Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
File: 34352e3138332e34322e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier: uD6iCrsxWNKnLCHecGJXSFJerA9PaXCaugAxCqn0zsE=
Subject key identifier: B4:1A:33:A1:82:2B:82:F7:16:CD:AB:CE:F6:F7:E9:ED:F9:7B:06:40
Certificate issuer: /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial: 6D7D3932960A7C88D63A173EC8E071E782EE2F84
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
Signing time: Tue 05 Mar 2024 18:07:16 +0000
ROA not before: Tue 05 Mar 2024 18:02:16 +0000
ROA not after: Tue 04 Mar 2025 18:07:16 +0000
asID: 3549
IP address blocks: 45.183.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7d:39:32:96:0a:7c:88:d6:3a:17:3e:c8:e0:71:e7:82:ee:2f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
Validity
Not Before: Mar 5 18:02:16 2024 GMT
Not After : Mar 4 18:07:16 2025 GMT
Subject: CN=B41A33A1822B82F716CDABCEF6F7E9EDF97B0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:d6:3c:82:60:26:7a:d9:b2:80:8f:76:6a:
98:a6:03:12:92:81:46:69:22:b4:a9:1f:ad:43:7c:
51:8f:fa:c0:68:13:34:35:50:e2:d3:06:5d:90:34:
e2:37:af:7b:3b:09:4e:4f:00:a7:57:43:86:6e:50:
de:16:11:a1:8a:81:ee:03:04:f4:85:d4:1d:49:2a:
45:58:5a:95:04:66:04:2f:ac:67:ba:13:29:f2:17:
35:eb:29:e9:85:5d:a8:5b:f1:57:7e:68:e1:be:8b:
79:24:35:82:69:b0:6e:77:6c:5b:34:0b:55:7e:90:
4c:0f:a8:c7:98:ec:90:cd:bf:14:59:64:21:29:ff:
45:9d:cc:1f:c7:91:66:49:4c:cb:2f:46:57:70:23:
c0:35:23:76:89:65:1b:fb:ac:76:02:35:a7:5e:b9:
cb:2e:c0:36:3c:5a:c6:a9:2a:5b:ea:f4:c3:a3:89:
bb:77:aa:75:05:1a:03:c6:26:a1:57:88:b2:06:de:
ff:c1:24:e7:f1:9b:e3:7f:6c:29:bb:15:b0:61:a2:
84:d6:c0:07:d2:15:52:fb:07:4c:a5:d8:e9:88:08:
84:1e:13:c1:b6:2d:6a:1a:89:ab:22:08:6a:30:22:
15:2b:62:f7:6f:54:fb:53:6c:b4:df:b7:90:61:bf:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:33:A1:82:2B:82:F7:16:CD:AB:CE:F6:F7:E9:ED:F9:7B:06:40
X509v3 Authority Key Identifier:
keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.183.42.0/23
Signature Algorithm: sha256WithRSAEncryption
41:0e:21:2c:d2:b0:55:61:78:09:df:71:f1:4d:e7:91:ee:3a:
60:a2:45:e4:42:58:57:60:e7:56:b2:fc:77:c3:6b:8a:5f:ed:
16:be:f9:f8:78:5e:82:eb:58:bf:e3:c2:11:0f:e0:14:25:1e:
fd:29:51:d7:63:5d:8a:fc:68:b2:12:b5:41:90:52:88:05:c4:
13:d3:12:7b:4d:d7:aa:20:bd:70:6f:bc:b6:a7:68:10:51:31:
75:38:b7:d6:45:47:b5:ea:5c:b7:b9:ea:21:be:c9:f0:1f:5f:
e0:07:c1:7c:07:0a:6e:30:6b:e5:0f:20:65:5a:39:a7:60:33:
27:03:b2:8b:ac:13:af:ed:7f:1d:17:41:d6:cf:6a:ec:55:dd:
9e:32:ab:91:bc:27:9d:25:16:e9:36:6a:fa:4c:5b:33:3c:58:
6e:da:95:12:c9:7e:3d:80:68:5d:b6:04:59:9b:ad:50:69:66:
d3:83:5a:a4:ef:78:cc:89:a0:8c:54:13:86:0d:2e:c1:e0:f7:
7d:fc:fc:8e:de:2c:5d:d0:ff:f9:2d:76:c9:83:34:d8:0e:b0:
e9:c9:15:bb:83:5a:e2:bd:20:8f:56:ec:91:e5:ad:1b:2f:1c:
45:d1:d4:6b:cd:50:fe:24:3e:95:e7:0e:98:9b:12:4a:7f:e6:
0b:2b:f2:39
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbX05MpYKfIjWOhc+yOBx54LuL4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxMDE3NTQwNDM0MUUzOUIzN0Y4MjREODU1ODUwNjU4
MzhERjBCNTAeFw0yNDAzMDUxODAyMTZaFw0yNTAzMDQxODA3MTZaMDMxMTAvBgNV
BAMTKEI0MUEzM0ExODIyQjgyRjcxNkNEQUJDRUY2RjdFOUVERjk3QjA2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJdY8gmAmetmygI92apimAxKS
gUZpIrSpH61DfFGP+sBoEzQ1UOLTBl2QNOI3r3s7CU5PAKdXQ4ZuUN4WEaGKge4D
BPSF1B1JKkVYWpUEZgQvrGe6EynyFzXrKemFXahb8Vd+aOG+i3kkNYJpsG53bFs0
C1V+kEwPqMeY7JDNvxRZZCEp/0WdzB/HkWZJTMsvRldwI8A1I3aJZRv7rHYCNade
ucsuwDY8WsapKlvq9MOjibt3qnUFGgPGJqFXiLIG3v/BJOfxm+N/bCm7FbBhooTW
wAfSFVL7B0yl2OmICIQeE8G2LWoaiasiCGowIhUrYvdvVPtTbLTft5Bhv/X/AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUtBozoYIrgvcWzavO9vfp7fl7BkAwHwYDVR0j
BBgwFoAUghAXVAQ0Hjmzf4JNhVhQZYON8LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjk2NUE0RjA4MDZERDZDREQwRUM0MEYwNDkxQUYxRjU5
QzZFRjM5Njk3NzQyNkVCRkQxNDJFNTBCRjM3MkVFLzAvODIxMDE3NTQwNDM0MUUz
OUIzN0Y4MjREODU1ODUwNjU4MzhERjBCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjEwMTc1NDA0MzQxRTM5QjM3
RjgyNEQ4NTU4NTA2NTgzOERGMEI1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI5NjVBNEYwODA2REQ2Q0REMEVDNDBGMDQ5MUFGMUY1OUM2RUYzOTY5
Nzc0MjZFQkZEMTQyRTUwQkYzNzJFRS8wLzM0MzUyZTMxMzgzMzJlMzQzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbcqMA0GCSqG
SIb3DQEBCwUAA4IBAQBBDiEs0rBVYXgJ33HxTeeR7jpgokXkQlhXYOdWsvx3w2uK
X+0Wvvn4eF6C61i/48IRD+AUJR79KVHXY12K/GiyErVBkFKIBcQT0xJ7TdeqIL1w
b7y2p2gQUTF1OLfWRUe16ly3ueohvsnwH1/gB8F8BwpuMGvlDyBlWjmnYDMnA7KL
rBOv7X8dF0HWz2rsVd2eMquRvCedJRbpNmr6TFszPFhu2pUSyX49gGhdtgRZm61Q
aWbTg1qk73jMiaCMVBOGDS7B4Pd9/PyO3ixd0P/5LXbJgzTYDrDpyRW7g1rivSCP
VuyR5a0bLxxF0dRrzVD+JD6V5w6YmxJKf+YLK/I5
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:13 2025 by rpki-client