Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3137302e37392e3235322e302f32322d3234203d3e20323633383334.roa
File: 3137302e37392e3235322e302f32322d3234203d3e20323633383334.roa (raw, json)
Hash identifier: e0RGBeQl97iTBHKqehlHuqRzUsIOoBgHbD3szlPuYZM=
Subject key identifier: A1:E6:5B:9C:21:B3:D0:DA:8D:DA:74:02:C0:52:62:BB:AC:53:C3:1A
Certificate issuer: /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial: 3D23E4FEA642DD5DC762BAEB6A8D7726ED1C6E6A
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3137302e37392e3235322e302f32322d3234203d3e20323633383334.roa
Signing time: Tue 04 Feb 2025 18:19:06 +0000
ROA not before: Tue 04 Feb 2025 18:14:06 +0000
ROA not after: Tue 03 Feb 2026 18:19:06 +0000
asID: 263834
IP address blocks: 170.79.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:23:e4:fe:a6:42:dd:5d:c7:62:ba:eb:6a:8d:77:26:ed:1c:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Validity
Not Before: Feb 4 18:14:06 2025 GMT
Not After : Feb 3 18:19:06 2026 GMT
Subject: CN=A1E65B9C21B3D0DA8DDA7402C05262BBAC53C31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:96:70:1e:54:e8:50:52:04:8d:fd:77:48:
8a:b2:56:15:a0:42:57:4c:71:9c:1e:b2:d1:c8:22:
6e:86:21:4d:2d:46:7f:cd:6e:36:44:56:c5:64:d7:
ac:7a:8b:5e:1d:56:2b:e2:52:1b:07:e5:e9:80:82:
a4:74:69:e3:7b:ac:a2:c7:2c:a2:03:cf:8d:c3:be:
10:64:94:f2:4b:51:c8:de:b2:8e:30:46:aa:fb:a2:
66:83:f4:20:31:64:64:df:9a:93:ca:a2:17:70:19:
61:27:1b:76:87:6e:98:3a:2c:1f:56:53:b7:de:70:
7b:14:21:b4:47:7b:df:ec:b1:87:76:ef:72:a0:9a:
18:98:82:2d:da:36:41:2e:32:94:3a:bf:37:71:0e:
bd:d0:5a:ba:73:cd:d5:eb:f5:86:c5:4d:2d:05:31:
16:5f:ac:eb:ae:f3:aa:72:de:cd:fd:2e:a4:c5:7e:
16:83:92:a4:d3:7c:ed:53:86:e3:e5:cb:1d:28:fa:
a3:c1:42:8f:fe:66:34:d5:65:39:e5:43:6d:ae:5b:
03:ca:ca:f9:3a:72:b6:5f:9a:f1:d4:60:a8:f4:18:
25:63:04:b7:9e:e1:1a:10:7c:4d:09:72:a3:90:14:
b1:f8:6b:d3:30:dc:d6:45:f1:77:87:0a:d8:af:a8:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:5B:9C:21:B3:D0:DA:8D:DA:74:02:C0:52:62:BB:AC:53:C3:1A
X509v3 Authority Key Identifier:
keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3137302e37392e3235322e302f32322d3234203d3e20323633383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.252.0/22
Signature Algorithm: sha256WithRSAEncryption
08:da:ac:dd:b0:c6:84:59:b7:7a:a7:cf:3e:e4:08:2c:97:d3:
0d:12:7e:25:4c:d6:3f:d5:30:a2:5e:7d:e2:ea:31:75:e2:d9:
02:e0:a7:bd:86:0d:10:31:60:02:03:46:4e:4a:58:55:91:8a:
9c:f1:36:df:8a:ae:45:db:d3:fd:66:89:56:f5:6d:ce:6e:7d:
9a:bc:a2:c5:2f:77:68:c9:ec:30:f6:19:7f:bd:eb:e0:9e:c0:
76:fc:f0:d6:ef:50:13:33:50:15:6e:62:77:82:3a:f4:96:e1:
e0:fd:f5:09:75:e3:5c:46:83:79:9e:22:ff:37:bb:3b:ee:f3:
e2:c6:03:e1:3d:d4:65:95:2f:48:97:16:5a:18:2b:f8:4f:18:
34:e8:11:cd:88:90:6c:1b:77:c8:91:8c:ad:54:2e:e1:90:03:
fc:7d:03:35:c1:20:36:83:d6:58:8f:82:ff:be:fc:92:9d:52:
64:57:0f:fd:a2:d6:d5:9b:75:f4:46:48:ef:63:ea:b8:b3:3c:
79:93:c0:66:f6:fc:ec:21:ae:a6:2a:ea:69:98:0e:f0:5e:06:
36:83:11:94:17:f5:3f:9f:e8:b6:c4:f6:d5:c9:11:92:95:b3:
c6:e0:0a:7f:e0:2c:d6:ac:85:1d:d3:21:07:a1:01:e9:fc:8e:
ea:e0:ee:67
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPSPk/qZC3V3HYrrrao13Ju0cbmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY5OUE0MDc3QTg3MTE0QTM1MzJGRDIyRTVDMEY3OEFE
MzAzMTJFNDAeFw0yNTAyMDQxODE0MDZaFw0yNjAyMDMxODE5MDZaMDMxMTAvBgNV
BAMTKEExRTY1QjlDMjFCM0QwREE4RERBNzQwMkMwNTI2MkJCQUM1M0MzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCJZwHlToUFIEjf13SIqyVhWg
QldMcZwestHIIm6GIU0tRn/NbjZEVsVk16x6i14dViviUhsH5emAgqR0aeN7rKLH
LKIDz43DvhBklPJLUcjeso4wRqr7omaD9CAxZGTfmpPKohdwGWEnG3aHbpg6LB9W
U7fecHsUIbRHe9/ssYd273KgmhiYgi3aNkEuMpQ6vzdxDr3QWrpzzdXr9YbFTS0F
MRZfrOuu86py3s39LqTFfhaDkqTTfO1ThuPlyx0o+qPBQo/+ZjTVZTnlQ22uWwPK
yvk6crZfmvHUYKj0GCVjBLee4RoQfE0JcqOQFLH4a9Mw3NZF8XeHCtivqI/xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoeZbnCGz0NqN2nQCwFJiu6xTwxowHwYDVR0j
BBgwFoAU5pmkB3qHEUo1Mv0i5cD3itMDEuQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjA4NTNFQUFBNjc2RjM3Qzg5QkU4ODQwRkQ0MUYwMkY1
RkUyM0ZDOEUzQjE4Qjg2MzVCQzA1ODI4MTRGNzdCLzAvRTY5OUE0MDc3QTg3MTE0
QTM1MzJGRDIyRTVDMEY3OEFEMzAzMTJFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjk5QTQwNzdBODcxMTRBMzUz
MkZEMjJFNUMwRjc4QUQzMDMxMkU0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYwODUzRUFBQTY3NkYzN0M4OUJFODg0MEZENDFGMDJGNUZFMjNGQzhF
M0IxOEI4NjM1QkMwNTgyODE0Rjc3Qi8wLzMxMzczMDJlMzczOTJlMzIzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqk/8
MA0GCSqGSIb3DQEBCwUAA4IBAQAI2qzdsMaEWbd6p88+5Agsl9MNEn4lTNY/1TCi
Xn3i6jF14tkC4Ke9hg0QMWACA0ZOSlhVkYqc8Tbfiq5F29P9ZolW9W3Obn2avKLF
L3doyeww9hl/vevgnsB2/PDW71ATM1AVbmJ3gjr0luHg/fUJdeNcRoN5niL/N7s7
7vPixgPhPdRllS9IlxZaGCv4Txg06BHNiJBsG3fIkYytVC7hkAP8fQM1wSA2g9ZY
j4L/vvySnVJkVw/9otbVm3X0RkjvY+q4szx5k8Bm9vzsIa6mKuppmA7wXgY2gxGU
F/U/n+i2xPbVyRGSlbPG4Ap/4CzWrIUd0yEHoQHp/I7q4O5n
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:49 2025 by rpki-client