Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa
File: 3134382e3232352e302e302f31362d3234203d3e2034343933.roa (raw, json)
Hash identifier: RWATRb4lQn1YvC86Fr64vCjuc6q4kI4IZpWO0qgrClk=
Subject key identifier: 89:CA:17:99:34:9E:85:D7:C2:97:A0:97:88:84:52:2F:1B:41:2F:18
Certificate issuer: /CN=23465A56152FA1593E35DAA9CCBEAC1EBC37CF31
Certificate serial: 70D83CD8D1F338B43D3C539B169D4C5A4EA0A9C4
Authority key identifier: 23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa
Signing time: Tue 05 Mar 2024 18:09:59 +0000
ROA not before: Tue 05 Mar 2024 18:04:59 +0000
ROA not after: Tue 04 Mar 2025 18:09:59 +0000
asID: 4493
IP address blocks: 148.225.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d8:3c:d8:d1:f3:38:b4:3d:3c:53:9b:16:9d:4c:5a:4e:a0:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23465A56152FA1593E35DAA9CCBEAC1EBC37CF31
Validity
Not Before: Mar 5 18:04:59 2024 GMT
Not After : Mar 4 18:09:59 2025 GMT
Subject: CN=89CA1799349E85D7C297A0978884522F1B412F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:a4:94:2a:f4:04:de:6b:09:89:38:4e:5d:
52:7d:63:79:78:bb:35:66:79:f4:f8:a1:d9:c1:7a:
ce:32:0e:44:89:10:68:13:b3:30:39:14:11:7a:04:
cc:f2:bf:c3:cb:bd:64:7d:cb:03:70:c5:d0:74:d7:
f6:ad:47:04:03:b0:d4:b3:cc:70:2e:1a:87:28:a9:
f8:ed:3f:8e:42:c8:5e:36:92:cb:50:a7:c4:e3:fe:
e5:f5:1d:50:45:bb:1c:50:8a:24:f7:8e:b8:46:d8:
bf:be:5f:76:6d:50:83:78:70:a3:21:6a:19:2e:f4:
10:b7:d0:e8:16:b3:1c:9b:7e:6b:65:05:63:d1:92:
4e:98:29:45:5d:b8:0a:0d:28:d3:98:29:7c:14:3c:
aa:16:3f:20:11:90:3f:90:9f:15:5d:a1:1f:a5:64:
33:44:25:76:7a:cc:8f:9d:95:cc:e2:43:84:2d:4e:
5c:2a:1f:19:53:f0:08:17:48:72:b1:5a:42:1c:21:
8e:3c:7a:fa:18:18:bc:72:3b:8d:28:2f:21:92:eb:
f3:21:a7:65:95:93:5f:9e:b5:c9:14:4c:0a:b3:9c:
a1:13:1d:23:61:17:73:98:4b:91:f6:cc:b4:00:f0:
0c:cf:c9:68:2a:00:86:2b:43:68:8b:be:c6:64:12:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:17:99:34:9E:85:D7:C2:97:A0:97:88:84:52:2F:1B:41:2F:18
X509v3 Authority Key Identifier:
keyid:23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:b3:bf:13:23:c1:06:bd:38:de:22:27:1e:47:ab:2c:08:e4:
b6:32:dc:54:64:53:d7:fc:2f:cd:e3:c4:5c:10:4d:96:ad:4a:
61:1e:64:6b:df:a4:1e:1a:c8:0c:9d:15:4f:d1:17:db:09:7a:
fe:71:f3:0d:20:c3:f2:cd:bf:19:a0:93:c8:98:3b:e0:7d:b1:
f4:37:0e:16:09:63:01:1a:84:e9:51:f9:11:a6:15:48:ad:68:
2d:61:4c:65:b3:e9:b2:a1:16:0e:be:98:3a:4f:69:4f:f8:04:
d1:0f:14:b5:c9:c8:2b:18:6b:ee:c7:4e:c3:0a:3e:79:29:3d:
85:fe:80:cc:b9:56:b7:b3:07:b6:7c:ae:d6:1e:d2:71:44:2e:
0f:a5:08:df:25:a4:f7:3f:b5:a8:24:1b:03:0b:96:5c:6a:eb:
f1:db:f0:d0:27:a4:5a:54:68:57:43:dc:24:df:2d:f0:8e:c3:
66:9e:a0:6d:02:01:ee:cc:4e:00:3a:e5:b7:04:a3:7a:07:20:
a4:79:5c:69:7e:2f:ae:cf:9d:d0:7b:c2:69:62:57:ae:24:40:
fd:91:2c:a1:05:29:7a:30:f2:fd:ab:11:a5:f6:75:ca:8a:b8:
09:19:31:40:8b:36:d9:a7:bb:65:ed:d8:83:78:b9:1a:f4:d1:
19:4f:c9:d1
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUcNg82NHzOLQ9PFObFp1MWk6gqcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM0NjVBNTYxNTJGQTE1OTNFMzVEQUE5Q0NCRUFDMUVC
QzM3Q0YzMTAeFw0yNDAzMDUxODA0NTlaFw0yNTAzMDQxODA5NTlaMDMxMTAvBgNV
BAMTKDg5Q0ExNzk5MzQ5RTg1RDdDMjk3QTA5Nzg4ODQ1MjJGMUI0MTJGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FqSUKvQE3msJiThOXVJ9Y3l4
uzVmefT4odnBes4yDkSJEGgTszA5FBF6BMzyv8PLvWR9ywNwxdB01/atRwQDsNSz
zHAuGocoqfjtP45CyF42kstQp8Tj/uX1HVBFuxxQiiT3jrhG2L++X3ZtUIN4cKMh
ahku9BC30OgWsxybfmtlBWPRkk6YKUVduAoNKNOYKXwUPKoWPyARkD+QnxVdoR+l
ZDNEJXZ6zI+dlcziQ4QtTlwqHxlT8AgXSHKxWkIcIY48evoYGLxyO40oLyGS6/Mh
p2WVk1+etckUTAqznKETHSNhF3OYS5H2zLQA8AzPyWgqAIYrQ2iLvsZkEsQLAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUicoXmTSehdfCl6CXiIRSLxtBLxgwHwYDVR0j
BBgwFoAUI0ZaVhUvoVk+NdqpzL6sHrw3zzEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUE2RDVCREVDRDlBOTY1QTAxNDc5MkQ3MUUzRTNERUI2
RERGNThDQkNENzMzMDQyOEVCMkNGOTAyM0JBQzVGLzAvMjM0NjVBNTYxNTJGQTE1
OTNFMzVEQUE5Q0NCRUFDMUVCQzM3Q0YzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzQ2NUE1NjE1MkZBMTU5M0Uz
NURBQTlDQ0JFQUMxRUJDMzdDRjMxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFBNkQ1QkRFQ0Q5QTk2NUEwMTQ3OTJENzFFM0UzREVCNkRERjU4Q0JD
RDczMzA0MjhFQjJDRjkwMjNCQUM1Ri8wLzMxMzQzODJlMzIzMjM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM0MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlOEwDQYJKoZI
hvcNAQELBQADggEBAKizvxMjwQa9ON4iJx5HqywI5LYy3FRkU9f8L83jxFwQTZat
SmEeZGvfpB4ayAydFU/RF9sJev5x8w0gw/LNvxmgk8iYO+B9sfQ3DhYJYwEahOlR
+RGmFUitaC1hTGWz6bKhFg6+mDpPaU/4BNEPFLXJyCsYa+7HTsMKPnkpPYX+gMy5
VrezB7Z8rtYe0nFELg+lCN8lpPc/tagkGwMLllxq6/Hb8NAnpFpUaFdD3CTfLfCO
w2aeoG0CAe7MTgA65bcEo3oHIKR5XGl+L67PndB7wmliV64kQP2RLKEFKXow8v2r
EaX2dcqKuAkZMUCLNtmnu2Xt2IN4uRr00RlPydE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:43 2025 by rpki-client