Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323634363039.roa
File: 3134332e3230322e3235322e302f32322d3234203d3e20323634363039.roa (raw, json)
Hash identifier: 7cR5sfu+JaWG9lfVdQVuRoyZS34CU8Q/tkVYfGvTTkQ=
Subject key identifier: C7:55:A7:10:54:E2:F4:7F:89:A2:FE:3B:AD:86:17:E5:A1:1A:09:10
Certificate issuer: /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial: 67B8A5D7DC70B3535E580A1D8E077A2D791F7B3F
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323634363039.roa
Signing time: Tue 04 Feb 2025 18:55:04 +0000
ROA not before: Tue 04 Feb 2025 18:50:04 +0000
ROA not after: Tue 03 Feb 2026 18:55:04 +0000
asID: 264609
IP address blocks: 143.202.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b8:a5:d7:dc:70:b3:53:5e:58:0a:1d:8e:07:7a:2d:79:1f:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Validity
Not Before: Feb 4 18:50:04 2025 GMT
Not After : Feb 3 18:55:04 2026 GMT
Subject: CN=C755A71054E2F47F89A2FE3BAD8617E5A11A0910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:fa:09:6a:26:7b:f3:01:35:09:3d:36:8b:
4f:ff:b6:fc:38:f7:09:53:c5:6d:dd:5a:fa:f0:a0:
78:55:f1:b4:5e:7c:07:1a:46:7d:4b:a6:54:d2:b4:
69:e2:47:20:c4:b6:93:a5:b3:ef:0a:c4:fa:f9:d8:
5c:65:68:0d:d2:ad:32:b5:00:54:63:4e:99:77:01:
fe:0d:1b:4b:1f:49:64:f0:c1:b9:42:e4:af:b1:12:
2c:1f:1e:69:6f:39:9d:b6:50:a4:fb:eb:4e:da:c9:
06:99:2c:7e:3b:e6:71:f6:a9:71:53:a6:7a:f1:cf:
c8:24:3c:6c:27:82:76:64:7a:85:0d:b0:54:11:90:
7f:44:29:a3:ad:1a:df:1b:18:02:3c:3b:3e:4d:4c:
67:eb:cb:93:c9:86:45:32:25:ea:f2:bf:50:29:85:
ac:bc:a7:50:ab:53:3c:07:e4:2c:cd:c0:40:cb:02:
8c:b3:30:50:bf:dc:6c:99:2d:23:9c:87:b7:b2:29:
99:89:b9:84:e9:61:c0:fe:0e:e7:d4:e8:92:e7:c2:
3f:9a:09:b6:03:86:af:9f:48:88:d6:46:e3:7f:50:
a1:0e:85:56:07:7a:24:5d:2d:0b:ff:b2:1a:b3:14:
51:b2:d5:24:95:e1:16:f8:35:da:6c:4e:a2:0e:38:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:A7:10:54:E2:F4:7F:89:A2:FE:3B:AD:86:17:E5:A1:1A:09:10
X509v3 Authority Key Identifier:
keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323634363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:9c:85:51:71:70:18:45:52:1e:35:cc:d0:7e:c4:1d:77:11:
60:37:a1:a4:da:7f:f5:f4:55:55:60:66:d7:16:8a:99:44:50:
33:1c:ff:a4:43:bd:3b:57:37:95:ae:a1:1a:b4:85:90:8a:11:
e7:dd:e8:ef:21:33:fa:6e:b4:76:50:2d:ac:5e:30:37:5e:72:
72:d5:cf:37:ee:ab:08:75:02:a5:d4:bc:6d:d8:d6:6b:89:8b:
10:6b:5e:50:37:ed:03:ac:b6:b6:10:d3:54:a5:43:9f:2c:1d:
f7:c2:02:db:5f:57:d2:2d:23:ae:21:b7:0c:c2:82:87:39:69:
f8:2e:27:02:7a:20:37:39:bd:5f:59:2a:f2:0c:4d:c8:20:8b:
fe:3b:44:e0:16:84:25:95:e4:1a:86:92:0d:13:49:77:1d:67:
e2:0d:2c:dc:15:36:a9:9a:af:85:0e:09:1c:09:79:1e:fe:9e:
42:fe:1e:33:89:80:51:2b:6e:92:2a:55:45:28:ea:ed:39:51:
c5:4b:b0:71:e9:95:3b:92:44:53:51:2e:46:4b:7e:7e:06:82:
0d:51:31:2b:39:b7:01:d0:e9:2c:a3:3d:af:15:e3:0a:15:ab:
89:05:98:fd:57:db:86:01:16:39:ea:72:2d:e5:6e:1f:90:da:
6c:fb:53:7e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ7il19xws1NeWAodjgd6LXkfez8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4RjJBODg2MTRDNjEyMkMyNTUxMEY3QTMzNjJDQjhG
NDhDRUZCMzAeFw0yNTAyMDQxODUwMDRaFw0yNjAyMDMxODU1MDRaMDMxMTAvBgNV
BAMTKEM3NTVBNzEwNTRFMkY0N0Y4OUEyRkUzQkFEODYxN0U1QTExQTA5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPvoJaiZ78wE1CT02i0//tvw4
9wlTxW3dWvrwoHhV8bRefAcaRn1LplTStGniRyDEtpOls+8KxPr52FxlaA3SrTK1
AFRjTpl3Af4NG0sfSWTwwblC5K+xEiwfHmlvOZ22UKT7607ayQaZLH475nH2qXFT
pnrxz8gkPGwngnZkeoUNsFQRkH9EKaOtGt8bGAI8Oz5NTGfry5PJhkUyJeryv1Ap
hay8p1CrUzwH5CzNwEDLAoyzMFC/3GyZLSOch7eyKZmJuYTpYcD+DufU6JLnwj+a
CbYDhq+fSIjWRuN/UKEOhVYHeiRdLQv/shqzFFGy1SSV4Rb4NdpsTqIOOMLdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUx1WnEFTi9H+Jov47rYYX5aEaCRAwHwYDVR0j
BBgwFoAUko8qiGFMYSLCVRD3ozYsuPSM77MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjYwMUI1QTNFQ0FFOTY4NkE0RThDMzVCRDlCODM4OTg5
REY4MUY3NDY2Q0Q4ODA4NjNFQjk4OTY5RDFCQzFFLzAvOTI4RjJBODg2MTRDNjEy
MkMyNTUxMEY3QTMzNjJDQjhGNDhDRUZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjhGMkE4ODYxNEM2MTIyQzI1
NTEwRjdBMzM2MkNCOEY0OENFRkIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2MDFCNUEzRUNBRTk2ODZBNEU4QzM1QkQ5QjgzODk4OURGODFGNzQ2
NkNEODgwODYzRUI5ODk2OUQxQkMxRS8wLzMxMzQzMzJlMzIzMDMyMmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjMwMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
yvwwDQYJKoZIhvcNAQELBQADggEBABechVFxcBhFUh41zNB+xB13EWA3oaTaf/X0
VVVgZtcWiplEUDMc/6RDvTtXN5WuoRq0hZCKEefd6O8hM/putHZQLaxeMDdecnLV
zzfuqwh1AqXUvG3Y1muJixBrXlA37QOstrYQ01SlQ58sHffCAttfV9ItI64htwzC
goc5afguJwJ6IDc5vV9ZKvIMTcggi/47ROAWhCWV5BqGkg0TSXcdZ+INLNwVNqma
r4UOCRwJeR7+nkL+HjOJgFErbpIqVUUo6u05UcVLsHHplTuSRFNRLkZLfn4Ggg1R
MSs5twHQ6SyjPa8V4woVq4kFmP1X24YBFjnqci3lbh+Q2mz7U34=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:52 2025 by rpki-client