Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232312e302f32342d3234203d3e20323632313636.roa
File: 3136382e3233342e3232312e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier: /JEIXQJX/n0LXt/RKKq/fRb9gAHiGLKQZwaBPke2oSY=
Subject key identifier: D0:20:5B:CE:D8:2F:B4:CF:04:00:BD:9E:28:61:6D:BF:37:90:DE:24
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 620C77355795048BAB0DB6B0B18A70E69C03E64C
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232312e302f32342d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:42 +0000
ROA not before: Tue 04 Feb 2025 17:54:42 +0000
ROA not after: Tue 03 Feb 2026 17:59:42 +0000
asID: 262166
IP address blocks: 168.234.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0c:77:35:57:95:04:8b:ab:0d:b6:b0:b1:8a:70:e6:9c:03:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:42 2025 GMT
Not After : Feb 3 17:59:42 2026 GMT
Subject: CN=D0205BCED82FB4CF0400BD9E28616DBF3790DE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:a8:ad:58:b4:a5:da:49:2f:8c:e5:2e:63:
e5:1c:69:e4:28:3d:fc:0b:2e:6c:6c:14:df:f9:60:
54:ef:84:16:a2:ab:e9:32:b7:f2:88:88:11:5e:85:
c8:ed:31:40:1e:5f:7f:36:bd:c2:ae:4b:04:a9:3d:
86:91:f9:64:b1:c5:6a:97:35:62:05:e5:d0:dd:73:
1f:df:71:d2:a5:36:53:cc:07:ca:98:fe:b4:0c:64:
1a:2f:58:fc:31:b3:66:65:c9:2e:bb:2f:9d:52:c3:
3f:d2:3a:5e:62:50:8f:24:95:81:f3:e3:1b:44:ea:
71:f1:33:ac:21:09:40:f9:88:d4:ad:05:bc:88:91:
db:67:32:0b:26:04:cd:4f:2b:22:65:b2:c5:78:36:
d6:82:2c:9f:68:83:65:9f:09:5b:8e:9e:a5:a4:ca:
5c:f6:db:c5:ce:b2:fa:04:a4:68:27:d9:30:de:34:
b8:0e:9d:85:ed:f1:e2:24:c5:ff:60:2d:28:a5:6d:
41:1f:b6:a7:3e:2c:35:eb:80:a8:cf:35:dd:ef:9b:
05:e6:b9:64:67:6e:ee:bd:97:2b:82:78:39:34:14:
65:74:a1:95:c3:64:27:e4:f1:c2:d8:59:00:5e:95:
e6:45:91:d6:d9:39:23:6a:d9:1e:a0:a1:91:a8:5e:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:5B:CE:D8:2F:B4:CF:04:00:BD:9E:28:61:6D:BF:37:90:DE:24
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232312e302f32342d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:92:38:04:dd:d3:8d:f6:6b:6b:f8:8c:01:a9:8b:7a:bb:74:
47:2e:e1:5b:60:9c:6b:4a:c2:ff:55:50:ac:e2:1e:3a:5a:eb:
22:d0:3a:8a:a3:7b:53:7b:5d:67:72:6c:51:56:61:ce:e6:f2:
1c:00:6e:b0:f9:ae:07:4d:7d:d9:78:64:b5:53:c9:a5:5b:39:
cd:9f:b7:55:b4:06:ed:67:94:0e:d1:59:6d:45:a4:ad:97:e3:
2c:ca:14:fc:3b:2b:2b:5a:ad:8a:e7:68:11:47:ed:e0:49:cc:
5d:62:bb:bf:85:e9:17:85:ec:91:e9:f5:28:2c:18:ff:76:60:
84:1b:51:bb:0b:2a:30:45:82:c9:4c:11:b8:96:44:dc:8d:27:
77:b4:00:47:87:c2:fe:dc:f2:1d:4b:a6:a7:a8:5c:f2:7b:23:
9d:88:49:1c:d0:e7:f2:fd:79:db:24:dc:84:df:96:4c:50:2b:
f7:be:b6:fd:c3:27:d1:3a:0e:66:8f:7d:ea:cf:bb:c6:d0:a4:
98:3f:cf:ac:09:22:f2:b6:18:27:01:63:69:8e:91:aa:e5:18:
48:68:b4:1e:37:0a:a2:75:da:be:7a:7d:7d:35:71:cc:61:09:
99:c3:2d:fc:7f:36:2c:1c:ff:cc:aa:c3:4b:75:23:cf:07:93:
32:b3:1d:4e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUYgx3NVeVBIurDbawsYpw5pwD5kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNTAyMDQxNzU0NDJaFw0yNjAyMDMxNzU5NDJaMDMxMTAvBgNV
BAMTKEQwMjA1QkNFRDgyRkI0Q0YwNDAwQkQ5RTI4NjE2REJGMzc5MERFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmqitWLSl2kkvjOUuY+UcaeQo
PfwLLmxsFN/5YFTvhBaiq+kyt/KIiBFehcjtMUAeX382vcKuSwSpPYaR+WSxxWqX
NWIF5dDdcx/fcdKlNlPMB8qY/rQMZBovWPwxs2ZlyS67L51Swz/SOl5iUI8klYHz
4xtE6nHxM6whCUD5iNStBbyIkdtnMgsmBM1PKyJlssV4NtaCLJ9og2WfCVuOnqWk
ylz228XOsvoEpGgn2TDeNLgOnYXt8eIkxf9gLSilbUEftqc+LDXrgKjPNd3vmwXm
uWRnbu69lyuCeDk0FGV0oZXDZCfk8cLYWQBeleZFkdbZOSNq2R6goZGoXlgNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU0CBbztgvtM8EAL2eKGFtvzeQ3iQwHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMjMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6t0wDQYJKoZIhvcNAQELBQADggEBAImSOATd0432a2v4jAGpi3q7dEcu4VtgnGtK
wv9VUKziHjpa6yLQOoqje1N7XWdybFFWYc7m8hwAbrD5rgdNfdl4ZLVTyaVbOc2f
t1W0Bu1nlA7RWW1FpK2X4yzKFPw7KytarYrnaBFH7eBJzF1iu7+F6ReF7JHp9Sgs
GP92YIQbUbsLKjBFgslMEbiWRNyNJ3e0AEeHwv7c8h1LpqeoXPJ7I52ISRzQ5/L9
edsk3ITflkxQK/e+tv3DJ9E6DmaPferPu8bQpJg/z6wJIvK2GCcBY2mOkarlGEho
tB43CqJ12r56fX01ccxhCZnDLfx/Niwc/8yqw0t1I88HkzKzHU4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:29 2025 by rpki-client