Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
File: 34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa (raw, json)
Hash identifier: HrP6gTE0mqCqdEmHmkFVRJKYWHt8BnyaFMq9DclxjA8=
Subject key identifier: FB:D7:BF:27:72:9E:3A:2B:8F:02:81:08:32:29:45:8F:79:80:26:B5
Certificate issuer: /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial: 221D3F959FC3B5F8C63949139850A4611738810D
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
Signing time: Tue 05 Mar 2024 18:11:08 +0000
ROA not before: Tue 05 Mar 2024 18:06:08 +0000
ROA not after: Tue 04 Mar 2025 18:11:08 +0000
asID: 267778
IP address blocks: 45.171.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1d:3f:95:9f:c3:b5:f8:c6:39:49:13:98:50:a4:61:17:38:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Validity
Not Before: Mar 5 18:06:08 2024 GMT
Not After : Mar 4 18:11:08 2025 GMT
Subject: CN=FBD7BF27729E3A2B8F0281083229458F798026B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:9e:8f:4a:64:0b:25:c9:49:47:d3:8a:1e:
4e:79:3b:ab:c3:29:05:f9:9a:60:26:42:29:4f:56:
23:42:68:1d:d3:ee:02:0f:9b:c1:72:29:ab:ed:e8:
fc:79:1d:14:7f:31:42:4c:10:66:da:20:72:a4:f5:
83:63:fa:1f:09:14:68:59:47:41:20:fe:40:3d:93:
20:9f:8f:ee:cf:67:f9:3d:0e:d6:fa:67:f4:e8:b8:
e2:0f:ce:6c:0b:1d:5b:e9:fc:77:85:81:75:56:84:
80:82:24:70:64:62:8c:fc:4a:ea:42:5c:19:34:77:
67:b7:20:2c:41:2e:8c:c5:0b:ad:74:f9:75:ef:d3:
09:8e:90:35:21:b1:3c:5a:68:46:d0:f8:ea:fa:d3:
ae:90:fc:d0:65:c3:a5:5d:b0:e2:3f:83:87:e8:ac:
34:6d:80:dd:a1:5e:0a:82:46:41:a7:f3:6b:d3:bf:
07:a8:f7:9c:73:5c:b3:20:29:9e:71:50:34:c9:f9:
6f:5a:71:b4:a3:4e:d3:9c:9f:79:21:27:34:53:f5:
e9:dd:02:05:7d:c1:91:73:08:31:4e:43:5e:52:81:
e1:79:da:67:42:87:e8:83:ff:c8:28:28:d6:49:fb:
9d:e0:d3:10:34:20:b2:eb:fc:83:d8:27:85:d6:5f:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:BF:27:72:9E:3A:2B:8F:02:81:08:32:29:45:8F:79:80:26:B5
X509v3 Authority Key Identifier:
keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.108.0/22
Signature Algorithm: sha256WithRSAEncryption
01:c8:70:68:b8:e0:2b:8a:c9:42:31:8e:49:fd:a2:75:57:36:
b2:59:2b:64:22:92:42:c8:52:0e:90:b9:fd:6d:00:75:89:88:
e1:02:e9:ec:62:e7:5c:8c:01:16:63:22:42:b1:2e:a7:d7:0f:
9e:21:ca:f7:99:1f:d3:00:d6:da:a1:3a:17:c5:27:06:0a:15:
e6:8a:3c:07:5c:60:ad:17:7e:ad:84:3d:bd:79:8b:72:6e:9a:
ba:07:79:07:ab:19:c1:03:1d:c2:36:92:32:d3:3c:87:fc:53:
4b:81:8e:68:2c:f4:c5:f2:80:f3:4b:21:4c:3f:cf:9c:cb:d6:
b5:e3:52:d2:8c:6d:99:50:ed:32:19:8b:63:f2:30:03:52:a5:
80:a9:5e:8c:5a:4d:45:29:03:1e:ce:c9:be:e5:7d:e6:8e:24:
31:ba:12:b4:1a:d3:9f:8b:6d:84:50:96:68:ee:d9:a4:9c:17:
2f:e4:48:af:24:53:c6:c4:82:06:ec:43:a4:35:d9:7c:d5:88:
51:f9:e0:9c:44:34:4f:ec:76:fc:b7:91:ac:dc:1c:17:1e:12:
08:8c:9e:f5:0f:c9:fa:0e:c8:e3:0e:bf:1e:34:d7:24:da:20:
66:61:71:52:b6:8b:d5:72:d5:20:45:9b:1d:81:f5:d3:43:bc:
c5:89:7e:a6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIh0/lZ/DtfjGOUkTmFCkYRc4gQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1MTFGMUVGRDBENjcxRDExOTBDOTM4Q0E1RDdGMkI2
QTkxMTA3MTAeFw0yNDAzMDUxODA2MDhaFw0yNTAzMDQxODExMDhaMDMxMTAvBgNV
BAMTKEZCRDdCRjI3NzI5RTNBMkI4RjAyODEwODMyMjk0NThGNzk4MDI2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7p6PSmQLJclJR9OKHk55O6vD
KQX5mmAmQilPViNCaB3T7gIPm8FyKavt6Px5HRR/MUJMEGbaIHKk9YNj+h8JFGhZ
R0Eg/kA9kyCfj+7PZ/k9Dtb6Z/TouOIPzmwLHVvp/HeFgXVWhICCJHBkYoz8SupC
XBk0d2e3ICxBLozFC610+XXv0wmOkDUhsTxaaEbQ+Or6066Q/NBlw6VdsOI/g4fo
rDRtgN2hXgqCRkGn82vTvweo95xzXLMgKZ5xUDTJ+W9acbSjTtOcn3khJzRT9end
AgV9wZFzCDFOQ15SgeF52mdCh+iD/8goKNZJ+53g0xA0ILLr/IPYJ4XWXyOJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+9e/J3KeOiuPAoEIMilFj3mAJrUwHwYDVR0j
BBgwFoAUb1EfHv0NZx0RkMk4yl1/K2qREHEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTY0RDFFOUI4NDYyMjA0NjY4RUNCNzRBMTg4NzIxRkQ1
MjY2RTUxRUJBRTZGRDI5OTdBRTlCMDlGMUU1QjA1LzAvNkY1MTFGMUVGRDBENjcx
RDExOTBDOTM4Q0E1RDdGMkI2QTkxMTA3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RjUxMUYxRUZEMEQ2NzFEMTE5
MEM5MzhDQTVEN0YyQjZBOTExMDcxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk2NEQxRTlCODQ2MjIwNDY2OEVDQjc0QTE4ODcyMUZENTI2NkU1MUVC
QUU2RkQyOTk3QUU5QjA5RjFFNUIwNS8wLzM0MzUyZTMxMzczMTJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLats
MA0GCSqGSIb3DQEBCwUAA4IBAQAByHBouOArislCMY5J/aJ1VzayWStkIpJCyFIO
kLn9bQB1iYjhAunsYudcjAEWYyJCsS6n1w+eIcr3mR/TANbaoToXxScGChXmijwH
XGCtF36thD29eYtybpq6B3kHqxnBAx3CNpIy0zyH/FNLgY5oLPTF8oDzSyFMP8+c
y9a141LSjG2ZUO0yGYtj8jADUqWAqV6MWk1FKQMezsm+5X3mjiQxuhK0GtOfi22E
UJZo7tmknBcv5EivJFPGxIIG7EOkNdl81YhR+eCcRDRP7Hb8t5Gs3BwXHhIIjJ71
D8n6DsjjDr8eNNck2iBmYXFStovVctUgRZsdgfXTQ7zFiX6m
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:26 2025 by rpki-client