Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
File: 3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (raw, json)
Hash identifier: DVmw+iYm1oA92UXy8A+0cn2pbJE/jctDKdy5FiTgHW8=
Subject key identifier: F1:79:A3:DD:0F:ED:1E:A9:33:BD:53:D5:76:0A:23:F9:BE:C3:AF:9D
Certificate issuer: /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial: 7FD1D33150F765F99B4E4BB60FED58A5E5C6CC96
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
Signing time: Tue 05 Mar 2024 18:09:29 +0000
ROA not before: Tue 05 Mar 2024 18:04:29 +0000
ROA not after: Tue 04 Mar 2025 18:09:29 +0000
asID: 271855
IP address blocks: 181.191.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d1:d3:31:50:f7:65:f9:9b:4e:4b:b6:0f:ed:58:a5:e5:c6:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Validity
Not Before: Mar 5 18:04:29 2024 GMT
Not After : Mar 4 18:09:29 2025 GMT
Subject: CN=F179A3DD0FED1EA933BD53D5760A23F9BEC3AF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:36:1b:9d:d9:36:7e:e1:b8:fb:06:eb:63:
e5:0e:6f:d8:4a:62:d6:8a:e2:14:f0:3e:69:4b:88:
d7:cf:4c:17:0c:3d:0f:3b:08:09:29:cc:68:ed:ef:
75:6c:76:1f:f9:b9:68:5d:fc:62:11:1d:42:d7:00:
e0:41:54:ef:19:26:06:c1:61:c8:07:92:3f:2d:92:
51:27:1e:61:58:61:a5:aa:30:06:e6:b7:8b:14:2f:
22:84:05:bd:59:81:5b:d3:a7:d4:23:cb:55:90:50:
ca:ef:ad:12:96:84:7a:27:24:49:8d:c4:f1:5b:79:
af:4d:66:33:8a:c9:73:a3:7a:1a:aa:25:8d:57:95:
4f:b1:a1:ec:ae:a7:cd:01:78:7e:b0:b4:2e:e5:50:
70:84:bc:95:9c:91:58:ae:41:c4:f7:5f:33:7e:0c:
e8:89:2b:ee:9b:45:27:93:cb:56:c0:17:29:c1:6c:
82:80:f6:1c:f3:bc:4d:15:84:64:c9:07:22:30:20:
78:95:75:a6:bb:6b:77:ec:82:a5:e4:f7:99:44:8e:
cd:4f:2f:e1:36:c9:82:02:fa:97:0c:2c:00:f8:d7:
f6:c1:98:9b:83:a9:00:2c:4a:d5:aa:24:99:1e:02:
0d:b5:dd:3f:b8:68:a3:40:90:85:46:0c:c9:00:0d:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:A3:DD:0F:ED:1E:A9:33:BD:53:D5:76:0A:23:F9:BE:C3:AF:9D
X509v3 Authority Key Identifier:
keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.224.0/22
Signature Algorithm: sha256WithRSAEncryption
89:e2:2c:2d:6a:ef:c9:d2:2b:81:ea:f4:e1:9e:b4:4d:5c:13:
e3:a2:de:6a:a2:40:a9:b8:a0:ae:06:be:29:2f:75:a8:50:01:
12:49:7a:81:4e:33:fa:c9:f5:57:d3:c9:12:06:b7:1a:4a:b1:
18:0c:a9:04:ac:8a:30:50:d9:cc:79:67:e9:a7:f8:bb:a6:ad:
84:98:36:82:74:87:2f:bf:80:73:04:06:b7:b0:7d:52:ba:c7:
fd:19:9c:ad:60:7f:92:11:ae:f1:b9:3e:a4:28:8b:35:8a:4d:
21:a2:52:94:25:98:ab:21:63:45:e1:73:ff:4a:76:b5:a9:f0:
c5:f9:b2:63:64:8d:32:78:44:03:e4:6e:c1:dc:78:43:3f:d0:
87:98:4d:c9:6d:92:1a:bd:06:79:93:df:82:e1:fe:cf:d3:ce:
f4:82:4d:10:97:98:d2:04:d9:38:85:98:b1:3e:6b:20:98:a3:
e4:78:a4:30:db:2b:54:39:ee:a9:b5:80:d5:b6:d4:e8:b9:9b:
b1:c3:9b:82:56:47:01:dd:2b:d4:8d:97:44:bf:4a:65:de:e8:
5b:7e:9e:e3:aa:b5:bc:a3:fe:88:b6:e9:d2:4d:74:bd:6f:da:
3a:11:8d:99:56:39:1e:f8:21:cd:14:60:97:47:19:c0:f4:3a:
8e:a5:80:eb
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUf9HTMVD3ZfmbTku2D+1YpeXGzJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyNUQ1ODUxMTc0REEzMEJDQ0NBQTZBQ0YyNUFCQzhC
QkZFOTJCNzAeFw0yNDAzMDUxODA0MjlaFw0yNTAzMDQxODA5MjlaMDMxMTAvBgNV
BAMTKEYxNzlBM0REMEZFRDFFQTkzM0JENTNENTc2MEEyM0Y5QkVDM0FGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wjYbndk2fuG4+wbrY+UOb9hK
YtaK4hTwPmlLiNfPTBcMPQ87CAkpzGjt73Vsdh/5uWhd/GIRHULXAOBBVO8ZJgbB
YcgHkj8tklEnHmFYYaWqMAbmt4sULyKEBb1ZgVvTp9Qjy1WQUMrvrRKWhHonJEmN
xPFbea9NZjOKyXOjehqqJY1XlU+xoeyup80BeH6wtC7lUHCEvJWckViuQcT3XzN+
DOiJK+6bRSeTy1bAFynBbIKA9hzzvE0VhGTJByIwIHiVdaa7a3fsgqXk95lEjs1P
L+E2yYIC+pcMLAD41/bBmJuDqQAsStWqJJkeAg213T+4aKNAkIVGDMkADTJdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8Xmj3Q/tHqkzvVPVdgoj+b7Dr50wHwYDVR0j
BBgwFoAUgiXVhRF02jC8zKpqzyWryLv+krcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTlDMTcyMjEyQzU3RDFCMjA1NDUwNUVDRkEwRDM2NkZF
RkU0NjJBQjI4M0FDOTlBRjMxMTdBMTAwMkI1MjhBLzAvODIyNUQ1ODUxMTc0REEz
MEJDQ0NBQTZBQ0YyNUFCQzhCQkZFOTJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjI1RDU4NTExNzREQTMwQkND
Q0FBNkFDRjI1QUJDOEJCRkU5MkI3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk5QzE3MjIxMkM1N0QxQjIwNTQ1MDVFQ0ZBMEQzNjZGRUZFNDYyQUIy
ODNBQzk5QUYzMTE3QTEwMDJCNTI4QS8wLzMxMzgzMTJlMzEzOTMxMmUzMjMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzODM1MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK1
v+AwDQYJKoZIhvcNAQELBQADggEBAIniLC1q78nSK4Hq9OGetE1cE+Oi3mqiQKm4
oK4GvikvdahQARJJeoFOM/rJ9VfTyRIGtxpKsRgMqQSsijBQ2cx5Z+mn+LumrYSY
NoJ0hy+/gHMEBrewfVK6x/0ZnK1gf5IRrvG5PqQoizWKTSGiUpQlmKshY0Xhc/9K
drWp8MX5smNkjTJ4RAPkbsHceEM/0IeYTcltkhq9BnmT34Lh/s/TzvSCTRCXmNIE
2TiFmLE+ayCYo+R4pDDbK1Q57qm1gNW21Oi5m7HDm4JWRwHdK9SNl0S/SmXe6Ft+
nuOqtbyj/oi26dJNdL1v2joRjZlWOR74Ic0UYJdHGcD0Oo6lgOs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:49:43 2025 by rpki-client