Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
File: 34352e3232372e36322e302f32332d3234203d3e20323635383731.roa (raw, json)
Hash identifier: dYUMbkHDxnKl39Qq28dvn1cDm/oLydLbJ/Jb8spKO/Y=
Subject key identifier: 21:C4:F7:8D:34:2F:4F:E9:95:EA:0E:5B:EA:93:9F:B6:1B:70:AB:98
Certificate issuer: /CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
Certificate serial: 698822F10D41C4F2DDD96B259CF41EB7049FA939
Authority key identifier: C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
Signing time: Tue 04 Feb 2025 18:09:57 +0000
ROA not before: Tue 04 Feb 2025 18:04:57 +0000
ROA not after: Tue 03 Feb 2026 18:09:57 +0000
asID: 265871
IP address blocks: 45.227.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:88:22:f1:0d:41:c4:f2:dd:d9:6b:25:9c:f4:1e:b7:04:9f:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
Validity
Not Before: Feb 4 18:04:57 2025 GMT
Not After : Feb 3 18:09:57 2026 GMT
Subject: CN=21C4F78D342F4FE995EA0E5BEA939FB61B70AB98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:d6:6b:67:db:8b:2c:76:a4:b7:d1:03:27:
0d:9b:03:78:8a:12:ba:43:60:13:55:f9:55:96:73:
ee:71:50:61:72:29:ea:64:fa:f2:60:31:1e:53:3a:
94:5f:49:e8:ab:e1:20:fd:74:80:03:8f:2f:be:90:
81:38:c4:42:7d:aa:e4:e0:cb:06:f6:80:22:d4:cd:
b1:f0:1d:8a:0f:d7:86:b5:34:66:56:2a:3d:53:db:
0c:23:8e:f5:a8:2b:d3:f4:a2:03:6f:07:7e:fd:d4:
be:61:ed:6d:46:bb:63:42:72:36:03:3f:d9:36:fd:
62:9b:52:cc:ee:77:09:2c:51:ed:c0:a1:e2:81:26:
a6:3a:9e:c8:0a:1c:d5:c3:4a:1b:00:4e:e1:ec:00:
ea:31:5e:7a:e3:8a:59:0e:79:12:a2:0d:10:d1:57:
75:6b:e5:63:ce:1c:5d:b4:32:ec:17:38:c1:38:63:
72:15:7c:23:e0:95:8e:1d:8a:1f:28:3c:91:3a:de:
a5:2b:cf:d3:8e:f4:8e:a0:d2:4c:22:a0:57:1b:a5:
fc:20:b3:99:e7:60:39:64:6c:10:f1:ba:c6:c1:00:
83:64:43:4f:59:ab:db:c0:1c:e8:c3:75:1b:a1:4c:
48:2a:87:af:f8:7b:e4:16:20:04:a5:dc:bb:95:28:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:F7:8D:34:2F:4F:E9:95:EA:0E:5B:EA:93:9F:B6:1B:70:AB:98
X509v3 Authority Key Identifier:
keyid:C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.62.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c1:c4:b7:5e:5e:cd:bd:0e:96:d4:6c:87:65:ee:58:7e:41:
8a:ca:53:15:12:84:bc:b2:47:ff:d5:77:ca:54:5f:4d:05:b6:
ca:0f:80:ee:40:e1:9a:c9:03:8d:bb:eb:b1:58:d8:48:80:0c:
55:9c:e5:b6:39:cc:d8:c6:c8:56:96:d4:f4:d5:2c:e1:fa:fa:
ae:18:68:99:da:c3:0e:d2:fd:53:d9:c8:fa:35:57:c7:2a:ef:
a2:20:95:35:6e:1f:13:28:07:48:4a:ce:0f:a4:ca:93:33:64:
6f:d1:37:bb:11:6f:7d:06:53:af:31:a7:fa:3b:9d:50:80:fb:
fb:77:65:a7:ba:34:f9:c0:07:4a:9d:b7:64:30:da:6b:b5:00:
7c:fa:00:38:7c:e5:69:ed:33:7e:3a:11:67:cd:e1:d7:02:92:
22:30:69:3c:4b:60:20:58:87:42:b2:0c:b9:60:0b:1b:7a:6d:
87:97:69:4c:75:59:73:9f:98:95:74:17:07:7f:33:e0:40:92:
9b:7f:89:2c:2a:bb:db:6d:34:3e:0b:c0:ed:b2:6d:8e:0e:78:
60:aa:7c:7d:3f:c9:98:cc:67:05:b4:f8:8b:88:de:db:11:f6:
be:ca:45:bc:b6:e5:b0:41:7e:3a:f6:35:b4:75:a0:31:f3:d1:
fe:0d:5d:07
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaYgi8Q1BxPLd2WslnPQetwSfqTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkxRkMzNEU3NjlCNDkxODA2RTE4MEU5REZGOTAzQzdE
MUY5QjZGOTAeFw0yNTAyMDQxODA0NTdaFw0yNjAyMDMxODA5NTdaMDMxMTAvBgNV
BAMTKDIxQzRGNzhEMzQyRjRGRTk5NUVBMEU1QkVBOTM5RkI2MUI3MEFCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pNZrZ9uLLHakt9EDJw2bA3iK
ErpDYBNV+VWWc+5xUGFyKepk+vJgMR5TOpRfSeir4SD9dIADjy++kIE4xEJ9quTg
ywb2gCLUzbHwHYoP14a1NGZWKj1T2wwjjvWoK9P0ogNvB3791L5h7W1Gu2NCcjYD
P9k2/WKbUszudwksUe3AoeKBJqY6nsgKHNXDShsATuHsAOoxXnrjilkOeRKiDRDR
V3Vr5WPOHF20MuwXOME4Y3IVfCPglY4dih8oPJE63qUrz9OO9I6g0kwioFcbpfwg
s5nnYDlkbBDxusbBAINkQ09Zq9vAHOjDdRuhTEgqh6/4e+QWIASl3LuVKECXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIcT3jTQvT+mV6g5b6pOfthtwq5gwHwYDVR0j
BBgwFoAUyR/DTnabSRgG4YDp3/kDx9H5tvkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjEyRjI5QzBFNEM5ODI5QTcwOUNGOEUzNDE2RTBEM0E2
RkQ5RkU4MTg0MkE4MjFEOTIzRUQwNjYzMEI4RDAzLzAvQzkxRkMzNEU3NjlCNDkx
ODA2RTE4MEU5REZGOTAzQzdEMUY5QjZGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOTFGQzM0RTc2OUI0OTE4MDZF
MTgwRTlERkY5MDNDN0QxRjlCNkY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYxMkYyOUMwRTRDOTgyOUE3MDlDRjhFMzQxNkUwRDNBNkZEOUZFODE4
NDJBODIxRDkyM0VEMDY2MzBCOEQwMy8wLzM0MzUyZTMyMzIzNzJlMzYzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3jPjAN
BgkqhkiG9w0BAQsFAAOCAQEAMcHEt15ezb0OltRsh2XuWH5BispTFRKEvLJH/9V3
ylRfTQW2yg+A7kDhmskDjbvrsVjYSIAMVZzltjnM2MbIVpbU9NUs4fr6rhhomdrD
DtL9U9nI+jVXxyrvoiCVNW4fEygHSErOD6TKkzNkb9E3uxFvfQZTrzGn+judUID7
+3dlp7o0+cAHSp23ZDDaa7UAfPoAOHzlae0zfjoRZ83h1wKSIjBpPEtgIFiHQrIM
uWALG3pth5dpTHVZc5+YlXQXB38z4ECSm3+JLCq72200PgvA7bJtjg54YKp8fT/J
mMxnBbT4i4je2xH2vspFvLblsEF+OvY1tHWgMfPR/g1dBw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:52 2025 by rpki-client