Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/23bc3e0399f9f83e8d5d613f99db72f8e6328a23.roa
File: 23bc3e0399f9f83e8d5d613f99db72f8e6328a23.roa (raw, json)
Hash identifier: 4fiQM8o9hJ5b8fzeIGEdXwbBWEVGeXBb5JmvRhrGD/E=
Subject key identifier: A0:C3:C5:0F:3E:B8:99:84:E4:8E:A8:0F:68:90:D1:F0:BD:67:16:90
Certificate issuer: /CN=a03159183524bc5f2ca01a2d5b8e5b12f2050168
Certificate serial: 0853B5
Authority key identifier: A6:5C:A5:89:67:01:91:98:3B:C3:DE:04:3C:E2:93:DE:71:B6:D7:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03159183524bc5f2ca01a2d5b8e5b12f2050168.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/23bc3e0399f9f83e8d5d613f99db72f8e6328a23.roa
Signing time: Wed 24 Mar 2021 14:30:09 +0000
ROA not before: Wed 24 Mar 2021 14:30:09 +0000
ROA not after: Tue 24 Mar 2026 14:30:09 +0000
asID: 267921
IP address blocks: 45.177.72.0/23 maxlen: 24
45.177.74.0/24 maxlen: 24
2803:ce60::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545717 (0x853b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a03159183524bc5f2ca01a2d5b8e5b12f2050168
Validity
Not Before: Mar 24 14:30:09 2021 GMT
Not After : Mar 24 14:30:09 2026 GMT
Subject: CN=23bc3e0399f9f83e8d5d613f99db72f8e6328a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:d6:c3:2c:4b:06:c4:93:01:e3:b0:58:73:
aa:04:86:08:17:ec:d7:a9:84:91:05:a8:0e:23:c4:
8f:95:e4:9a:1d:09:cc:f2:aa:f6:70:95:b7:f5:76:
5c:d6:b6:64:68:aa:ee:e7:eb:09:ff:80:3c:4f:1a:
37:b3:78:07:04:d2:e1:05:d3:41:03:b8:98:cb:75:
3f:2a:f1:25:8a:05:d4:05:fe:31:8b:0d:f8:7b:cf:
b9:d2:71:97:ff:84:ef:9f:51:e5:1e:b3:f6:06:79:
84:23:bb:26:38:96:62:dd:2f:e0:fa:ed:ca:9c:83:
28:d5:a8:ec:aa:80:6d:ba:0b:9d:10:eb:d4:22:09:
24:de:ff:2c:4a:7d:ea:ef:a3:81:f3:87:03:90:45:
68:13:f5:d5:0d:02:17:32:20:63:78:dc:e4:6a:3c:
7e:e8:6b:ea:44:5d:32:16:fa:27:a6:0a:f0:6b:2b:
93:57:e7:85:1b:bd:88:91:cb:23:6a:13:92:e1:5f:
8e:76:e1:78:82:14:6e:2a:5c:6b:48:07:4f:0c:d2:
a5:01:44:32:10:b1:bd:4e:41:c7:ca:a1:c4:3a:00:
9a:b0:c3:a7:13:0b:36:70:34:53:d1:62:fa:5f:64:
d8:04:5d:ce:da:60:e2:99:c4:f4:de:6e:8e:a6:b6:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:C5:0F:3E:B8:99:84:E4:8E:A8:0F:68:90:D1:F0:BD:67:16:90
X509v3 Authority Key Identifier:
keyid:A6:5C:A5:89:67:01:91:98:3B:C3:DE:04:3C:E2:93:DE:71:B6:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03159183524bc5f2ca01a2d5b8e5b12f2050168.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/23bc3e0399f9f83e8d5d613f99db72f8e6328a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/a03159183524bc5f2ca01a2d5b8e5b12f2050168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.72.0-45.177.74.255
IPv6:
2803:ce60::/32
Signature Algorithm: sha256WithRSAEncryption
cc:3b:f6:1c:67:76:43:a5:a0:4b:03:09:33:66:c0:1a:c9:71:
d1:82:d7:98:0f:eb:44:0b:1c:9b:21:4b:e0:c5:0d:82:ed:aa:
0c:26:46:bb:2a:8b:38:b3:6c:63:19:d7:03:82:c5:46:92:c2:
84:85:9e:17:48:b4:ee:7b:32:d6:62:5a:25:1d:d7:a5:2b:7e:
c2:31:61:ad:4e:84:8b:79:38:c4:bd:7c:c7:ef:e1:e6:fe:8f:
b7:bd:6d:f9:03:26:73:67:bf:21:23:c0:7f:cc:46:a0:15:cb:
50:ff:f2:69:4f:67:83:5a:ff:09:0b:7d:a1:30:97:c2:45:e3:
61:6d:90:ee:d6:95:3d:14:9b:d4:05:8f:6b:73:21:c4:84:c4:
69:ae:4b:f2:9f:cf:2f:8d:40:58:d8:b9:b3:cf:06:13:85:73:
02:90:7e:75:f3:41:fb:38:e6:b2:ab:81:f9:04:30:e0:ce:6c:
3d:bc:3e:26:90:37:c1:2b:66:77:b0:a0:c5:d9:86:93:40:43:
6c:41:a0:ea:d7:67:b7:d2:e3:8a:d8:22:bd:e8:7e:92:28:03:
cc:89:b0:58:d0:8d:96:93:af:14:79:51:2d:41:46:43:bc:3e:
dd:46:ed:56:83:f3:3d:9d:97:a8:48:01:d5:f8:95:81:ec:60:
6f:1d:b5:e3
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDCFO1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
MzE1OTE4MzUyNGJjNWYyY2EwMWEyZDViOGU1YjEyZjIwNTAxNjgwHhcNMjEwMzI0
MTQzMDA5WhcNMjYwMzI0MTQzMDA5WjAzMTEwLwYDVQQDEygyM2JjM2UwMzk5Zjlm
ODNlOGQ1ZDYxM2Y5OWRiNzJmOGU2MzI4YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgHXWwyxLBsSTAeOwWHOqBIYIF+zXqYSRBagOI8SPleSaHQnM
8qr2cJW39XZc1rZkaKru5+sJ/4A8Txo3s3gHBNLhBdNBA7iYy3U/KvEligXUBf4x
iw34e8+50nGX/4Tvn1HlHrP2BnmEI7smOJZi3S/g+u3KnIMo1ajsqoBtugudEOvU
Igkk3v8sSn3q76OB84cDkEVoE/XVDQIXMiBjeNzkajx+6GvqRF0yFvonpgrwayuT
V+eFG72IkcsjahOS4V+OduF4ghRuKlxrSAdPDNKlAUQyELG9TkHHyqHEOgCasMOn
Ews2cDRT0WL6X2TYBF3O2mDimcT03m6OpraPyQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFKDDxQ8+uJmE5I6oD2iQ0fC9ZxaQMB8GA1UdIwQYMBaAFKZcpYlnAZGYO8Pe
BDzik95xtte/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTAzMTU5
MTgzNTI0YmM1ZjJjYTAxYTJkNWI4ZTViMTJmMjA1MDE2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmNiMzcxYTUtYjZiNS00ODQyLWE2NTMtM2Y2YWQy
NmIzMGUxLzIzYmMzZTAzOTlmOWY4M2U4ZDVkNjEzZjk5ZGI3MmY4ZTYzMjhhMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yY2IzNzFhNS1iNmI1LTQ4NDItYTY1My0zZjZh
ZDI2YjMwZTEvYTAzMTU5MTgzNTI0YmM1ZjJjYTAxYTJkNWI4ZTViMTJmMjA1MDE2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQDLbFIAwQALbFKMA0EAgACMAcDBQAoA85gMA0GCSqGSIb3
DQEBCwUAA4IBAQDMO/YcZ3ZDpaBLAwkzZsAayXHRgteYD+tECxybIUvgxQ2C7aoM
Jka7Kos4s2xjGdcDgsVGksKEhZ4XSLTuezLWYlolHdelK37CMWGtToSLeTjEvXzH
7+Hm/o+3vW35AyZzZ78hI8B/zEagFctQ//JpT2eDWv8JC32hMJfCReNhbZDu1pU9
FJvUBY9rcyHEhMRprkvyn88vjUBY2LmzzwYThXMCkH5180H7OOayq4H5BDDgzmw9
vD4mkDfBK2Z3sKDF2YaTQENsQaDq12e30uOK2CK96H6SKAPMibBY0I2Wk68UeVEt
QUZDvD7dRu1Wg/M9nZeoSAHV+JWB7GBvHbXj
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:24 2025 by rpki-client