Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
File: 34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa (raw, json)
Hash identifier: 3M3vCUHemRMM8OxFSHVuh3dEBA6PKJyUTQQ8BKe5I04=
Subject key identifier: E1:7B:D7:A4:C5:A8:D8:0B:2F:04:D2:C3:1E:CF:D4:D3:4C:93:B3:8A
Certificate issuer: /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial: 07BE5670E47D0D09C2F2DBD0397FA9B29B020352
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
Signing time: Tue 05 Mar 2024 17:44:15 +0000
ROA not before: Tue 05 Mar 2024 17:39:15 +0000
ROA not after: Tue 04 Mar 2025 17:44:15 +0000
asID: 266901
IP address blocks: 45.161.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:be:56:70:e4:7d:0d:09:c2:f2:db:d0:39:7f:a9:b2:9b:02:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Validity
Not Before: Mar 5 17:39:15 2024 GMT
Not After : Mar 4 17:44:15 2025 GMT
Subject: CN=E17BD7A4C5A8D80B2F04D2C31ECFD4D34C93B38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:88:5f:38:83:3e:8b:ed:56:f0:c8:0d:65:
1b:f0:90:3b:a1:6a:ab:85:27:18:e8:f5:a3:60:df:
b3:0c:a5:e1:91:40:aa:fe:c8:4e:66:25:74:56:5d:
82:0a:7f:c6:38:02:0a:5e:2f:07:1f:24:3d:ae:8b:
26:e2:92:41:89:5d:63:6d:ee:af:93:75:f4:6b:be:
38:81:8e:67:32:b3:2f:85:ae:09:62:fa:ea:9a:7a:
27:70:8f:0c:d3:0f:cc:63:c2:de:46:b2:0e:9e:47:
56:9e:98:c3:20:94:c7:dc:f3:e6:0f:84:4a:c3:1c:
e7:ae:5c:6a:91:01:a6:cd:b6:50:a3:ef:c3:67:53:
43:86:6d:bf:3b:be:87:da:9b:93:ac:33:dc:3d:3c:
1a:89:e3:20:15:10:d5:43:a2:58:4a:03:81:10:83:
ce:c9:e8:e9:16:16:ca:e5:52:e4:ce:63:34:95:2f:
77:12:e5:84:50:54:d1:c6:1b:42:38:33:48:4f:dd:
eb:b4:10:bb:6b:3e:93:c5:1f:58:5c:c3:51:49:3f:
67:6a:1f:e9:94:30:7b:45:7f:49:c9:44:ab:38:80:
44:10:b3:18:52:5c:38:0e:51:aa:c5:15:78:ed:d2:
b2:22:14:ce:ae:59:61:54:69:6e:17:08:8f:8e:76:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:D7:A4:C5:A8:D8:0B:2F:04:D2:C3:1E:CF:D4:D3:4C:93:B3:8A
X509v3 Authority Key Identifier:
keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:bf:4e:54:bc:3a:75:28:89:15:f8:96:89:2a:16:7c:62:02:
d7:b0:6e:64:f0:e7:da:9f:7a:70:d1:30:ad:62:ad:8f:80:63:
78:ff:05:e4:76:2a:e8:c3:dc:1b:9c:68:25:aa:96:99:ff:e9:
8d:26:63:f1:f3:5c:61:fa:f8:88:d5:ed:a8:53:74:24:12:c2:
df:44:5b:9d:15:15:36:5a:b8:b9:14:b5:03:d4:f0:59:66:04:
32:8b:b0:15:76:1a:68:c7:d9:36:88:a0:34:65:6c:60:b6:9e:
44:0a:ce:2a:b9:1a:71:a7:04:ab:ef:eb:c7:85:82:b3:10:d8:
69:63:85:df:d1:db:3d:55:e4:32:ad:d4:d8:f2:60:67:f6:59:
48:85:1d:53:d1:24:58:9b:58:34:3d:4e:d6:a0:81:95:ee:95:
4b:fe:8d:e7:e0:fe:42:57:03:c4:0c:8a:09:37:4f:ba:7f:ad:
2a:f9:c7:45:e4:2f:37:fc:5a:f7:86:59:f9:aa:79:ff:13:52:
e4:d3:25:e5:a7:a5:2a:31:22:e2:d5:af:6b:39:7f:1b:39:7a:
01:17:58:da:3f:5d:00:c3:3a:22:48:68:f1:fa:bf:5a:ac:40:
49:a6:4a:8c:24:5d:95:69:cb:2a:3c:aa:0e:8e:19:82:7a:ab:
65:ea:a7:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB75WcOR9DQnC8tvQOX+pspsCA1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI1QTM4RTA3NUQ1MzBFQ0I1MTZDMDQwNzFENTRBNkIx
REQ3OENGQzAeFw0yNDAzMDUxNzM5MTVaFw0yNTAzMDQxNzQ0MTVaMDMxMTAvBgNV
BAMTKEUxN0JEN0E0QzVBOEQ4MEIyRjA0RDJDMzFFQ0ZENEQzNEM5M0IzOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEIhfOIM+i+1W8MgNZRvwkDuh
aquFJxjo9aNg37MMpeGRQKr+yE5mJXRWXYIKf8Y4AgpeLwcfJD2uiybikkGJXWNt
7q+TdfRrvjiBjmcysy+Frgli+uqaeidwjwzTD8xjwt5Gsg6eR1aemMMglMfc8+YP
hErDHOeuXGqRAabNtlCj78NnU0OGbb87vofam5OsM9w9PBqJ4yAVENVDolhKA4EQ
g87J6OkWFsrlUuTOYzSVL3cS5YRQVNHGG0I4M0hP3eu0ELtrPpPFH1hcw1FJP2dq
H+mUMHtFf0nJRKs4gEQQsxhSXDgOUarFFXjt0rIiFM6uWWFUaW4XCI+OdqZ/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4XvXpMWo2AsvBNLDHs/U00yTs4owHwYDVR0j
BBgwFoAU21o44HXVMOy1FsBAcdVKax3XjPwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTgzNDM4NzMyMjVERTVFNDczNjA0NzEzRjAzMDdFNDEy
MEFDRTFFOUNCNTFDODVEMTgzRTJBQjRFOEY4MEI5LzAvREI1QTM4RTA3NUQ1MzBF
Q0I1MTZDMDQwNzFENTRBNkIxREQ3OENGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjVBMzhFMDc1RDUzMEVDQjUx
NkMwNDA3MUQ1NEE2QjFERDc4Q0ZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk4MzQzODczMjI1REU1RTQ3MzYwNDcxM0YwMzA3RTQxMjBBQ0UxRTlD
QjUxQzg1RDE4M0UyQUI0RThGODBCOS8wLzM0MzUyZTMxMzYzMTJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzkzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaFs
MA0GCSqGSIb3DQEBCwUAA4IBAQCLv05UvDp1KIkV+JaJKhZ8YgLXsG5k8Ofan3pw
0TCtYq2PgGN4/wXkdirow9wbnGglqpaZ/+mNJmPx81xh+viI1e2oU3QkEsLfRFud
FRU2Wri5FLUD1PBZZgQyi7AVdhpox9k2iKA0ZWxgtp5ECs4quRpxpwSr7+vHhYKz
ENhpY4Xf0ds9VeQyrdTY8mBn9llIhR1T0SRYm1g0PU7WoIGV7pVL/o3n4P5CVwPE
DIoJN0+6f60q+cdF5C83/Fr3hln5qnn/E1Lk0yXlp6UqMSLi1a9rOX8bOXoBF1ja
P10AwzoiSGjx+r9arEBJpkqMJF2VacsqPKoOjhmCeqtl6qcw
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:17:29 2025 by rpki-client