Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa
File: 34352e372e36342e302f32332d3233203d3e20323730313433.roa (raw, json)
Hash identifier: gObaagDJFTnjO+OvDFCLU9PkIvAuu9qweR9d4BTWFy4=
Subject key identifier: EE:68:6A:D3:82:CB:CB:48:6B:2A:B4:CB:B9:2E:3C:C0:A5:E7:E5:F7
Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial: 4F3BBCF30B033DF1FE69909F15A9A4E22420CB1A
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa
Signing time: Tue 04 Feb 2025 18:45:49 +0000
ROA not before: Tue 04 Feb 2025 18:40:49 +0000
ROA not after: Tue 03 Feb 2026 18:45:49 +0000
asID: 270143
IP address blocks: 45.7.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3b:bc:f3:0b:03:3d:f1:fe:69:90:9f:15:a9:a4:e2:24:20:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Validity
Not Before: Feb 4 18:40:49 2025 GMT
Not After : Feb 3 18:45:49 2026 GMT
Subject: CN=EE686AD382CBCB486B2AB4CBB92E3CC0A5E7E5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:7e:da:65:6b:57:54:45:62:ca:ed:08:be:
e7:9e:5b:c1:25:e5:46:05:e6:52:27:a0:fe:03:0c:
82:85:40:66:3c:dc:18:80:cb:12:ba:2e:23:08:bd:
79:af:c3:79:86:58:e9:c2:d0:0f:b0:8d:19:6f:55:
45:01:61:43:4b:1e:49:76:e5:2f:5c:b7:5c:90:52:
15:ea:c4:bf:0b:b2:86:c8:ef:4c:00:03:aa:86:73:
d4:29:d6:a9:41:43:d0:ba:f4:c6:7c:96:69:27:00:
a7:07:e5:32:ca:e1:03:cb:d1:b3:96:c1:d7:93:15:
7f:0e:79:3e:ec:6e:d7:8c:b7:29:bf:4b:86:1a:d7:
51:0c:49:f7:33:c6:1f:be:b6:82:1d:46:d8:d9:82:
0a:8b:6c:8e:41:da:9e:a2:5d:42:2d:61:53:ea:58:
cc:74:bb:c6:27:be:f9:34:c5:dd:ac:7d:1f:bd:9f:
ad:8c:23:a8:5a:c0:31:c2:e2:55:10:9a:1a:a8:12:
e9:27:00:55:cc:c0:8c:08:74:94:de:42:6c:79:db:
9c:88:fe:e6:0e:64:e3:2f:41:39:47:d8:55:d5:c8:
d3:27:12:7c:f2:32:b2:c0:58:f8:33:f2:cc:93:e3:
f5:24:87:77:63:9b:f8:fe:4a:bc:35:c0:fd:3d:f4:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:6A:D3:82:CB:CB:48:6B:2A:B4:CB:B9:2E:3C:C0:A5:E7:E5:F7
X509v3 Authority Key Identifier:
keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.64.0/23
Signature Algorithm: sha256WithRSAEncryption
26:d1:60:8e:8b:18:86:18:7c:d6:33:d5:a7:35:04:93:41:79:
e6:c5:77:a1:f2:b6:a6:8e:0c:64:b9:15:1f:41:f5:79:71:f4:
c1:ba:e5:59:d9:84:9d:9a:4a:d0:e4:29:32:77:55:d4:30:8e:
4c:18:af:50:60:1e:38:6f:aa:c0:1f:9c:3d:ef:01:73:0e:14:
94:a8:85:ca:24:f3:ac:1e:32:c4:62:35:f0:c8:0a:36:06:47:
57:3f:03:37:71:5d:cc:6b:24:4b:db:4e:89:fc:7c:cf:ee:68:
e3:3c:46:30:f3:14:a1:8f:1c:66:6b:f4:b9:97:c4:84:63:f4:
3c:55:8c:74:2a:3a:a0:bf:e2:bb:0c:ea:4f:0d:37:29:db:90:
f5:90:30:e1:78:3b:a7:9f:c8:74:86:ca:5c:db:c6:09:98:93:
8a:97:cc:8d:91:34:6c:92:87:c5:c8:fc:69:77:48:d0:d6:81:
6b:af:3f:bd:04:5c:80:3d:60:a3:10:4e:f9:b8:17:2f:40:7e:
bc:45:81:c7:f3:0b:53:2b:47:c8:7f:ac:32:51:25:38:f4:71:
3f:24:ee:aa:71:62:8e:87:df:56:cc:43:ac:97:d2:8b:d8:cf:
71:b4:28:7a:d0:b2:ff:83:55:a1:01:ad:02:55:3c:c6:05:a2:
21:b7:6b:55
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTzu88wsDPfH+aZCfFamk4iQgyxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC
NkUwQ0Q4QzAeFw0yNTAyMDQxODQwNDlaFw0yNjAyMDMxODQ1NDlaMDMxMTAvBgNV
BAMTKEVFNjg2QUQzODJDQkNCNDg2QjJBQjRDQkI5MkUzQ0MwQTVFN0U1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh37aZWtXVEViyu0IvueeW8El
5UYF5lInoP4DDIKFQGY83BiAyxK6LiMIvXmvw3mGWOnC0A+wjRlvVUUBYUNLHkl2
5S9ct1yQUhXqxL8LsobI70wAA6qGc9Qp1qlBQ9C69MZ8lmknAKcH5TLK4QPL0bOW
wdeTFX8OeT7sbteMtym/S4Ya11EMSfczxh++toIdRtjZggqLbI5B2p6iXUItYVPq
WMx0u8Ynvvk0xd2sfR+9n62MI6hawDHC4lUQmhqoEuknAFXMwIwIdJTeQmx525yI
/uYOZOMvQTlH2FXVyNMnEnzyMrLAWPgz8syT4/Ukh3djm/j+Srw1wP099D1JAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU7mhq04LLy0hrKrTLuS48wKXn5fcwHwYDVR0j
BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB
N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2
OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC
NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2
RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzM0MzUyZTM3MmUzNjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNzMwMzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQdAMA0GCSqG
SIb3DQEBCwUAA4IBAQAm0WCOixiGGHzWM9WnNQSTQXnmxXeh8ramjgxkuRUfQfV5
cfTBuuVZ2YSdmkrQ5Ckyd1XUMI5MGK9QYB44b6rAH5w97wFzDhSUqIXKJPOsHjLE
YjXwyAo2BkdXPwM3cV3MayRL206J/HzP7mjjPEYw8xShjxxma/S5l8SEY/Q8VYx0
Kjqgv+K7DOpPDTcp25D1kDDheDunn8h0hspc28YJmJOKl8yNkTRskofFyPxpd0jQ
1oFrrz+9BFyAPWCjEE75uBcvQH68RYHH8wtTK0fIf6wyUSU49HE/JO6qcWKOh99W
zEOsl9KL2M9xtCh60LL/g1WhAa0CVTzGBaIht2tV
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:44 2025 by rpki-client