Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
File: 34352e36352e3134382e302f32332d3233203d3e20323635373135.roa (raw, json)
Hash identifier: 2tPJtYpcVfkbJHYRpDWibdnzqOXugLG9c5+HxzJzlbo=
Subject key identifier: C1:C2:69:82:B9:43:55:4F:2E:40:F9:7C:34:D1:82:64:E5:B9:7B:DF
Certificate issuer: /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial: 6EC3582DB5343C6405CD63A279CFBAABEBC0A1FF
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
Signing time: Tue 04 Feb 2025 18:44:53 +0000
ROA not before: Tue 04 Feb 2025 18:39:53 +0000
ROA not after: Tue 03 Feb 2026 18:44:53 +0000
asID: 265715
IP address blocks: 45.65.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c3:58:2d:b5:34:3c:64:05:cd:63:a2:79:cf:ba:ab:eb:c0:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Validity
Not Before: Feb 4 18:39:53 2025 GMT
Not After : Feb 3 18:44:53 2026 GMT
Subject: CN=C1C26982B943554F2E40F97C34D18264E5B97BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:c0:db:b5:71:c0:d6:38:44:9d:43:47:97:
49:4f:31:56:dd:f8:2a:36:50:bd:99:33:2a:20:53:
64:a2:17:4f:9e:c5:93:4f:28:58:97:a0:b0:58:53:
d7:03:dd:27:c8:71:fb:16:46:a4:08:b6:8b:dc:71:
65:ea:d3:c9:55:8b:2e:ab:48:40:72:f4:b0:23:3e:
6a:9f:54:f1:e4:66:7c:cd:df:04:e6:a6:39:7f:fe:
d4:40:49:9e:3f:fd:3f:4d:e8:09:a3:38:11:c7:93:
e4:84:cf:a9:f4:6f:13:81:c0:a8:4e:6a:4f:33:73:
c0:86:c9:13:34:b3:1f:70:a7:50:ee:c4:97:4f:6d:
50:df:7c:87:c4:b3:45:40:24:44:2f:40:b9:a4:a8:
5f:be:78:7c:13:5b:96:42:3e:3f:54:fc:4b:01:ba:
c7:1c:a2:24:c4:f3:3a:98:b9:c9:d2:92:46:0c:25:
ea:27:b3:0a:5b:ba:d2:50:60:e8:f3:07:f1:6b:c8:
14:cd:d5:05:a4:d0:19:1b:f0:fd:3a:50:92:2b:ed:
f1:a9:5c:dc:63:89:44:9e:fa:b7:cd:33:db:6d:4a:
98:89:f3:fc:5d:93:7e:35:62:82:be:40:5c:18:d7:
40:9e:09:f1:b8:fb:5f:5e:fd:04:2c:ed:41:8b:ff:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:69:82:B9:43:55:4F:2E:40:F9:7C:34:D1:82:64:E5:B9:7B:DF
X509v3 Authority Key Identifier:
keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.148.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:33:1f:08:5d:f7:0f:88:5b:d7:3f:dd:3f:ab:83:f1:b6:ba:
c7:2a:b4:a8:a1:8f:c9:11:07:5d:60:ae:e1:80:36:40:ef:e4:
e1:ec:84:50:6f:4c:9a:49:38:8c:b8:42:1f:4e:78:b5:ea:4c:
cc:43:2a:9b:47:79:57:bc:7c:d5:89:44:95:cc:67:17:dd:dc:
4f:a1:5c:aa:6d:cf:31:17:3b:fc:81:ff:b0:73:22:6d:d2:70:
eb:bc:db:5b:98:0b:db:57:51:47:69:9f:8a:c3:38:d5:7f:1c:
d6:1e:95:3d:c3:b6:62:dc:5b:ef:b5:f2:d2:87:95:01:66:ca:
f8:97:f9:b1:1e:47:2b:8b:0e:47:13:b7:d2:9a:98:4b:f5:ad:
02:be:0e:b7:61:d2:23:a0:ca:ee:28:81:07:6f:2b:f1:23:a2:
59:06:17:6f:46:6f:47:fb:f7:ba:08:0d:9d:12:e7:f0:b0:e3:
ee:f7:99:40:3e:79:72:8c:13:5b:c5:1f:1b:a9:e7:53:3d:cb:
86:9c:89:ec:d6:f8:33:f3:d2:5f:50:8f:2a:d4:05:34:e7:fc:
29:84:41:a5:35:a5:38:b4:18:ef:64:21:e6:7e:49:5a:03:4e:
39:36:0b:2b:e8:61:8e:74:08:a7:a9:4a:b9:a0:b6:94:df:5c:
b7:93:2d:50
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbsNYLbU0PGQFzWOiec+6q+vAof8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk5OEIxMjBCM0U3M0UxQTgzMzE5RjM1MzMyOUMzQUJE
MEUxRTY3QzAeFw0yNTAyMDQxODM5NTNaFw0yNjAyMDMxODQ0NTNaMDMxMTAvBgNV
BAMTKEMxQzI2OTgyQjk0MzU1NEYyRTQwRjk3QzM0RDE4MjY0RTVCOTdCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYT8DbtXHA1jhEnUNHl0lPMVbd
+Co2UL2ZMyogU2SiF0+exZNPKFiXoLBYU9cD3SfIcfsWRqQItovccWXq08lViy6r
SEBy9LAjPmqfVPHkZnzN3wTmpjl//tRASZ4//T9N6AmjOBHHk+SEz6n0bxOBwKhO
ak8zc8CGyRM0sx9wp1DuxJdPbVDffIfEs0VAJEQvQLmkqF++eHwTW5ZCPj9U/EsB
usccoiTE8zqYucnSkkYMJeonswpbutJQYOjzB/FryBTN1QWk0Bkb8P06UJIr7fGp
XNxjiUSe+rfNM9ttSpiJ8/xdk341YoK+QFwY10CeCfG4+19e/QQs7UGL/2GvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwcJpgrlDVU8uQPl8NNGCZOW5e98wHwYDVR0j
BBgwFoAUWZixILPnPhqDMZ81MynDq9Dh5nwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDE3MUZGRUZGRDExOUQzNjQwREFDNzY5REIyREUzQkU3
MzA4RTc0QTJFNTUxQkU4OTE3QTVBOEQyNDFCMDMxLzAvNTk5OEIxMjBCM0U3M0Ux
QTgzMzE5RjM1MzMyOUMzQUJEMEUxRTY3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTk4QjEyMEIzRTczRTFBODMz
MTlGMzUzMzI5QzNBQkQwRTFFNjdDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQxNzFGRkVGRkQxMTlEMzY0MERBQzc2OURCMkRFM0JFNzMwOEU3NEEy
RTU1MUJFODkxN0E1QThEMjQxQjAzMS8wLzM0MzUyZTM2MzUyZTMxMzQzODJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNTM3MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1BlDAN
BgkqhkiG9w0BAQsFAAOCAQEASjMfCF33D4hb1z/dP6uD8ba6xyq0qKGPyREHXWCu
4YA2QO/k4eyEUG9Mmkk4jLhCH054tepMzEMqm0d5V7x81YlElcxnF93cT6Fcqm3P
MRc7/IH/sHMibdJw67zbW5gL21dRR2mfisM41X8c1h6VPcO2Ytxb77Xy0oeVAWbK
+Jf5sR5HK4sORxO30pqYS/WtAr4Ot2HSI6DK7iiBB28r8SOiWQYXb0ZvR/v3uggN
nRLn8LDj7veZQD55cowTW8UfG6nnUz3LhpyJ7Nb4M/PSX1CPKtQFNOf8KYRBpTWl
OLQY72Qh5n5JWgNOOTYLK+hhjnQIp6lKuaC2lN9ct5MtUA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:28 2025 by rpki-client