Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3137302e38302e3131362e302f32322d3234203d3e203532333237.roa
File: 3137302e38302e3131362e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier: ZIPIxHbPwceQToF6GLER9h1o/KmK32CdQpim4Eidfi0=
Subject key identifier: 29:D1:18:9E:A5:78:21:2D:88:45:AB:36:92:2B:FC:77:D7:F0:AA:22
Certificate issuer: /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial: 76459E7ADFD9F50D71868F6A9FC8E1659AEC8973
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3137302e38302e3131362e302f32322d3234203d3e203532333237.roa
Signing time: Tue 04 Feb 2025 18:49:08 +0000
ROA not before: Tue 04 Feb 2025 18:44:08 +0000
ROA not after: Tue 03 Feb 2026 18:49:08 +0000
asID: 52327
IP address blocks: 170.80.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:45:9e:7a:df:d9:f5:0d:71:86:8f:6a:9f:c8:e1:65:9a:ec:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Validity
Not Before: Feb 4 18:44:08 2025 GMT
Not After : Feb 3 18:49:08 2026 GMT
Subject: CN=29D1189EA578212D8845AB36922BFC77D7F0AA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:1b:59:4e:2f:db:93:f3:bf:87:b9:e1:09:
9a:22:41:dc:8b:7b:d5:8d:6b:05:1c:38:1b:47:01:
d7:a0:b7:55:97:5a:3b:45:0a:7a:60:9a:9f:7c:fb:
c9:88:95:33:c9:df:5b:78:a4:05:c0:2a:37:ef:d6:
bc:0d:d2:b9:60:9f:45:5b:32:b7:03:0b:16:72:ff:
58:f9:2e:ca:f1:92:e6:7e:32:c8:2b:68:09:5b:97:
b3:08:1e:c9:83:57:77:47:a2:df:c1:ff:3f:c3:4e:
03:e5:b1:0a:79:b3:09:93:09:b0:83:cb:3a:ae:3a:
51:5b:cf:b8:34:dd:30:7c:47:6f:7d:02:fa:dd:a1:
bd:90:68:8f:6c:fd:63:f2:48:f3:b2:52:df:6f:a7:
07:fc:6c:f4:3e:a8:64:88:73:02:77:f4:00:89:ed:
7c:8f:e5:99:75:8f:0d:f5:74:3d:31:b5:be:21:e3:
cf:17:20:c3:b9:ab:c8:47:b2:68:ae:8e:45:59:fe:
f4:34:d0:1c:8c:88:76:65:10:f8:46:c5:85:68:a4:
49:24:a5:5a:20:b0:b0:b4:2c:ce:c3:a7:30:22:02:
fb:1a:ef:10:27:47:22:e7:0d:80:6a:bb:6a:99:2a:
ba:f3:11:78:dd:59:04:06:dc:d1:29:b7:fa:4c:8d:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:18:9E:A5:78:21:2D:88:45:AB:36:92:2B:FC:77:D7:F0:AA:22
X509v3 Authority Key Identifier:
keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3137302e38302e3131362e302f32322d3234203d3e203532333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.116.0/22
Signature Algorithm: sha256WithRSAEncryption
67:3c:c2:c6:74:9f:3e:58:8e:30:8c:de:36:6f:13:e2:d8:89:
4f:5a:ae:0f:af:bb:b6:39:f3:b6:d4:71:a2:c2:bd:ac:7e:a3:
c2:0b:11:14:ed:ee:be:39:3d:fb:7a:d8:5b:ed:b7:aa:57:35:
03:ba:ba:9d:10:20:f2:a3:fe:79:ea:54:1a:3b:f0:50:d5:61:
6d:ce:32:aa:69:91:be:0a:80:61:36:32:b0:a5:f1:4f:e4:34:
81:d2:db:d6:34:f3:ff:2c:c0:f3:d8:d2:bd:92:eb:77:2b:44:
7e:d4:5b:2d:38:5d:5c:b4:fd:98:0e:5e:7d:b6:5d:05:9c:68:
85:a7:0c:ad:b4:0b:de:4c:43:8f:20:78:bb:66:a8:86:2e:d7:
8a:cc:14:a5:b3:13:0d:bf:c2:9f:9d:d9:88:98:d5:0f:f6:11:
30:9a:68:af:7c:9a:5c:2e:50:a9:c7:2f:1c:fc:78:7d:89:85:
02:c0:3b:96:ad:05:56:5d:97:cf:df:de:3e:70:2d:4b:35:4c:
a4:04:89:69:1a:ee:24:a8:04:ad:0b:51:8a:a9:4d:0b:ed:b9:
4d:86:1f:64:75:a4:a1:52:6c:0f:6f:25:cb:f1:64:c1:be:42:
ec:9f:92:04:d4:3a:55:04:59:c3:e6:81:e5:ca:57:f0:ae:79:
f3:81:e0:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdkWeet/Z9Q1xho9qn8jhZZrsiXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwRDQ2MDFBOEYzQjNGNkNDODJCNkQ4OUZCRkU3OEYy
OEQwRERDNTAeFw0yNTAyMDQxODQ0MDhaFw0yNjAyMDMxODQ5MDhaMDMxMTAvBgNV
BAMTKDI5RDExODlFQTU3ODIxMkQ4ODQ1QUIzNjkyMkJGQzc3RDdGMEFBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKpBtZTi/bk/O/h7nhCZoiQdyL
e9WNawUcOBtHAdegt1WXWjtFCnpgmp98+8mIlTPJ31t4pAXAKjfv1rwN0rlgn0Vb
MrcDCxZy/1j5LsrxkuZ+MsgraAlbl7MIHsmDV3dHot/B/z/DTgPlsQp5swmTCbCD
yzquOlFbz7g03TB8R299Avrdob2QaI9s/WPySPOyUt9vpwf8bPQ+qGSIcwJ39ACJ
7XyP5Zl1jw31dD0xtb4h488XIMO5q8hHsmiujkVZ/vQ00ByMiHZlEPhGxYVopEkk
pVogsLC0LM7DpzAiAvsa7xAnRyLnDYBqu2qZKrrzEXjdWQQG3NEpt/pMjbpdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKdEYnqV4IS2IRas2kiv8d9fwqiIwHwYDVR0j
BBgwFoAUCg1GAajzs/bMgrbYn7/njyjQ3cUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zN0NGRjk0M0YzRDBGQjEzODlDOTNBOURBNzU3RERBREYz
Q0IzMzc5MDdGMDVDNzkyQ0YwNDVFREIzMERFMjBGLzAvMEEwRDQ2MDFBOEYzQjNG
NkNDODJCNkQ4OUZCRkU3OEYyOEQwRERDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTBENDYwMUE4RjNCM0Y2Q0M4
MkI2RDg5RkJGRTc4RjI4RDBEREM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzdDRkY5NDNGM0QwRkIxMzg5QzkzQTlEQTc1N0REQURGM0NCMzM3OTA3
RjA1Qzc5MkNGMDQ1RURCMzBERTIwRi8wLzMxMzczMDJlMzgzMDJlMzEzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpQdDAN
BgkqhkiG9w0BAQsFAAOCAQEAZzzCxnSfPliOMIzeNm8T4tiJT1quD6+7tjnzttRx
osK9rH6jwgsRFO3uvjk9+3rYW+23qlc1A7q6nRAg8qP+eepUGjvwUNVhbc4yqmmR
vgqAYTYysKXxT+Q0gdLb1jTz/yzA89jSvZLrdytEftRbLThdXLT9mA5efbZdBZxo
hacMrbQL3kxDjyB4u2aohi7XiswUpbMTDb/Cn53ZiJjVD/YRMJpor3yaXC5Qqccv
HPx4fYmFAsA7lq0FVl2Xz9/ePnAtSzVMpASJaRruJKgErQtRiqlNC+25TYYfZHWk
oVJsD28ly/Fkwb5C7J+SBNQ6VQRZw+aB5cpX8K5584HgNg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:29 2025 by rpki-client