Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa
File: 3138362e34332e302e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier: OnK56rjvK7ienWIPenjx31ZPsWcggOMM51/VJTyL1TA=
Subject key identifier: 45:29:53:41:B7:A8:0B:4C:33:DD:41:6D:13:B7:0F:B7:4C:1F:10:23
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 27A8122E7E0B0F7F527D1FF4EA3D6F608F584603
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa
Signing time: Thu 09 Jan 2025 20:05:01 +0000
ROA not before: Thu 09 Jan 2025 20:00:01 +0000
ROA not after: Thu 08 Jan 2026 20:05:01 +0000
asID: 13489
IP address blocks: 186.43.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a8:12:2e:7e:0b:0f:7f:52:7d:1f:f4:ea:3d:6f:60:8f:58:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Jan 9 20:00:01 2025 GMT
Not After : Jan 8 20:05:01 2026 GMT
Subject: CN=45295341B7A80B4C33DD416D13B70FB74C1F1023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:19:da:a5:05:9e:48:c7:5e:e2:49:a0:38:
7f:01:eb:43:ba:45:69:88:e4:8b:f3:02:cf:68:8a:
7e:ac:dd:90:86:96:fd:86:55:08:75:db:68:2f:65:
0b:99:ca:fc:67:2e:58:c8:c0:f2:1c:1d:9e:c0:27:
05:51:22:bf:11:76:81:ab:0b:31:ff:44:a8:7e:51:
95:f0:5d:0e:a3:cd:12:11:40:f2:fd:b3:6f:74:c1:
3e:56:eb:a1:2d:47:9a:69:9c:93:10:6d:67:be:74:
93:f0:8d:58:07:d5:22:bf:4a:98:1b:54:e5:af:1b:
b8:c7:af:62:fa:18:3e:0d:30:c8:cc:95:7c:61:7f:
9b:a7:61:df:00:8f:ed:a5:b9:8e:6b:94:82:ce:c0:
f6:c3:98:ad:52:82:be:e7:75:0b:90:d3:f4:ff:0a:
78:cd:a4:0f:24:05:ef:b5:75:c4:d1:ce:79:80:40:
c7:b9:42:f2:72:c1:a4:3b:02:53:8a:0d:63:bc:cc:
3c:5b:27:2f:66:1a:ea:74:ef:ec:a5:aa:f0:51:21:
78:3f:ae:99:0a:3d:ce:36:d2:68:38:b1:90:0a:46:
4d:6b:00:89:b1:6a:ff:68:12:96:27:7d:45:a5:cf:
fd:73:69:4f:8b:73:35:b1:e5:c1:36:d2:f7:ac:ad:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:29:53:41:B7:A8:0B:4C:33:DD:41:6D:13:B7:0F:B7:4C:1F:10:23
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:50:fe:54:ee:bd:09:74:8b:14:76:00:34:c9:57:cb:68:cc:
0d:d8:24:f9:61:65:2e:f3:89:ed:f2:f1:e6:41:2b:55:9f:fb:
01:13:46:99:80:24:b0:ac:31:45:54:9d:0e:09:f0:0d:b8:ba:
1d:28:85:0b:e8:76:d8:f3:d9:1a:42:68:4a:28:91:0b:7d:e4:
bb:78:56:5f:52:aa:77:f8:1c:2f:7c:3d:28:c6:03:bb:4f:0e:
61:0a:51:60:5a:aa:98:30:44:8c:84:6a:69:a5:d0:a0:9f:c3:
bf:5d:57:7a:2e:23:73:d0:04:1f:a5:10:89:1f:fb:41:7d:18:
6a:fb:43:0a:f0:ec:2e:f4:ab:fa:af:e8:14:66:c3:0f:0d:b0:
5c:94:2c:a3:a0:89:68:61:30:fe:bc:79:17:01:cf:3e:f4:d4:
9c:1b:1f:ce:7b:7d:74:9c:ea:a3:6b:74:56:5e:76:79:10:02:
00:19:0b:be:bf:db:8d:55:b4:90:73:f7:0e:59:b4:67:31:39:
f1:50:5e:74:6e:41:a8:a7:12:99:55:91:65:52:a3:78:7d:22:
74:9c:25:13:0b:4b:7f:fb:8b:7b:bb:6a:16:5a:5b:39:72:89:
fa:b7:61:f1:b2:49:f4:24:6b:84:4d:e6:7e:15:f4:3c:ef:ab:
86:6a:24:a1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJ6gSLn4LD39SfR/06j1vYI9YRgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTAxMDkyMDAwMDFaFw0yNjAxMDgyMDA1MDFaMDMxMTAvBgNV
BAMTKDQ1Mjk1MzQxQjdBODBCNEMzM0RENDE2RDEzQjcwRkI3NEMxRjEwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoohnapQWeSMde4kmgOH8B60O6
RWmI5IvzAs9oin6s3ZCGlv2GVQh122gvZQuZyvxnLljIwPIcHZ7AJwVRIr8RdoGr
CzH/RKh+UZXwXQ6jzRIRQPL9s290wT5W66EtR5ppnJMQbWe+dJPwjVgH1SK/Spgb
VOWvG7jHr2L6GD4NMMjMlXxhf5unYd8Aj+2luY5rlILOwPbDmK1Sgr7ndQuQ0/T/
CnjNpA8kBe+1dcTRznmAQMe5QvJywaQ7AlOKDWO8zDxbJy9mGup07+ylqvBRIXg/
rpkKPc420mg4sZAKRk1rAImxav9oEpYnfUWlz/1zaU+LczWx5cE20vesrTn1AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQURSlTQbeoC0wz3UFtE7cPt0wfECMwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzgzNjJlMzQzMzJlMzAyZTMwMmYz
MTM3MmQzMTM3MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHuisAMA0GCSqG
SIb3DQEBCwUAA4IBAQBvUP5U7r0JdIsUdgA0yVfLaMwN2CT5YWUu84nt8vHmQStV
n/sBE0aZgCSwrDFFVJ0OCfANuLodKIUL6HbY89kaQmhKKJELfeS7eFZfUqp3+Bwv
fD0oxgO7Tw5hClFgWqqYMESMhGpppdCgn8O/XVd6LiNz0AQfpRCJH/tBfRhq+0MK
8Owu9Kv6r+gUZsMPDbBclCyjoIloYTD+vHkXAc8+9NScGx/Oe310nOqja3RWXnZ5
EAIAGQu+v9uNVbSQc/cOWbRnMTnxUF50bkGopxKZVZFlUqN4fSJ0nCUTC0t/+4t7
u2oWWls5con6t2Hxskn0JGuETeZ+FfQ876uGaiSh
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client