Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
File: 3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa (raw, json)
Hash identifier: 1RWnmzsdW+oHiU3I1UYg1LEp/a32AkesfXvW3BOBiEI=
Subject key identifier: 28:7D:D4:0D:D6:5D:BC:BB:9C:76:6C:EC:A5:A0:C8:41:F2:72:59:36
Certificate issuer: /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial: 162D10A59C3EC384A1594E313E40B04B2D86CA7D
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
Signing time: Tue 04 Feb 2025 18:52:22 +0000
ROA not before: Tue 04 Feb 2025 18:47:22 +0000
ROA not after: Tue 03 Feb 2026 18:52:22 +0000
asID: 265750
IP address blocks: 170.150.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2d:10:a5:9c:3e:c3:84:a1:59:4e:31:3e:40:b0:4b:2d:86:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Validity
Not Before: Feb 4 18:47:22 2025 GMT
Not After : Feb 3 18:52:22 2026 GMT
Subject: CN=287DD40DD65DBCBB9C766CECA5A0C841F2725936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:6d:3f:62:c6:8e:08:3d:e7:43:20:54:09:
a9:e4:22:da:49:c3:81:1d:f4:77:a1:2c:cb:3e:fd:
2e:a1:6b:41:c0:61:cd:99:78:22:ab:fc:72:cd:4b:
94:89:c3:97:f9:cf:88:8e:f5:5b:b8:26:eb:2e:76:
8d:07:22:cf:2c:7c:f9:22:97:92:42:ee:45:d4:27:
75:f2:56:44:4c:3e:23:c5:17:dc:d0:55:46:3c:27:
a8:a0:9a:d6:c1:d5:ea:2f:78:34:3b:e7:9f:9c:a3:
56:16:77:5e:7c:ec:04:85:3e:d1:98:17:b5:a0:90:
eb:3c:fc:72:fe:39:64:6e:0e:81:74:7b:ea:b8:6d:
fc:ee:7f:5c:ac:8c:c1:8d:99:f8:6e:56:97:81:d9:
7c:f4:5b:03:5d:8d:23:5f:e3:a7:19:f8:18:94:4b:
b0:bf:b7:f7:90:80:e7:cc:13:a1:03:1f:60:28:dc:
7a:64:11:8a:7b:fb:a2:a1:e2:67:2e:f9:ae:49:56:
a5:0b:bb:86:59:bc:1f:5f:11:44:bd:02:b2:47:89:
7b:7d:dd:3b:21:60:b3:90:d9:e2:07:fd:4d:27:9e:
66:54:20:df:23:ae:dc:7f:99:94:ba:d8:97:8a:a5:
bc:86:58:a1:36:ee:04:17:4f:ab:c1:45:61:31:58:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:D4:0D:D6:5D:BC:BB:9C:76:6C:EC:A5:A0:C8:41:F2:72:59:36
X509v3 Authority Key Identifier:
keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:62:6f:3c:f9:76:3a:0b:f5:83:42:b7:6c:14:a9:b2:28:01:
8e:2e:40:63:6c:ca:f6:05:4b:37:fe:fb:63:26:58:19:fe:a4:
57:eb:47:00:b5:dd:74:9d:6f:94:0f:3d:71:c8:90:e6:f1:ff:
2b:9a:81:91:fd:c8:20:3a:82:76:2f:a3:9b:a6:3f:84:02:aa:
8a:7b:27:1f:35:c7:c5:d0:1e:c4:2e:02:43:9b:d8:ee:a1:2d:
f5:0b:3c:f8:50:42:3f:1e:9d:7a:08:b5:0d:a7:ae:58:5e:2d:
6e:c4:d2:47:d5:2f:34:89:f8:25:9c:14:2e:0a:a7:79:00:44:
ee:2e:2a:03:0a:19:e8:ac:d3:ae:cf:02:e8:dc:0e:65:49:f7:
ab:39:da:7f:f2:49:89:4f:6f:36:bb:6a:eb:ad:1a:6e:49:3d:
ac:51:cd:34:5d:e6:07:db:e8:b1:b7:0b:93:5e:76:d8:7e:27:
ab:4c:6e:ac:66:68:d6:b4:b9:6d:11:5f:a4:2f:5f:6f:82:0f:
be:bb:be:89:00:5b:83:d3:29:e0:cc:8d:ba:3d:be:8e:cc:4e:
48:ba:96:a3:81:4c:58:b2:e9:44:05:34:cb:3d:d5:73:2f:03:
19:a6:af:86:d7:e3:19:13:eb:ec:e4:ec:3b:0e:34:d7:5b:8d:
53:0f:25:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFi0QpZw+w4ShWU4xPkCwSy2Gyn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJENjNGNDBGNzgzRjdBQUM3RTAxMTUxOUZGQjBFNEY4
QkYwNURDMTAeFw0yNTAyMDQxODQ3MjJaFw0yNjAyMDMxODUyMjJaMDMxMTAvBgNV
BAMTKDI4N0RENDBERDY1REJDQkI5Qzc2NkNFQ0E1QTBDODQxRjI3MjU5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr1W0/YsaOCD3nQyBUCankItpJ
w4Ed9HehLMs+/S6ha0HAYc2ZeCKr/HLNS5SJw5f5z4iO9Vu4Jusudo0HIs8sfPki
l5JC7kXUJ3XyVkRMPiPFF9zQVUY8J6igmtbB1eoveDQ755+co1YWd1587ASFPtGY
F7WgkOs8/HL+OWRuDoF0e+q4bfzuf1ysjMGNmfhuVpeB2Xz0WwNdjSNf46cZ+BiU
S7C/t/eQgOfME6EDH2Ao3HpkEYp7+6Kh4mcu+a5JVqULu4ZZvB9fEUS9ArJHiXt9
3TshYLOQ2eIH/U0nnmZUIN8jrtx/mZS62JeKpbyGWKE27gQXT6vBRWExWIKtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKH3UDdZdvLucdmzspaDIQfJyWTYwHwYDVR0j
BBgwFoAU8tY/QPeD96rH4BFRn/sOT4vwXcEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjFEMzk2NjZCNEEwQzlFNzQxNzhDQ0Y0MTRGQzJERTM0
ODg0Q0Y1OTRBMTJBNzg4RjdEMjc5N0FEQ0MyNUFFLzAvRjJENjNGNDBGNzgzRjdB
QUM3RTAxMTUxOUZGQjBFNEY4QkYwNURDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMkQ2M0Y0MEY3ODNGN0FBQzdF
MDExNTE5RkZCMEU0RjhCRjA1REMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYxRDM5NjY2QjRBMEM5RTc0MTc4Q0NGNDE0RkMyREUzNDg4NENGNTk0
QTEyQTc4OEY3RDI3OTdBRENDMjVBRS8wLzMxMzczMDJlMzEzNTMwMmUzNjMwMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1MzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpY8
MA0GCSqGSIb3DQEBCwUAA4IBAQB9Ym88+XY6C/WDQrdsFKmyKAGOLkBjbMr2BUs3
/vtjJlgZ/qRX60cAtd10nW+UDz1xyJDm8f8rmoGR/cggOoJ2L6Obpj+EAqqKeycf
NcfF0B7ELgJDm9juoS31Czz4UEI/Hp16CLUNp65YXi1uxNJH1S80ifglnBQuCqd5
AETuLioDChnorNOuzwLo3A5lSferOdp/8kmJT282u2rrrRpuST2sUc00XeYH2+ix
twuTXnbYfierTG6sZmjWtLltEV+kL19vgg++u76JAFuD0yngzI26Pb6OzE5Iupaj
gUxYsulEBTTLPdVzLwMZpq+G1+MZE+vs5Ow7DjTXW41TDyW2
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:21 2025 by rpki-client