Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa
File: 34352e3137332e31302e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier: H71mFOWCLsXVRoGDt2E7C4TYzk7ROKQ9hczPq7s0qFE=
Subject key identifier: 24:E0:73:D7:67:A6:9B:DC:AF:B0:27:7A:60:9A:21:8C:45:E6:C7:3C
Certificate issuer: /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial: AC58AF02EA4EEDA4F99EABC9AEB8D51A327F40
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa
Signing time: Tue 05 Mar 2024 17:43:58 +0000
ROA not before: Tue 05 Mar 2024 17:38:58 +0000
ROA not after: Tue 04 Mar 2025 17:43:58 +0000
asID: 262589
IP address blocks: 45.173.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ac:58:af:02:ea:4e:ed:a4:f9:9e:ab:c9:ae:b8:d5:1a:32:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Validity
Not Before: Mar 5 17:38:58 2024 GMT
Not After : Mar 4 17:43:58 2025 GMT
Subject: CN=24E073D767A69BDCAFB0277A609A218C45E6C73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:58:52:70:e7:df:e5:90:94:7d:d7:d2:2c:
57:3b:b5:b6:f3:c7:f5:aa:8e:ae:50:21:a4:1d:48:
96:f9:4c:65:c0:28:57:d5:0c:e1:f4:be:8f:c7:65:
f6:d2:b1:33:e5:65:0e:1d:97:6c:72:65:5f:00:3a:
82:74:cd:60:7e:0a:b6:b1:28:19:01:7b:85:15:e2:
f1:6c:64:01:1a:f0:9a:7f:96:f2:c7:b7:51:09:df:
f1:ef:ce:e3:7c:a6:e0:3e:56:79:d4:ac:d8:67:e1:
92:7c:ca:fd:86:68:b5:e3:3f:82:60:18:f8:4a:3f:
78:c9:73:91:e9:69:67:3b:2b:58:77:8c:5a:db:63:
31:b6:d1:2d:61:60:ce:13:d8:51:0e:09:8b:0f:92:
e1:a3:90:8e:0f:bd:4d:3e:16:ee:0f:55:d3:71:a8:
2e:5c:05:eb:e5:d6:b3:6a:45:e6:94:e3:f7:7d:04:
15:96:50:00:7a:2b:f1:91:bd:b3:80:fc:89:05:d6:
d7:2e:73:6b:a6:bc:0c:4f:45:f7:87:f4:25:65:cb:
71:22:62:e4:d4:ae:28:1e:9b:c6:c1:7c:9f:1e:ce:
7e:e9:f8:0f:6f:66:da:c7:15:f8:33:ad:f8:62:0d:
03:5e:ae:4f:b2:61:22:61:25:a3:0c:43:01:e3:6e:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:73:D7:67:A6:9B:DC:AF:B0:27:7A:60:9A:21:8C:45:E6:C7:3C
X509v3 Authority Key Identifier:
keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.10.0/23
Signature Algorithm: sha256WithRSAEncryption
74:c1:31:1b:67:1e:d8:40:d3:95:34:8f:1d:9f:4d:50:b1:7e:
d9:35:fe:de:b9:5c:e8:a9:ac:03:e2:8b:0d:2b:b4:dd:b3:9e:
59:4b:98:a7:03:66:0b:bf:8c:cd:04:56:65:93:2e:c3:bc:24:
4d:12:c4:46:67:3b:bb:5e:73:60:20:b8:30:b1:53:eb:23:28:
04:bf:3d:e1:32:7d:70:69:24:93:83:e1:6d:40:b3:7b:40:27:
33:8b:a7:8f:35:21:12:ac:a6:da:70:b6:f6:ef:ab:7d:08:db:
05:71:19:bf:8d:b6:c9:b5:70:f7:c4:35:51:b2:7d:f3:67:1a:
b9:cf:5c:2d:32:3c:cb:ee:50:99:85:67:92:bb:ed:51:7c:52:
f9:66:d0:db:93:14:01:64:6c:03:53:a0:81:c6:6f:4a:f6:f7:
68:90:5c:e4:f1:c5:5b:27:d9:ff:46:6b:60:9b:c8:ea:8e:9f:
c9:1f:db:a0:c4:c6:df:51:53:70:fb:b5:d0:21:3c:e7:be:cf:
62:00:8c:e6:21:6b:4a:48:67:cf:5b:82:6d:67:55:af:98:85:
b7:d3:52:54:42:98:37:6d:27:63:14:2c:c4:16:e4:00:6d:2a:
b4:77:b3:47:07:9f:0d:6a:ca:9c:1e:ca:04:bf:84:e1:7d:ec:
5d:1b:f7:24
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAKxYrwLqTu2k+Z6rya641Royf0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwQjQ0RTNENTQzQ0EyMzdDQjZCQzkwMjBGRUM0MzU3
RDc1RDI3ODAeFw0yNDAzMDUxNzM4NThaFw0yNTAzMDQxNzQzNThaMDMxMTAvBgNV
BAMTKDI0RTA3M0Q3NjdBNjlCRENBRkIwMjc3QTYwOUEyMThDNDVFNkM3M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGFhScOff5ZCUfdfSLFc7tbbz
x/Wqjq5QIaQdSJb5TGXAKFfVDOH0vo/HZfbSsTPlZQ4dl2xyZV8AOoJ0zWB+Crax
KBkBe4UV4vFsZAEa8Jp/lvLHt1EJ3/HvzuN8puA+VnnUrNhn4ZJ8yv2GaLXjP4Jg
GPhKP3jJc5HpaWc7K1h3jFrbYzG20S1hYM4T2FEOCYsPkuGjkI4PvU0+Fu4PVdNx
qC5cBevl1rNqReaU4/d9BBWWUAB6K/GRvbOA/IkF1tcuc2umvAxPRfeH9CVly3Ei
YuTUrigem8bBfJ8ezn7p+A9vZtrHFfgzrfhiDQNerk+yYSJhJaMMQwHjbs71AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJOBz12emm9yvsCd6YJohjEXmxzwwHwYDVR0j
BBgwFoAUQgtE49VDyiN8tryQIP7ENX110ngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0I5NUYxRERCOUUzQzQyNDJFRTM2QkUwRTNCMUNFM0ND
RkVCMDBGODk1MDhDMUQ3RTc1NTk2RDNEMTEyRURFLzAvNDIwQjQ0RTNENTQzQ0Ey
MzdDQjZCQzkwMjBGRUM0MzU3RDc1RDI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBCNDRFM0Q1NDNDQTIzN0NC
NkJDOTAyMEZFQzQzNTdENzVEMjc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdCOTVGMUREQjlFM0M0MjQyRUUzNkJFMEUzQjFDRTNDQ0ZFQjAwRjg5
NTA4QzFEN0U3NTU5NkQzRDExMkVERS8wLzM0MzUyZTMxMzczMzJlMzEzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2tCjAN
BgkqhkiG9w0BAQsFAAOCAQEAdMExG2ce2EDTlTSPHZ9NULF+2TX+3rlc6KmsA+KL
DSu03bOeWUuYpwNmC7+MzQRWZZMuw7wkTRLERmc7u15zYCC4MLFT6yMoBL894TJ9
cGkkk4PhbUCze0AnM4unjzUhEqym2nC29u+rfQjbBXEZv422ybVw98Q1UbJ982ca
uc9cLTI8y+5QmYVnkrvtUXxS+WbQ25MUAWRsA1OggcZvSvb3aJBc5PHFWyfZ/0Zr
YJvI6o6fyR/boMTG31FTcPu10CE8577PYgCM5iFrSkhnz1uCbWdVr5iFt9NSVEKY
N20nYxQsxBbkAG0qtHezRwefDWrKnB7KBL+E4X3sXRv3JA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:40 2025 by rpki-client