Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
File: 34352e3232342e39382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: dGCos2FWMySnjSbdirGOXhzsGJPh2tSrt8vTNT0J4wo=
Subject key identifier: 17:EE:E7:5E:AC:42:3E:6E:61:0F:29:56:FF:65:45:F0:C2:C7:49:93
Certificate issuer: /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial: 4BADE3A4957CEB7BFEDA14945A5DBE4F521C77BA
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:06:19 +0000
ROA not before: Tue 04 Feb 2025 18:01:19 +0000
ROA not after: Tue 03 Feb 2026 18:06:19 +0000
asID: 27947
IP address blocks: 45.224.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ad:e3:a4:95:7c:eb:7b:fe:da:14:94:5a:5d:be:4f:52:1c:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Validity
Not Before: Feb 4 18:01:19 2025 GMT
Not After : Feb 3 18:06:19 2026 GMT
Subject: CN=17EEE75EAC423E6E610F2956FF6545F0C2C74993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:8e:f4:7a:93:c6:24:d2:b9:ee:b3:d2:2c:
62:7c:3d:b9:e5:ff:02:2b:21:13:c7:f7:53:7d:09:
d5:0f:85:c0:42:4f:3c:1a:50:37:92:46:c7:7b:3b:
b3:9c:41:c8:9c:b4:46:aa:49:10:11:16:af:7c:d7:
9b:94:8e:ca:49:90:75:dc:04:97:f8:ef:ed:bf:91:
c3:66:75:01:8a:b2:82:7e:3c:2c:1b:23:4d:6e:ae:
89:7d:d6:c9:2c:99:15:24:92:cd:4e:4a:55:06:cb:
86:6e:d5:06:e9:a1:02:d6:7f:c6:3d:a8:17:ed:49:
4c:3e:d9:5f:d6:7c:33:ae:11:25:cd:ab:39:5d:20:
b3:93:24:6b:a2:16:68:c2:3d:bd:00:15:8c:17:73:
6c:f2:88:1f:0f:12:3f:4b:23:97:58:a9:f2:f2:d6:
31:82:ec:81:25:ea:1e:6b:68:b6:08:13:48:c6:8c:
a1:fc:41:91:cc:fb:0c:e0:ec:85:75:26:2f:04:fa:
a0:58:bc:1f:8e:8c:c0:a3:20:5a:85:d3:d4:c1:b7:
58:b3:88:b3:05:15:e7:fd:31:dc:7b:79:7a:cf:ab:
58:e4:4c:a6:93:20:e0:ec:58:5f:56:40:82:c3:e9:
4f:3c:a2:4e:fb:82:8b:17:6a:21:88:c3:eb:df:70:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:E7:5E:AC:42:3E:6E:61:0F:29:56:FF:65:45:F0:C2:C7:49:93
X509v3 Authority Key Identifier:
keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.98.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9d:18:4a:e5:18:69:e5:0c:ce:c1:1c:8b:ed:89:39:65:9a:
6b:5f:34:30:10:2e:ba:6e:4b:e2:3c:76:90:54:d6:17:be:53:
ea:0d:bc:3d:71:cf:71:cc:c8:b8:b9:fa:fb:a4:77:66:4f:da:
36:79:12:e1:76:a8:03:55:7b:5d:40:ee:0c:98:3e:25:2c:d1:
b4:c5:67:b8:bb:ad:0b:23:12:71:65:b2:71:d3:4f:4b:94:95:
93:e7:50:a7:15:59:5a:0d:c8:66:dd:27:ac:9b:5f:4c:e0:80:
47:cf:41:71:f1:b5:c5:fc:bc:42:fc:9f:4f:a2:9a:a5:ae:11:
f9:8b:bf:39:e6:ac:55:8c:c5:4f:c7:04:75:a2:08:67:7d:51:
f3:1b:5e:75:e1:82:8f:d9:13:27:36:8b:92:65:0d:e6:6c:89:
5e:88:eb:61:c1:fc:0a:d6:99:08:4d:92:fe:d6:03:5f:ed:9b:
86:5f:1a:26:54:e3:f1:ad:90:00:65:1d:56:ff:53:7e:23:0e:
17:9a:67:86:1a:cc:bf:4b:19:10:62:56:7a:19:f0:f8:05:1b:
6a:42:f7:e0:35:f8:d1:c6:35:af:5e:08:c1:79:7a:38:97:70:
a6:22:81:c2:5e:3f:f4:9e:5e:8e:db:92:21:b5:c1:a2:00:db:
14:ec:b8:a7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUS63jpJV863v+2hSUWl2+T1Icd7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxNzBGRTY2MzkzMERBNURCOTQ3NUNFQUM4QjA2MDBC
MkMwMjgzMjAeFw0yNTAyMDQxODAxMTlaFw0yNjAyMDMxODA2MTlaMDMxMTAvBgNV
BAMTKDE3RUVFNzVFQUM0MjNFNkU2MTBGMjk1NkZGNjU0NUYwQzJDNzQ5OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+Y70epPGJNK57rPSLGJ8Pbnl
/wIrIRPH91N9CdUPhcBCTzwaUDeSRsd7O7OcQcictEaqSRARFq9815uUjspJkHXc
BJf47+2/kcNmdQGKsoJ+PCwbI01urol91sksmRUkks1OSlUGy4Zu1QbpoQLWf8Y9
qBftSUw+2V/WfDOuESXNqzldILOTJGuiFmjCPb0AFYwXc2zyiB8PEj9LI5dYqfLy
1jGC7IEl6h5raLYIE0jGjKH8QZHM+wzg7IV1Ji8E+qBYvB+OjMCjIFqF09TBt1iz
iLMFFef9Mdx7eXrPq1jkTKaTIODsWF9WQILD6U88ok77gosXaiGIw+vfcJ4PAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUF+7nXqxCPm5hDylW/2VF8MLHSZMwHwYDVR0j
BBgwFoAUhxcP5mOTDaXblHXOrIsGALLAKDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOEY3NDlEMTVBMjM5RTc3MTFDNUJCRkNEMTc5RTAyMjE5
MjhCQTRGM0VCQkM3NUIwRTA4QzEyQTdFRjI4RTY5LzAvODcxNzBGRTY2MzkzMERB
NURCOTQ3NUNFQUM4QjA2MDBCMkMwMjgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzE3MEZFNjYzOTMwREE1REI5
NDc1Q0VBQzhCMDYwMEIyQzAyODMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjhGNzQ5RDE1QTIzOUU3NzExQzVCQkZDRDE3OUUwMjIxOTI4QkE0RjNF
QkJDNzVCMEUwOEMxMkE3RUYyOEU2OS8wLzM0MzUyZTMyMzIzNDJlMzkzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt4GIwDQYJ
KoZIhvcNAQELBQADggEBAHSdGErlGGnlDM7BHIvtiTllmmtfNDAQLrpuS+I8dpBU
1he+U+oNvD1xz3HMyLi5+vukd2ZP2jZ5EuF2qANVe11A7gyYPiUs0bTFZ7i7rQsj
EnFlsnHTT0uUlZPnUKcVWVoNyGbdJ6ybX0zggEfPQXHxtcX8vEL8n0+imqWuEfmL
vznmrFWMxU/HBHWiCGd9UfMbXnXhgo/ZEyc2i5JlDeZsiV6I62HB/ArWmQhNkv7W
A1/tm4ZfGiZU4/GtkABlHVb/U34jDheaZ4YazL9LGRBiVnoZ8PgFG2pC9+A1+NHG
Na9eCMF5ejiXcKYigcJeP/SeXo7bkiG1waIA2xTsuKc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:10 2025 by rpki-client