Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa
File: 3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa (raw, json)
Hash identifier: K7siO0QJbJ+8L9V6yuL2fVF7WWkIPyxONc4UXJO2B8U=
Subject key identifier: CC:4D:BF:7D:57:34:A8:60:2E:55:69:14:83:7F:E6:C9:C7:AE:2D:8D
Certificate issuer: /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial: 52AEC026C6C1E8FE1F0E04F68F9B71E6579E8841
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa
Signing time: Tue 04 Feb 2025 18:01:31 +0000
ROA not before: Tue 04 Feb 2025 17:56:31 +0000
ROA not after: Tue 03 Feb 2026 18:01:31 +0000
asID: 264770
IP address blocks: 170.254.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ae:c0:26:c6:c1:e8:fe:1f:0e:04:f6:8f:9b:71:e6:57:9e:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Validity
Not Before: Feb 4 17:56:31 2025 GMT
Not After : Feb 3 18:01:31 2026 GMT
Subject: CN=CC4DBF7D5734A8602E556914837FE6C9C7AE2D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:4a:ee:38:2b:fb:2a:78:f3:b7:59:db:43:
c1:52:0d:67:90:14:6b:e7:c2:87:83:34:0f:a7:22:
78:f2:ce:0a:41:cf:90:e9:10:49:c1:c9:6b:1f:6e:
bc:f4:53:e5:01:de:df:9c:af:3b:46:83:58:7a:08:
80:c7:1d:b4:31:42:24:4c:48:fa:87:2a:87:97:c9:
7a:a1:98:02:49:38:12:7f:82:a9:d4:8d:b6:7f:c9:
61:c7:6d:45:03:2c:e6:07:89:24:e4:04:18:02:ec:
96:29:99:df:a5:07:de:cd:bb:3f:0a:52:9a:be:2b:
a2:9e:f2:9b:71:4e:4a:4c:7a:93:18:88:82:d7:70:
5e:e1:f3:96:7d:8b:75:f9:04:b1:c5:c6:2c:5d:1c:
27:f9:5e:05:8e:c0:2d:17:40:8b:03:3c:63:34:8e:
91:64:82:a1:b7:10:99:2e:e2:28:49:f9:af:e6:e6:
d1:52:ae:0b:93:41:b7:75:68:9d:6d:27:36:b8:25:
21:2d:47:a3:0a:6f:72:bb:f5:5a:a1:d4:2f:56:7e:
9c:8e:ef:6f:51:8f:78:db:f2:ed:db:2e:78:0c:2a:
1b:3b:f8:ac:c7:e1:e9:4d:b7:24:63:c0:ce:fe:68:
21:66:88:44:d7:34:06:2e:b5:4f:af:b8:1c:45:47:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:BF:7D:57:34:A8:60:2E:55:69:14:83:7F:E6:C9:C7:AE:2D:8D
X509v3 Authority Key Identifier:
keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.216.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ec:a5:ff:d8:18:c8:93:00:a2:b2:84:3d:4d:8f:b0:71:8a:
95:00:e9:05:eb:53:aa:17:89:0c:f7:ab:43:b3:99:19:49:0c:
1f:14:a0:fb:2b:2e:f2:ad:0f:41:ab:9c:df:50:6f:66:79:67:
7d:24:dc:e1:07:74:07:c6:47:0d:94:68:39:f2:34:c7:e3:ba:
2a:76:46:d6:8f:a4:b9:cd:54:2b:31:f4:e1:57:98:c5:4f:87:
3a:ac:b4:82:46:43:91:3d:7f:70:64:d3:99:a9:f8:db:4e:74:
3b:7c:cf:03:ca:aa:90:2d:51:e6:25:52:e9:a2:2f:82:73:62:
cc:ea:0b:a2:ce:49:76:08:6c:c9:32:ff:93:8b:8a:c9:a1:e8:
98:17:36:c1:05:df:49:b7:20:69:17:de:2a:b8:ed:fc:ca:f1:
81:11:ef:0e:4f:ce:f4:f3:44:ff:4c:5b:ba:fa:22:6f:59:0c:
ba:5d:87:ea:6c:f5:fb:70:fc:b3:ff:a3:13:36:ed:c1:a4:46:
33:9c:3e:28:eb:3f:d4:51:59:d6:6f:ae:fe:a5:cc:de:38:1f:
c9:7a:0a:c3:4d:8f:32:4f:9e:9d:c1:85:09:97:e5:9a:0a:7e:
07:4f:5b:d1:a6:b0:f0:be:8a:97:85:98:75:ed:18:b3:72:3c:
d6:4f:75:5c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUq7AJsbB6P4fDgT2j5tx5leeiEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdBQzBDRTU1M0Y5M0ZDNUNFOTQyRjEyMzYwRTZBMTQ0
NzIzRjgyRDAeFw0yNTAyMDQxNzU2MzFaFw0yNjAyMDMxODAxMzFaMDMxMTAvBgNV
BAMTKENDNERCRjdENTczNEE4NjAyRTU1NjkxNDgzN0ZFNkM5QzdBRTJEOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjc0ruOCv7Knjzt1nbQ8FSDWeQ
FGvnwoeDNA+nInjyzgpBz5DpEEnByWsfbrz0U+UB3t+crztGg1h6CIDHHbQxQiRM
SPqHKoeXyXqhmAJJOBJ/gqnUjbZ/yWHHbUUDLOYHiSTkBBgC7JYpmd+lB97Nuz8K
Upq+K6Ke8ptxTkpMepMYiILXcF7h85Z9i3X5BLHFxixdHCf5XgWOwC0XQIsDPGM0
jpFkgqG3EJku4ihJ+a/m5tFSrguTQbd1aJ1tJza4JSEtR6MKb3K79Vqh1C9WfpyO
729Rj3jb8u3bLngMKhs7+KzH4elNtyRjwM7+aCFmiETXNAYutU+vuBxFR4VrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUzE2/fVc0qGAuVWkUg3/myceuLY0wHwYDVR0j
BBgwFoAU96wM5VP5P8XOlC8SNg5qFEcj+C0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDQzNzBDNTQxOTAzOERGQUZFNDIzMzlFNkQyMzYyREJG
OUY0OEY1QTFBMjI1REZEOEVEQzcwOTY5QzFDMjMwLzAvRjdBQzBDRTU1M0Y5M0ZD
NUNFOTQyRjEyMzYwRTZBMTQ0NzIzRjgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0FDMENFNTUzRjkzRkM1Q0U5
NDJGMTIzNjBFNkExNDQ3MjNGODJELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0MzcwQzU0MTkwMzhERkFGRTQyMzM5RTZEMjM2MkRCRjlGNDhGNUEx
QTIyNURGRDhFREM3MDk2OUMxQzIzMC8wLzMxMzczMDJlMzIzNTM0MmUzMjMxMzYy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzNzM3MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGq
/tgwDQYJKoZIhvcNAQELBQADggEBADXspf/YGMiTAKKyhD1Nj7BxipUA6QXrU6oX
iQz3q0OzmRlJDB8UoPsrLvKtD0GrnN9Qb2Z5Z30k3OEHdAfGRw2UaDnyNMfjuip2
RtaPpLnNVCsx9OFXmMVPhzqstIJGQ5E9f3Bk05mp+NtOdDt8zwPKqpAtUeYlUumi
L4JzYszqC6LOSXYIbMky/5OLismh6JgXNsEF30m3IGkX3iq47fzK8YER7w5PzvTz
RP9MW7r6Im9ZDLpdh+ps9ftw/LP/oxM27cGkRjOcPijrP9RRWdZvrv6lzN44H8l6
CsNNjzJPnp3BhQmX5ZoKfgdPW9GmsPC+ipeFmHXtGLNyPNZPdVw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:07 2025 by rpki-client