Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
File: 3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa (raw, json)
Hash identifier: P6YEdAAS7XMEvVxZAmCTwjPYio5U/GYB6h2o19r3kBg=
Subject key identifier: AB:0F:CA:47:51:09:39:C3:98:57:AA:75:7E:35:C2:F4:80:1B:CB:B7
Certificate issuer: /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial: 58B69D776B851E83B740468D6CB38ABC6B501A4A
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
Signing time: Sun 06 Oct 2024 17:30:00 +0000
ROA not before: Sun 06 Oct 2024 17:25:00 +0000
ROA not after: Sun 05 Oct 2025 17:30:00 +0000
asID: 264845
IP address blocks: 201.219.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b6:9d:77:6b:85:1e:83:b7:40:46:8d:6c:b3:8a:bc:6b:50:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
Validity
Not Before: Oct 6 17:25:00 2024 GMT
Not After : Oct 5 17:30:00 2025 GMT
Subject: CN=AB0FCA47510939C39857AA757E35C2F4801BCBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:39:b7:2f:ee:fc:fc:fb:d7:e9:d3:22:d0:
af:a9:8d:d8:d4:b4:db:dd:92:40:26:d3:7e:1a:cc:
78:3e:c5:31:3f:a1:79:20:e5:f0:a9:9b:a7:10:b6:
62:14:5f:10:56:b9:6d:db:0a:4b:85:8d:01:ac:57:
92:88:c5:99:89:32:a0:53:9a:bf:c0:24:d7:13:e4:
83:31:74:31:a2:db:c5:7a:f5:91:ba:16:3a:ef:58:
da:da:84:d9:88:24:d1:ee:bb:a8:0c:4d:bb:fe:c2:
a3:39:ef:53:e0:da:00:75:a7:be:5f:2f:f1:20:96:
c9:a2:6a:2e:3f:fe:c5:ee:f5:ed:42:6a:c3:dd:8d:
f7:23:78:1e:8f:b1:d8:01:12:43:4b:0a:ac:3f:e6:
78:d1:ab:e3:f7:54:92:24:2d:ac:9d:be:77:f2:8a:
98:67:91:7c:20:04:cf:a1:e6:5e:c1:c9:fa:45:22:
30:21:c3:d0:75:c6:d0:61:7a:35:af:57:b7:63:86:
07:a0:17:27:d5:40:6e:87:93:ee:29:db:30:e2:7c:
0e:29:b6:28:f8:fc:f3:6a:78:83:f6:42:4f:28:0d:
23:54:cf:55:d6:86:74:cb:9b:5d:f1:1d:b6:10:c6:
f3:92:94:5d:39:14:d0:a0:51:b3:ec:3d:bb:3b:f1:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0F:CA:47:51:09:39:C3:98:57:AA:75:7E:35:C2:F4:80:1B:CB:B7
X509v3 Authority Key Identifier:
keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:24:da:6a:4d:7b:a9:fd:36:8e:d5:78:29:79:42:fd:2a:53:
1c:62:ea:d0:d3:54:3d:ce:0f:c9:09:cb:d8:5b:d6:b2:02:3c:
77:89:3d:5c:fe:e3:7a:62:4e:6b:b8:df:2f:c6:b2:7d:b6:58:
38:76:60:b9:1b:7b:35:7a:76:db:e7:3f:34:47:8b:33:ba:6e:
4e:73:77:91:b9:4d:8b:09:ac:d6:a7:85:7c:12:67:9f:e0:de:
8e:ee:d7:d3:3d:71:7d:ab:c2:48:0d:62:c1:b3:84:3e:d7:a4:
d4:ac:e8:47:75:61:40:60:7f:b0:c1:50:b4:9c:58:a2:b1:10:
dc:b5:8f:04:05:2f:8f:c1:09:57:76:57:a7:0a:c9:13:d9:21:
b2:cb:eb:ac:0b:d1:30:89:69:fa:72:da:c0:1a:b9:0f:e8:f6:
c9:15:35:cc:b0:3d:5d:fe:54:1c:6f:21:9f:4d:39:82:4a:dc:
10:a0:ce:df:97:75:41:13:23:dd:5b:de:84:a4:b5:49:ca:e1:
4c:80:51:6e:be:55:5f:6b:4e:a4:b9:8b:8e:c4:80:b0:93:dd:
f4:72:27:4d:8c:9d:da:2e:c3:9e:e6:ce:77:81:22:2c:b0:16:
cd:be:45:e5:58:1b:2a:d0:20:a3:c3:ed:59:be:b8:20:3b:25:
c9:4b:7b:b7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWLadd2uFHoO3QEaNbLOKvGtQGkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNDEwMDYxNzI1MDBaFw0yNTEwMDUxNzMwMDBaMDMxMTAvBgNV
BAMTKEFCMEZDQTQ3NTEwOTM5QzM5ODU3QUE3NTdFMzVDMkY0ODAxQkNCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMzm3L+78/PvX6dMi0K+pjdjU
tNvdkkAm034azHg+xTE/oXkg5fCpm6cQtmIUXxBWuW3bCkuFjQGsV5KIxZmJMqBT
mr/AJNcT5IMxdDGi28V69ZG6FjrvWNrahNmIJNHuu6gMTbv+wqM571Pg2gB1p75f
L/Eglsmiai4//sXu9e1CasPdjfcjeB6PsdgBEkNLCqw/5njRq+P3VJIkLaydvnfy
iphnkXwgBM+h5l7ByfpFIjAhw9B1xtBhejWvV7djhgegFyfVQG6Hk+4p2zDifA4p
tij4/PNqeIP2Qk8oDSNUz1XWhnTLm13xHbYQxvOSlF05FNCgUbPsPbs78enzAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUqw/KR1EJOcOYV6p1fjXC9IAby7cwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzODM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
2/wwDQYJKoZIhvcNAQELBQADggEBAM4k2mpNe6n9No7VeCl5Qv0qUxxi6tDTVD3O
D8kJy9hb1rICPHeJPVz+43piTmu43y/Gsn22WDh2YLkbezV6dtvnPzRHizO6bk5z
d5G5TYsJrNanhXwSZ5/g3o7u19M9cX2rwkgNYsGzhD7XpNSs6Ed1YUBgf7DBULSc
WKKxENy1jwQFL4/BCVd2V6cKyRPZIbLL66wL0TCJafpy2sAauQ/o9skVNcywPV3+
VBxvIZ9NOYJK3BCgzt+XdUETI91b3oSktUnK4UyAUW6+VV9rTqS5i47EgLCT3fRy
J02Mndouw57mzneBIiywFs2+ReVYGyrQIKPD7Vm+uCA7JclLe7c=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:57 2025 by rpki-client