Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
File: 3139302e35372e32332e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier: wEWEF7RQzUtNTfI+vpelRHaF5On3Wp6VNaHLIEkTniQ=
Subject key identifier: 80:2D:6A:58:2C:8D:85:9B:F3:16:F0:EB:E4:E1:DE:8F:1A:1A:F9:C3
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 0CB162FA8F51B383936CE451AA718D95F09AEFE5
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
Signing time: Tue 05 Mar 2024 18:07:00 +0000
ROA not before: Tue 05 Mar 2024 18:02:00 +0000
ROA not after: Tue 04 Mar 2025 18:07:00 +0000
asID: 263783
IP address blocks: 190.57.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b1:62:fa:8f:51:b3:83:93:6c:e4:51:aa:71:8d:95:f0:9a:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Mar 5 18:02:00 2024 GMT
Not After : Mar 4 18:07:00 2025 GMT
Subject: CN=802D6A582C8D859BF316F0EBE4E1DE8F1A1AF9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:dd:be:28:48:0c:de:97:ca:04:03:8b:cc:
7f:2e:f2:87:2e:38:d4:4b:e3:71:cd:f9:f9:1e:1d:
10:5e:70:80:1b:96:9f:dd:9e:50:59:ab:34:01:53:
0a:7c:26:d1:f9:cc:10:b8:90:89:5b:cf:af:f3:3d:
19:46:38:2c:3d:dc:f7:08:93:dc:0b:f1:57:f8:37:
0c:6d:7d:d2:1b:bc:9f:8e:88:cc:bd:67:f7:48:49:
c2:f9:eb:e2:46:79:50:b5:db:c1:ea:90:d0:b5:14:
3b:66:14:32:f8:ee:c9:c0:41:07:2a:1f:bf:6a:92:
89:43:30:57:f9:4b:60:bb:ad:a6:b8:42:59:c2:9a:
a7:f5:3b:c3:57:3d:64:02:2a:18:9f:ac:d1:a3:68:
06:d2:dc:97:59:44:0c:b2:9c:03:8e:d5:1c:64:4d:
ec:82:83:6a:57:09:98:34:b1:7d:b2:97:ce:14:9f:
fb:19:81:ff:fd:a1:2f:35:7a:49:8c:c4:10:a2:a2:
41:3e:a7:35:29:0e:ec:59:83:62:4a:07:b1:25:51:
b1:fa:22:63:b1:5f:39:02:0c:37:8f:86:70:da:45:
fa:3f:63:19:44:67:6c:a6:24:13:50:33:d8:10:32:
3e:4a:ae:f2:f4:fd:09:f1:fe:77:0f:98:93:60:30:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:6A:58:2C:8D:85:9B:F3:16:F0:EB:E4:E1:DE:8F:1A:1A:F9:C3
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:90:63:ff:f5:0a:69:bd:11:56:b9:e8:90:dc:a7:50:ce:bf:
78:6f:e7:e7:89:c8:3f:17:e5:18:c5:98:f4:01:4b:0d:40:0d:
de:2a:31:14:5f:b9:c7:9d:9e:f1:d2:e1:46:1b:43:07:26:eb:
92:49:aa:32:6c:6e:3c:c3:4e:8a:c5:dc:80:d4:e6:51:87:b9:
77:3b:ab:d2:0a:0f:01:f5:45:38:a9:10:6a:af:69:d2:6e:ed:
4a:2d:da:a8:4d:a8:9a:45:e7:8f:67:77:53:62:38:17:fe:54:
18:34:b6:30:ee:37:f3:18:68:7e:d2:19:59:61:b3:c8:54:80:
7d:63:c4:98:67:52:4a:0e:8d:e2:96:26:8f:21:f0:8e:eb:a3:
05:a6:69:db:bc:bc:e9:41:9c:d6:ae:fc:01:8a:6d:bc:6a:4e:
d9:dc:2b:25:46:6e:b1:ef:da:c8:3b:c4:bd:ca:fe:ad:4f:f1:
cf:4e:ae:dc:bf:1a:9c:a9:e0:f5:3a:3c:86:d9:fe:10:2a:60:
3c:af:87:ee:73:98:21:10:4d:32:44:58:11:b8:a7:bb:23:70:
cc:05:af:99:0f:b0:32:1f:c8:ef:c2:6f:c1:f7:d3:52:77:18:
a6:ae:fb:54:ef:8a:62:0b:2d:ba:d4:ee:ff:51:43:3b:13:8d:
ee:ce:6b:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDLFi+o9Rs4OTbORRqnGNlfCa7+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAyMDBaFw0yNTAzMDQxODA3MDBaMDMxMTAvBgNV
BAMTKDgwMkQ2QTU4MkM4RDg1OUJGMzE2RjBFQkU0RTFERThGMUExQUY5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPt2+KEgM3pfKBAOLzH8u8ocu
ONRL43HN+fkeHRBecIAblp/dnlBZqzQBUwp8JtH5zBC4kIlbz6/zPRlGOCw93PcI
k9wL8Vf4NwxtfdIbvJ+OiMy9Z/dIScL56+JGeVC128HqkNC1FDtmFDL47snAQQcq
H79qkolDMFf5S2C7raa4QlnCmqf1O8NXPWQCKhifrNGjaAbS3JdZRAyynAOO1Rxk
TeyCg2pXCZg0sX2yl84Un/sZgf/9oS81ekmMxBCiokE+pzUpDuxZg2JKB7ElUbH6
ImOxXzkCDDePhnDaRfo/YxlEZ2ymJBNQM9gQMj5KrvL0/Qnx/ncPmJNgMB8rAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgC1qWCyNhZvzFvDr5OHejxoa+cMwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzIzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45FzAN
BgkqhkiG9w0BAQsFAAOCAQEAC5Bj//UKab0RVrnokNynUM6/eG/n54nIPxflGMWY
9AFLDUAN3ioxFF+5x52e8dLhRhtDBybrkkmqMmxuPMNOisXcgNTmUYe5dzur0goP
AfVFOKkQaq9p0m7tSi3aqE2omkXnj2d3U2I4F/5UGDS2MO438xhoftIZWWGzyFSA
fWPEmGdSSg6N4pYmjyHwjuujBaZp27y86UGc1q78AYptvGpO2dwrJUZuse/ayDvE
vcr+rU/xz06u3L8anKng9To8htn+ECpgPK+H7nOYIRBNMkRYEbinuyNwzAWvmQ+w
Mh/I78JvwffTUncYpq77VO+KYgstutTu/1FDOxON7s5rlQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:34 2025 by rpki-client