Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F6EED4FA873A64A57C638864473DA9AC50FE82B2A46644FDB9C04435F06193C/0/3136342e3136332e34302e302f32322d3234203d3e20323635373633.roa
File: 3136342e3136332e34302e302f32322d3234203d3e20323635373633.roa (raw, json)
Hash identifier: gYvToJX04b333OM3R5lzTdUhW2WCszHWuKWVRUwg6uA=
Subject key identifier: 89:75:B5:CC:33:3B:CC:63:7F:01:58:5B:91:BD:01:D8:43:D1:55:EB
Certificate issuer: /CN=2605F15291936EA0E0C3F652F64E11490D4E976D
Certificate serial: 4660136725FB0572C145D22DBA36A728459AC681
Authority key identifier: 26:05:F1:52:91:93:6E:A0:E0:C3:F6:52:F6:4E:11:49:0D:4E:97:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2605F15291936EA0E0C3F652F64E11490D4E976D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F6EED4FA873A64A57C638864473DA9AC50FE82B2A46644FDB9C04435F06193C/0/3136342e3136332e34302e302f32322d3234203d3e20323635373633.roa
Signing time: Tue 04 Feb 2025 18:30:19 +0000
ROA not before: Tue 04 Feb 2025 18:25:19 +0000
ROA not after: Tue 03 Feb 2026 18:30:19 +0000
asID: 265763
IP address blocks: 164.163.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:60:13:67:25:fb:05:72:c1:45:d2:2d:ba:36:a7:28:45:9a:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2605F15291936EA0E0C3F652F64E11490D4E976D
Validity
Not Before: Feb 4 18:25:19 2025 GMT
Not After : Feb 3 18:30:19 2026 GMT
Subject: CN=8975B5CC333BCC637F01585B91BD01D843D155EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:d7:0c:ea:7a:9f:1e:90:dc:68:99:49:2b:
30:eb:25:90:20:d0:94:5f:47:ed:1a:9d:4f:cd:73:
9e:5a:9e:47:62:55:57:f3:dc:bd:bd:11:71:a1:41:
c6:f1:50:92:ef:d6:ce:37:9c:9f:00:29:ac:30:a7:
b8:3b:bc:46:43:bb:eb:63:f1:71:f6:d8:ff:dc:6f:
72:98:00:7a:f1:f2:b5:97:ce:61:ce:33:ae:ab:15:
8f:99:89:25:49:2a:bc:fe:86:c1:34:50:4a:7e:14:
f5:e3:94:48:3e:1b:2a:28:4f:7d:d7:10:02:4f:42:
20:ac:a8:bd:03:02:16:17:9a:e5:62:5d:0d:14:53:
96:e2:d2:df:7d:ec:51:c7:db:70:1d:f1:b9:e9:09:
09:f2:08:fd:be:8b:25:38:cd:3c:35:d3:9b:26:d1:
b9:b0:b0:84:b7:52:f1:73:f1:17:05:cd:ba:af:4c:
30:a0:1e:48:22:80:4e:3c:80:45:a0:60:65:08:ec:
34:60:51:75:24:1b:94:40:27:30:08:65:58:1c:0d:
85:0f:8d:eb:99:59:09:78:53:77:83:4c:62:d6:be:
1e:10:e3:e6:e5:1d:ef:7f:ed:6b:f0:9a:7d:02:67:
d3:b0:31:5e:ee:09:4c:d8:35:d4:75:e2:28:e2:86:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:75:B5:CC:33:3B:CC:63:7F:01:58:5B:91:BD:01:D8:43:D1:55:EB
X509v3 Authority Key Identifier:
keyid:26:05:F1:52:91:93:6E:A0:E0:C3:F6:52:F6:4E:11:49:0D:4E:97:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F6EED4FA873A64A57C638864473DA9AC50FE82B2A46644FDB9C04435F06193C/0/2605F15291936EA0E0C3F652F64E11490D4E976D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2605F15291936EA0E0C3F652F64E11490D4E976D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F6EED4FA873A64A57C638864473DA9AC50FE82B2A46644FDB9C04435F06193C/0/3136342e3136332e34302e302f32322d3234203d3e20323635373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.40.0/22
Signature Algorithm: sha256WithRSAEncryption
53:84:ba:82:60:ce:2b:07:0b:c3:5f:29:d8:9b:d2:4e:bb:9e:
6d:93:07:d7:04:01:02:7b:84:5d:0c:a9:5e:f9:eb:96:ce:e4:
71:9d:88:13:0c:bf:b2:07:14:d1:f3:f0:c6:25:5d:cc:c7:aa:
41:04:99:19:25:22:91:9b:11:be:72:76:71:f7:f0:81:61:8b:
d0:fd:73:79:ea:b0:ee:df:9c:6a:27:4b:f7:82:f0:d9:a9:7a:
61:c5:d3:c2:33:15:09:46:47:fd:80:7b:bc:85:74:bf:d4:9c:
f1:f5:1a:c3:34:d5:f6:a0:8e:aa:cb:f7:9c:75:61:c9:d3:68:
b7:23:67:b2:31:24:ba:5e:97:97:d0:7f:ab:0f:c1:30:11:db:
03:12:8c:46:b3:03:f6:82:f6:b7:e8:e6:8d:6a:d8:11:4d:3c:
0a:f0:57:f8:f4:f5:ef:ff:ef:c0:70:7f:69:06:49:90:d7:c8:
2a:19:cb:35:9c:09:50:9c:c3:1d:a1:f6:71:63:84:fb:d1:e3:
d9:52:75:f6:2d:a8:73:ec:55:1e:6b:68:43:f4:96:6d:74:bc:
89:11:c4:ab:a2:4f:12:5f:c1:40:79:3c:0b:b9:18:ad:68:05:
bb:18:bf:95:41:66:c0:2d:c5:b6:48:40:5c:92:a7:cf:d9:f0:
c2:a1:8f:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURmATZyX7BXLBRdItujanKEWaxoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwNUYxNTI5MTkzNkVBMEUwQzNGNjUyRjY0RTExNDkw
RDRFOTc2RDAeFw0yNTAyMDQxODI1MTlaFw0yNjAyMDMxODMwMTlaMDMxMTAvBgNV
BAMTKDg5NzVCNUNDMzMzQkNDNjM3RjAxNTg1QjkxQkQwMUQ4NDNEMTU1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqz9cM6nqfHpDcaJlJKzDrJZAg
0JRfR+0anU/Nc55ankdiVVfz3L29EXGhQcbxUJLv1s43nJ8AKawwp7g7vEZDu+tj
8XH22P/cb3KYAHrx8rWXzmHOM66rFY+ZiSVJKrz+hsE0UEp+FPXjlEg+GyooT33X
EAJPQiCsqL0DAhYXmuViXQ0UU5bi0t997FHH23Ad8bnpCQnyCP2+iyU4zTw105sm
0bmwsIS3UvFz8RcFzbqvTDCgHkgigE48gEWgYGUI7DRgUXUkG5RAJzAIZVgcDYUP
jeuZWQl4U3eDTGLWvh4Q4+blHe9/7Wvwmn0CZ9OwMV7uCUzYNdR14ijihlE3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiXW1zDM7zGN/AVhbkb0B2EPRVeswHwYDVR0j
BBgwFoAUJgXxUpGTbqDgw/ZS9k4RSQ1Ol20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjZFRUQ0RkE4NzNBNjRBNTdDNjM4ODY0NDczREE5QUM1
MEZFODJCMkE0NjY0NEZEQjlDMDQ0MzVGMDYxOTNDLzAvMjYwNUYxNTI5MTkzNkVB
MEUwQzNGNjUyRjY0RTExNDkwRDRFOTc2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjA1RjE1MjkxOTM2RUEwRTBD
M0Y2NTJGNjRFMTE0OTBENEU5NzZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY2RUVENEZBODczQTY0QTU3QzYzODg2NDQ3M0RBOUFDNTBGRTgyQjJB
NDY2NDRGREI5QzA0NDM1RjA2MTkzQy8wLzMxMzYzNDJlMzEzNjMzMmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpKMo
MA0GCSqGSIb3DQEBCwUAA4IBAQBThLqCYM4rBwvDXynYm9JOu55tkwfXBAECe4Rd
DKle+euWzuRxnYgTDL+yBxTR8/DGJV3Mx6pBBJkZJSKRmxG+cnZx9/CBYYvQ/XN5
6rDu35xqJ0v3gvDZqXphxdPCMxUJRkf9gHu8hXS/1Jzx9RrDNNX2oI6qy/ecdWHJ
02i3I2eyMSS6XpeX0H+rD8EwEdsDEoxGswP2gva36OaNatgRTTwK8Ff49PXv/+/A
cH9pBkmQ18gqGcs1nAlQnMMdofZxY4T70ePZUnX2Lahz7FUea2hD9JZtdLyJEcSr
ok8SX8FAeTwLuRitaAW7GL+VQWbALcW2SEBckqfP2fDCoY8Y
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:09 2025 by rpki-client