Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
File: 3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa (raw, json)
Hash identifier: KuGSNSRV3mvNHyWQtARimBMkCckX9H6zyMpYATf+eYA=
Subject key identifier: 53:FD:3C:79:FE:11:A0:7E:CF:13:5A:4B:CB:27:A0:E3:DC:4F:BA:75
Certificate issuer: /CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
Certificate serial: 0B7D3BADCC448316603DCB1279A77F6DDD935D2E
Authority key identifier: BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
Signing time: Tue 04 Feb 2025 18:39:55 +0000
ROA not before: Tue 04 Feb 2025 18:34:55 +0000
ROA not after: Tue 03 Feb 2026 18:39:55 +0000
asID: 64155
IP address blocks: 148.222.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7d:3b:ad:cc:44:83:16:60:3d:cb:12:79:a7:7f:6d:dd:93:5d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
Validity
Not Before: Feb 4 18:34:55 2025 GMT
Not After : Feb 3 18:39:55 2026 GMT
Subject: CN=53FD3C79FE11A07ECF135A4BCB27A0E3DC4FBA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:8b:81:9a:2e:11:98:c4:cb:cc:07:47:6d:
f7:3e:b3:9a:fe:01:91:99:38:06:13:d7:33:bb:1b:
34:cf:2c:a9:ad:e8:6a:56:bf:0e:9a:cc:79:2a:a0:
c7:aa:5c:b6:47:83:6c:0e:30:a2:25:a8:a2:c6:e2:
c0:ce:15:12:7e:ca:68:66:ea:d8:aa:a1:7b:fe:68:
b8:ed:59:c5:42:fd:56:c3:67:fa:77:0d:65:ed:67:
77:6b:90:be:d8:47:e4:33:03:1b:73:ec:00:61:cd:
5b:c4:6d:5b:c8:04:be:02:d5:e7:d3:08:47:6a:bb:
72:0c:e7:6e:d8:3b:8a:3e:96:69:4d:70:ad:09:83:
f0:b0:f4:77:3f:4c:71:52:d9:c9:ea:15:9a:82:4a:
6a:1a:fe:b0:f4:e5:66:45:e1:fd:d0:96:15:01:79:
6b:3f:b1:69:f9:c0:2a:79:3c:78:d4:d0:89:e1:06:
7d:86:4d:04:2e:95:ac:32:a9:b7:4c:44:58:00:06:
af:5c:75:f2:74:1e:8d:40:ce:5c:36:a5:26:65:d6:
66:a9:d3:e3:a6:2f:7a:1d:56:73:a5:e7:29:04:b4:
3a:41:77:9f:17:2e:5d:60:c4:22:12:3d:47:af:29:
5e:bd:c2:2b:ea:bb:98:4d:06:ba:ed:ba:1f:33:7c:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:3C:79:FE:11:A0:7E:CF:13:5A:4B:CB:27:A0:E3:DC:4F:BA:75
X509v3 Authority Key Identifier:
keyid:BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.228.0/23
Signature Algorithm: sha256WithRSAEncryption
05:dc:be:3d:e9:83:71:5e:25:ee:41:a5:87:a9:11:dc:bc:f2:
99:3a:4f:d9:82:f4:df:06:a0:60:3e:4c:9f:f4:24:42:6e:60:
40:9e:c2:49:90:3e:b6:20:6a:37:53:63:25:d5:f3:e6:65:95:
01:1b:2a:41:88:01:7a:35:db:b3:ae:47:d3:fa:8d:df:37:26:
3f:58:fb:fd:09:83:fd:2e:98:c9:14:88:58:5f:3a:9f:88:be:
77:68:dc:bb:42:3b:1c:90:87:85:47:7d:fe:24:04:6d:f5:13:
21:b7:69:3f:ca:cf:5e:90:a6:ae:4a:5c:b0:e0:a3:ab:7a:4a:
6f:65:d2:0a:ba:dd:9e:a0:f2:3d:14:12:34:95:e2:ac:35:b7:
85:c3:34:48:a7:6a:76:aa:19:6e:91:9c:63:2a:c9:68:ec:6d:
b2:70:32:28:94:1c:09:8b:8c:ed:7e:e5:b8:d1:ce:6a:46:8a:
a3:b3:e5:0d:f7:34:1b:47:29:ae:23:b7:ee:ac:b3:03:3a:58:
a3:29:e4:0d:0a:cb:cf:13:8e:14:ac:2e:f2:9b:cb:fa:27:46:
f9:1b:6e:76:1d:b4:1e:14:69:63:99:83:d0:af:8e:4f:87:59:
d8:a6:cf:93:2b:d8:10:a8:89:53:74:a7:00:c1:2c:c8:8e:8f:
79:66:5d:8d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUC307rcxEgxZgPcsSead/bd2TXS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxOUVDN0Y2MzZGRENBRTY5NjJEMTQ1NDcyNEE2OEJD
RkM2QUY1RTAeFw0yNTAyMDQxODM0NTVaFw0yNjAyMDMxODM5NTVaMDMxMTAvBgNV
BAMTKDUzRkQzQzc5RkUxMUEwN0VDRjEzNUE0QkNCMjdBMEUzREM0RkJBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGIuBmi4RmMTLzAdHbfc+s5r+
AZGZOAYT1zO7GzTPLKmt6GpWvw6azHkqoMeqXLZHg2wOMKIlqKLG4sDOFRJ+ymhm
6tiqoXv+aLjtWcVC/VbDZ/p3DWXtZ3drkL7YR+QzAxtz7ABhzVvEbVvIBL4C1efT
CEdqu3IM527YO4o+lmlNcK0Jg/Cw9Hc/THFS2cnqFZqCSmoa/rD05WZF4f3QlhUB
eWs/sWn5wCp5PHjU0InhBn2GTQQulawyqbdMRFgABq9cdfJ0Ho1Azlw2pSZl1map
0+OmL3odVnOl5ykEtDpBd58XLl1gxCISPUevKV69wivqu5hNBrrtuh8zfOpVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUU/08ef4RoH7PE1pLyyeg49xPunUwHwYDVR0j
BBgwFoAUvRnsf2Nv3K5pYtFFRySmi8/Gr14wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTk3QzAyMzkwN0YyRjFDMUQwNjcxRTU0NkI0NTY2QzY5
RUNENUY1RTUyNEJEQ0U1MjY3RjY3NjMzNzVCRkIwLzAvQkQxOUVDN0Y2MzZGRENB
RTY5NjJEMTQ1NDcyNEE2OEJDRkM2QUY1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDE5RUM3RjYzNkZEQ0FFNjk2
MkQxNDU0NzI0QTY4QkNGQzZBRjVFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUU5N0MwMjM5MDdGMkYxQzFEMDY3MUU1NDZCNDU2NkM2OUVDRDVGNUU1
MjRCRENFNTI2N0Y2NzYzMzc1QkZCMC8wLzMxMzQzODJlMzIzMjMyMmUzMjMyMzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjM0MzEzNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlN7k
MA0GCSqGSIb3DQEBCwUAA4IBAQAF3L496YNxXiXuQaWHqRHcvPKZOk/ZgvTfBqBg
Pkyf9CRCbmBAnsJJkD62IGo3U2Ml1fPmZZUBGypBiAF6NduzrkfT+o3fNyY/WPv9
CYP9LpjJFIhYXzqfiL53aNy7QjsckIeFR33+JARt9RMht2k/ys9ekKauSlyw4KOr
ekpvZdIKut2eoPI9FBI0leKsNbeFwzRIp2p2qhlukZxjKslo7G2ycDIolBwJi4zt
fuW40c5qRoqjs+UN9zQbRymuI7furLMDOlijKeQNCsvPE44UrC7ym8v6J0b5G252
HbQeFGljmYPQr45Ph1nYps+TK9gQqIlTdKcAwSzIjo95Zl2N
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:53:01 2025 by rpki-client