMDA3RkEzMDc1RjNB
MzhCMjVCNzNCNkQzNjI5MUI1MEYzMjMzODRDQjhDLzAvODFCQzNEMEYyNERCODkw
RUEzN0M5NzlDQ0M2QkU4OEM3RkVEMzM0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MUJDM0QwRjI0REI4OTBFQTM3
Qzk3OUNDQzZCRTg4QzdGRUQzMzQwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjhBQzZCRjczMUZEMzJBMjVCQjExRDAwN0ZBMzA3NUYzQTM4QjI1Qjcz
QjZEMzYyOTFCNTBGMzIzMzg0Q0I4Qy8wLzM0MzUyZTM3MzAyZTM1MzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItRjgwDQYJ
KoZIhvcNAQELBQADggEBANdTFxc0txcCur2hd1ARi3XrhCIZqgfZPaYTc/Mjl27c
0ZKr0WE5JMFMC3yNVffA23Up721okkTduYgIsORGwP8nEL1SG78FbtgWxkXTGecV
V+5H4BKs8lj1MPuq0XppJZxRuKkezbYIXkTKCVpZAS/zGRVRBSbF8U20qi2RXfi2
SwUJDKybz8w2Z7EfBXm186LGboHZdYKP+4Qv45XanF8KcDyE6AdT6NuGcY4GsTKF
O/w+hQkjP/oL5MnkEmyrnKxg53oYM5seEJfix2n9nWro4BhVKeQne38LkJFOMVkI
uKmWQqQWXPXAeNtBqLqYglmYl2wxJ2+0epgZ4UctK+k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:03:42 2025 by rpki-client