Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e322e302f32332d3234203d3e203233313430.roa
File: 3134362e38332e322e302f32332d3234203d3e203233313430.roa (raw, json)
Hash identifier: l1Q0ft32RGx6Qp7+mKJ/RIhVA+37ZSrjn9L//IZ6e2A=
Subject key identifier: D5:D0:A7:04:2E:1F:F4:79:AD:E9:82:79:D9:59:8A:56:CC:B0:62:CA
Certificate issuer: /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial: 40CC4FE422C2C7D292D387139EA3DA425D7E5DC5
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e322e302f32332d3234203d3e203233313430.roa
Signing time: Tue 04 Feb 2025 18:09:50 +0000
ROA not before: Tue 04 Feb 2025 18:04:50 +0000
ROA not after: Tue 03 Feb 2026 18:09:50 +0000
asID: 23140
IP address blocks: 146.83.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cc:4f:e4:22:c2:c7:d2:92:d3:87:13:9e:a3:da:42:5d:7e:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Validity
Not Before: Feb 4 18:04:50 2025 GMT
Not After : Feb 3 18:09:50 2026 GMT
Subject: CN=D5D0A7042E1FF479ADE98279D9598A56CCB062CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:47:be:72:aa:5a:c5:e3:08:d0:17:2c:e8:
13:4a:13:b4:da:dd:a7:2e:d3:dd:33:97:ee:5c:b4:
d0:d9:ed:99:57:ed:1b:26:1f:c5:17:c2:5d:ac:24:
9b:48:83:67:d7:3a:70:5f:6d:94:8d:83:0f:bc:f0:
60:41:0e:84:22:04:db:da:58:67:d3:4e:74:42:99:
f3:b8:dd:29:96:af:a4:22:58:73:ba:55:fc:08:95:
5c:6f:7a:07:c3:7c:13:e9:ca:35:6a:4b:1a:a5:98:
c6:7f:64:ff:30:bf:c1:fb:72:a5:78:a9:b1:80:83:
81:6c:6e:ae:84:dd:f4:a7:0f:e4:c8:e5:f1:bc:44:
e5:19:39:ca:3f:97:a4:1a:c8:03:72:56:25:1a:38:
66:83:e9:af:e3:4e:9b:b9:2c:1f:5a:e7:38:eb:50:
c3:87:a8:67:75:63:87:04:2a:ef:e4:3b:81:86:c1:
69:d5:9b:42:c0:e6:2e:e1:03:4b:d2:8a:13:b2:4c:
0b:d2:9a:aa:2b:dc:e8:a6:39:99:68:65:70:43:a6:
03:69:36:52:a7:4f:cc:ff:56:b5:cb:1b:eb:49:81:
9c:33:da:d7:3b:ac:da:46:15:f5:69:3f:25:a5:fd:
16:71:24:56:d7:1c:d9:61:0c:bf:23:b7:98:05:ef:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:A7:04:2E:1F:F4:79:AD:E9:82:79:D9:59:8A:56:CC:B0:62:CA
X509v3 Authority Key Identifier:
keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e322e302f32332d3234203d3e203233313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.83.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:ce:e4:9d:df:81:ee:b9:0c:2b:28:6f:74:4e:65:72:34:6a:
33:85:f4:d3:aa:b0:6b:a4:d7:1f:a2:7c:7a:dc:42:72:a6:2b:
36:81:af:de:4b:d6:85:31:81:a2:62:78:ed:1d:13:0d:9b:63:
01:91:bf:5e:6c:4f:29:67:ad:09:43:d7:ae:4b:b5:c9:fd:93:
42:11:91:8d:96:06:0d:98:ba:e1:e5:fd:50:f4:5f:2a:48:0c:
b0:58:7c:d1:05:1a:cc:fe:ec:6f:00:a9:df:c7:a5:6c:52:d2:
00:40:37:2d:57:76:0b:8e:ea:a2:3e:98:b6:f0:0b:81:fe:a1:
35:21:e3:30:42:f3:79:ed:a9:41:ad:46:d9:8d:dc:8b:c3:a1:
9e:7d:ec:7f:b5:27:d4:be:b1:2c:24:0e:5f:dc:9b:9e:0f:28:
d0:a1:b8:60:3d:74:26:cf:4d:73:0b:97:95:e6:bf:bd:14:6e:
59:a0:c3:e2:c4:e9:ef:cb:78:b1:d2:12:52:25:7c:e2:0e:cc:
7e:1b:fc:6e:8e:fc:97:b0:0f:da:25:cc:ee:5e:cb:94:99:1e:
3c:70:99:9b:b1:ea:05:15:5b:ee:87:29:4f:1c:cc:f7:84:3a:
c1:43:2d:62:8d:f2:c5:30:7f:db:6a:5e:d1:aa:cb:a4:13:e8:
21:da:de:5c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQMxP5CLCx9KS04cTnqPaQl1+XcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFFNEVGQTk3NUIwNDI0OEU3MjE4QTNCQ0NGNEY3QzNE
QjlENjkxMDAeFw0yNTAyMDQxODA0NTBaFw0yNjAyMDMxODA5NTBaMDMxMTAvBgNV
BAMTKEQ1RDBBNzA0MkUxRkY0NzlBREU5ODI3OUQ5NTk4QTU2Q0NCMDYyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD60e+cqpaxeMI0Bcs6BNKE7Ta
3acu090zl+5ctNDZ7ZlX7RsmH8UXwl2sJJtIg2fXOnBfbZSNgw+88GBBDoQiBNva
WGfTTnRCmfO43SmWr6QiWHO6VfwIlVxvegfDfBPpyjVqSxqlmMZ/ZP8wv8H7cqV4
qbGAg4Fsbq6E3fSnD+TI5fG8ROUZOco/l6QayANyViUaOGaD6a/jTpu5LB9a5zjr
UMOHqGd1Y4cEKu/kO4GGwWnVm0LA5i7hA0vSihOyTAvSmqor3OimOZloZXBDpgNp
NlKnT8z/VrXLG+tJgZwz2tc7rNpGFfVpPyWl/RZxJFbXHNlhDL8jt5gF7yWNAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU1dCnBC4f9Hmt6YJ52VmKVsywYsowHwYDVR0j
BBgwFoAUGuTvqXWwQkjnIYo7zPT3w9udaRAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzRGNTJEQTIyMEMwMkNEN0JFRjAxODJCRTBENEJEN0U0
QTE0MEZEODA1RjFDNzVBRURCNzhDNTFDNTA1NUE0LzAvMUFFNEVGQTk3NUIwNDI0
OEU3MjE4QTNCQ0NGNEY3QzNEQjlENjkxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQUU0RUZBOTc1QjA0MjQ4RTcy
MThBM0JDQ0Y0RjdDM0RCOUQ2OTEwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0RjUyREEyMjBDMDJDRDdCRUYwMTgyQkUwRDRCRDdFNEExNDBGRDgw
NUYxQzc1QUVEQjc4QzUxQzUwNTVBNC8wLzMxMzQzNjJlMzgzMzJlMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjMzMzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBklMCMA0GCSqG
SIb3DQEBCwUAA4IBAQAbzuSd34HuuQwrKG90TmVyNGozhfTTqrBrpNcfonx63EJy
pis2ga/eS9aFMYGiYnjtHRMNm2MBkb9ebE8pZ60JQ9euS7XJ/ZNCEZGNlgYNmLrh
5f1Q9F8qSAywWHzRBRrM/uxvAKnfx6VsUtIAQDctV3YLjuqiPpi28AuB/qE1IeMw
QvN57alBrUbZjdyLw6Gefex/tSfUvrEsJA5f3JueDyjQobhgPXQmz01zC5eV5r+9
FG5ZoMPixOnvy3ix0hJSJXziDsx+G/xujvyXsA/aJczuXsuUmR48cJmbseoFFVvu
hylPHMz3hDrBQy1ijfLFMH/bal7RqsukE+gh2t5c
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:45 2025 by rpki-client