Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
File: 3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa (raw, json)
Hash identifier: TBE03lWbod0HYSKtnFSBff73+kQ+v/LQdzAJf31koKU=
Subject key identifier: FB:6C:FA:BA:16:62:FE:5D:7B:44:04:A7:9F:F4:30:C0:AE:8D:1E:4D
Certificate issuer: /CN=456C96D39E784B660220D0B1C98F59D8823024A7
Certificate serial: 54A95ECD1FA8694BCA3B7D63539848901801F4DB
Authority key identifier: 45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
Signing time: Tue 04 Feb 2025 17:59:14 +0000
ROA not before: Tue 04 Feb 2025 17:54:14 +0000
ROA not after: Tue 03 Feb 2026 17:59:14 +0000
asID: 264625
IP address blocks: 143.208.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a9:5e:cd:1f:a8:69:4b:ca:3b:7d:63:53:98:48:90:18:01:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456C96D39E784B660220D0B1C98F59D8823024A7
Validity
Not Before: Feb 4 17:54:14 2025 GMT
Not After : Feb 3 17:59:14 2026 GMT
Subject: CN=FB6CFABA1662FE5D7B4404A79FF430C0AE8D1E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:a6:a3:42:ab:67:30:49:b7:17:95:c6:e3:
57:1c:33:9c:f9:bd:73:40:0f:75:17:01:d6:c9:e0:
f8:ba:1d:3d:6b:35:af:41:bf:bb:e2:99:a8:60:b4:
94:15:36:d0:b9:59:1b:a9:01:5d:ba:32:0f:0d:b6:
5b:91:19:a7:6e:78:d0:29:f6:85:ab:4f:05:e9:3d:
8b:4c:cf:7f:ea:c1:90:91:97:bb:fd:de:95:69:63:
cc:5a:3a:7d:26:25:48:af:20:a5:11:20:db:6b:ec:
16:0e:f5:38:aa:d7:72:75:88:b0:d9:38:11:18:a8:
55:89:8f:7d:70:d7:32:00:70:8e:2c:61:fa:ec:a0:
e9:ac:d6:59:cd:94:f6:e0:01:5d:64:fb:18:ad:7f:
ee:ec:a1:b5:d9:88:fa:c5:78:10:71:e7:b9:32:c6:
62:56:e6:f7:d8:ea:29:29:20:38:92:98:27:db:d0:
80:ac:64:3e:ca:aa:75:80:86:24:59:19:8c:5d:db:
c5:f0:ea:93:de:a4:03:26:fd:c1:9b:b2:75:a3:f6:
9d:ef:1c:b5:67:17:ff:4a:26:a9:1e:ec:ad:58:0f:
cf:f9:af:50:00:fb:6b:5c:99:42:18:74:7a:25:da:
da:f6:9b:30:aa:18:8c:65:fc:e6:e3:6c:cc:2d:74:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:FA:BA:16:62:FE:5D:7B:44:04:A7:9F:F4:30:C0:AE:8D:1E:4D
X509v3 Authority Key Identifier:
keyid:45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.36.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a1:4e:60:e3:99:96:56:62:ac:de:9b:22:64:9d:b5:4a:cb:
04:ef:9c:ae:36:c4:12:f7:68:2c:78:7a:af:89:23:72:d3:27:
f2:d3:0d:1f:0c:79:35:95:86:40:28:f4:a1:d7:6f:34:bd:bb:
ca:c5:d3:60:1e:09:27:20:4c:48:a5:00:62:a9:e2:70:eb:92:
92:a1:a2:89:9a:49:14:f7:2c:35:ab:5e:c2:03:3c:a4:56:9b:
33:1b:7a:4e:9a:b1:bc:0a:c0:bd:8a:ac:87:ab:46:dd:91:96:
eb:b1:14:5f:86:e2:18:0d:34:04:c0:ca:3e:95:b5:7c:3f:d3:
74:fa:d7:1b:47:c1:30:a1:6a:c0:47:6c:be:9f:3a:1c:e0:13:
d7:54:73:af:b8:e1:8f:5b:b9:cc:b2:37:0e:b1:0b:1d:a4:b6:
2a:01:af:0c:5a:f5:5c:67:24:a9:48:69:1d:ea:38:dc:38:ec:
af:42:d5:2c:5e:6c:d3:42:90:a6:7d:08:80:c8:9d:fe:78:25:
4f:dc:b9:35:98:d6:e5:08:01:dc:a1:0c:c2:0d:21:a7:53:d6:
4d:ef:9b:28:42:70:7b:bc:33:3f:83:65:6a:cb:82:01:d4:de:
3d:9c:b3:3e:13:fd:d5:7c:87:6e:38:28:f1:a2:77:40:b7:a1:
f9:0a:a4:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVKlezR+oaUvKO31jU5hIkBgB9NswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU2Qzk2RDM5RTc4NEI2NjAyMjBEMEIxQzk4RjU5RDg4
MjMwMjRBNzAeFw0yNTAyMDQxNzU0MTRaFw0yNjAyMDMxNzU5MTRaMDMxMTAvBgNV
BAMTKEZCNkNGQUJBMTY2MkZFNUQ3QjQ0MDRBNzlGRjQzMEMwQUU4RDFFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy26ajQqtnMEm3F5XG41ccM5z5
vXNAD3UXAdbJ4Pi6HT1rNa9Bv7vimahgtJQVNtC5WRupAV26Mg8NtluRGadueNAp
9oWrTwXpPYtMz3/qwZCRl7v93pVpY8xaOn0mJUivIKURINtr7BYO9Tiq13J1iLDZ
OBEYqFWJj31w1zIAcI4sYfrsoOms1lnNlPbgAV1k+xitf+7sobXZiPrFeBBx57ky
xmJW5vfY6ikpIDiSmCfb0ICsZD7KqnWAhiRZGYxd28Xw6pPepAMm/cGbsnWj9p3v
HLVnF/9KJqke7K1YD8/5r1AA+2tcmUIYdHol2tr2mzCqGIxl/ObjbMwtdJbPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+2z6uhZi/l17RASnn/QwwK6NHk0wHwYDVR0j
BBgwFoAURWyW0554S2YCINCxyY9Z2IIwJKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDBGMDlDMzYxMkY2N0YxRUVCODhBQkMzNERDOTEyNDFD
MUQ2RDVDNUM4QTI0QjAzNzdCMTlEMDI1MDU2NkYwLzAvNDU2Qzk2RDM5RTc4NEI2
NjAyMjBEMEIxQzk4RjU5RDg4MjMwMjRBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTZDOTZEMzlFNzg0QjY2MDIy
MEQwQjFDOThGNTlEODgyMzAyNEE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQwRjA5QzM2MTJGNjdGMUVFQjg4QUJDMzREQzkxMjQxQzFENkQ1QzVD
OEEyNEIwMzc3QjE5RDAyNTA1NjZGMC8wLzMxMzQzMzJlMzIzMDM4MmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj9Ak
MA0GCSqGSIb3DQEBCwUAA4IBAQBwoU5g45mWVmKs3psiZJ21SssE75yuNsQS92gs
eHqviSNy0yfy0w0fDHk1lYZAKPSh1280vbvKxdNgHgknIExIpQBiqeJw65KSoaKJ
mkkU9yw1q17CAzykVpszG3pOmrG8CsC9iqyHq0bdkZbrsRRfhuIYDTQEwMo+lbV8
P9N0+tcbR8EwoWrAR2y+nzoc4BPXVHOvuOGPW7nMsjcOsQsdpLYqAa8MWvVcZySp
SGkd6jjcOOyvQtUsXmzTQpCmfQiAyJ3+eCVP3Lk1mNblCAHcoQzCDSGnU9ZN75so
QnB7vDM/g2Vqy4IB1N49nLM+E/3VfIduOCjxondAt6H5CqQN
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:58 2025 by rpki-client