Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/34352e3137342e3232342e302f32332d3233203d3e20323637383432.roa
File: 34352e3137342e3232342e302f32332d3233203d3e20323637383432.roa (raw, json)
Hash identifier: SqGchFTES7/2yo4okKpY2fZoth7CNp05fNfBeEY5NkU=
Subject key identifier: 08:BE:5C:13:54:5F:3A:A1:DC:61:8C:BB:7C:1C:78:BD:0A:1E:2D:E7
Certificate issuer: /CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
Certificate serial: 5F055B4051092DE1F17A6E90B87FBEA84FE487C6
Authority key identifier: F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/34352e3137342e3232342e302f32332d3233203d3e20323637383432.roa
Signing time: Tue 04 Feb 2025 18:35:27 +0000
ROA not before: Tue 04 Feb 2025 18:30:27 +0000
ROA not after: Tue 03 Feb 2026 18:35:27 +0000
asID: 267842
IP address blocks: 45.174.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:05:5b:40:51:09:2d:e1:f1:7a:6e:90:b8:7f:be:a8:4f:e4:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
Validity
Not Before: Feb 4 18:30:27 2025 GMT
Not After : Feb 3 18:35:27 2026 GMT
Subject: CN=08BE5C13545F3AA1DC618CBB7C1C78BD0A1E2DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:09:0c:77:63:3e:f3:a5:31:63:32:56:de:
51:99:63:2b:a3:ab:06:7c:26:ba:ea:aa:55:d4:7d:
07:81:c4:67:fe:15:95:11:12:33:af:7b:15:68:02:
45:d4:13:46:d8:07:3a:84:bd:31:cc:30:c3:e9:f3:
49:5f:d8:c6:df:4b:57:48:bf:5b:cb:7d:68:99:65:
62:ae:5d:5e:89:b7:03:9a:5a:88:44:93:91:a2:7d:
57:1c:7f:c4:0a:28:b7:6e:d0:d1:58:d6:c6:af:00:
c4:5f:65:bb:76:e3:fe:7f:a7:57:b5:a0:77:b8:51:
60:89:2f:fb:2c:56:f4:a6:c4:e6:23:ad:ff:93:a5:
1a:1a:0b:8c:77:78:1c:62:37:7e:35:7f:8a:e9:a8:
65:af:fe:9f:9f:f4:1b:8f:b3:33:26:0e:95:74:6a:
5d:ca:b4:42:4f:b4:ff:16:f5:67:de:be:94:1d:62:
72:c7:27:a2:0f:0e:6d:60:a3:14:68:4d:17:fa:5d:
30:cd:bb:ec:7e:e3:3f:f4:52:c9:f8:3f:62:4a:ab:
3b:4b:12:99:cd:fe:64:70:e3:ed:f1:9f:7a:33:b3:
aa:c0:24:97:fe:ee:8e:83:fd:d0:f6:1e:b1:70:1d:
e4:0d:6f:11:d1:b6:c4:f4:cd:fc:dc:d6:6c:f6:3b:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:5C:13:54:5F:3A:A1:DC:61:8C:BB:7C:1C:78:BD:0A:1E:2D:E7
X509v3 Authority Key Identifier:
keyid:F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/34352e3137342e3232342e302f32332d3233203d3e20323637383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.224.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a0:ad:26:4d:a9:57:b1:96:85:2d:68:d6:2a:31:30:38:b5:
9f:18:d6:fa:8d:3f:cc:1e:29:cf:93:98:66:0c:cc:c6:37:3c:
40:22:09:64:21:a6:b9:ce:af:3b:70:cc:d0:f0:44:d1:d7:74:
e1:22:e5:2b:82:8c:57:de:c4:48:04:57:87:bd:13:a3:14:0a:
e7:bc:9b:76:18:98:e1:91:2a:d5:95:2b:76:53:b2:19:3c:4b:
79:32:7a:0f:1f:8e:ff:d6:d1:b8:68:d0:03:46:05:67:45:44:
c0:ee:6b:98:26:21:20:11:d1:7a:2a:16:a2:30:b0:8e:18:49:
9d:ae:50:7f:43:de:ac:8e:fb:ea:b3:e6:21:5b:b5:61:86:f9:
e8:c7:f4:e0:6c:d9:39:e2:ae:c3:f5:38:b0:b1:32:87:c8:f3:
7c:07:7b:e2:e8:c6:b2:4b:28:fa:17:57:06:4b:6f:ae:4e:e5:
d8:4f:42:a1:59:0c:44:c0:13:e0:25:60:5c:3f:3e:23:c4:19:
0f:22:b2:4e:19:99:35:23:1c:30:7d:21:b4:6a:23:5e:ca:75:
dd:18:38:5d:22:38:a1:5e:d4:0f:70:ca:0b:c0:e9:ed:bc:6f:
c7:c1:4a:e0:c4:30:ac:be:7e:a2:2e:a8:4e:5c:4f:cf:db:ab:
9d:34:a7:cf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXwVbQFEJLeHxem6QuH++qE/kh8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdFRDQ5RkU0RkJEMTlDODgxNzVGQzFFMDU1NTUyMzND
NjZGNTNDQjAeFw0yNTAyMDQxODMwMjdaFw0yNjAyMDMxODM1MjdaMDMxMTAvBgNV
BAMTKDA4QkU1QzEzNTQ1RjNBQTFEQzYxOENCQjdDMUM3OEJEMEExRTJERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHeAkMd2M+86UxYzJW3lGZYyuj
qwZ8JrrqqlXUfQeBxGf+FZUREjOvexVoAkXUE0bYBzqEvTHMMMPp80lf2MbfS1dI
v1vLfWiZZWKuXV6JtwOaWohEk5GifVccf8QKKLdu0NFY1savAMRfZbt24/5/p1e1
oHe4UWCJL/ssVvSmxOYjrf+TpRoaC4x3eBxiN341f4rpqGWv/p+f9BuPszMmDpV0
al3KtEJPtP8W9WfevpQdYnLHJ6IPDm1goxRoTRf6XTDNu+x+4z/0Usn4P2JKqztL
EpnN/mRw4+3xn3ozs6rAJJf+7o6D/dD2HrFwHeQNbxHRtsT0zfzc1mz2O4v9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCL5cE1RfOqHcYYy7fBx4vQoeLecwHwYDVR0j
BBgwFoAU9+1J/k+9GciBdfweBVVSM8ZvU8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wM0IyQjJFODdDMkZEODU1QjcwRTgxODk5RUNBOTk5ODQ4
MEM3NkM4QzVFMEVFODg4QTJDNzcxMzgwRjczODgyLzAvRjdFRDQ5RkU0RkJEMTlD
ODgxNzVGQzFFMDU1NTUyMzNDNjZGNTNDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0VENDlGRTRGQkQxOUM4ODE3
NUZDMUUwNTU1NTIzM0M2NkY1M0NCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDNCMkIyRTg3QzJGRDg1NUI3MEU4MTg5OUVDQTk5OTg0ODBDNzZDOEM1
RTBFRTg4OEEyQzc3MTM4MEY3Mzg4Mi8wLzM0MzUyZTMxMzczNDJlMzIzMjM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3MzgzNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLa7g
MA0GCSqGSIb3DQEBCwUAA4IBAQAGoK0mTalXsZaFLWjWKjEwOLWfGNb6jT/MHinP
k5hmDMzGNzxAIglkIaa5zq87cMzQ8ETR13ThIuUrgoxX3sRIBFeHvROjFArnvJt2
GJjhkSrVlSt2U7IZPEt5MnoPH47/1tG4aNADRgVnRUTA7muYJiEgEdF6KhaiMLCO
GEmdrlB/Q96sjvvqs+YhW7Vhhvnox/TgbNk54q7D9TiwsTKHyPN8B3vi6MaySyj6
F1cGS2+uTuXYT0KhWQxEwBPgJWBcPz4jxBkPIrJOGZk1IxwwfSG0aiNeynXdGDhd
IjihXtQPcMoLwOntvG/HwUrgxDCsvn6iLqhOXE/P26udNKfP
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:43 2025 by rpki-client