Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3230382e302f32322d3234203d3e20323633373033.roa
File: 34352e3138362e3230382e302f32322d3234203d3e20323633373033.roa (raw, json)
Hash identifier: zJPx6vNEnlfE7O3rAPzpi8pl41LvGSs8qm0p4Gv1fBs=
Subject key identifier: DB:9C:0D:51:CA:A2:16:44:E8:DA:7A:81:DD:78:76:DA:57:FF:E0:81
Certificate issuer: /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial: 0235059EB34236354BE6FFD916D1903139B71247
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3230382e302f32322d3234203d3e20323633373033.roa
Signing time: Tue 04 Feb 2025 18:26:07 +0000
ROA not before: Tue 04 Feb 2025 18:21:07 +0000
ROA not after: Tue 03 Feb 2026 18:26:07 +0000
asID: 263703
IP address blocks: 45.186.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:35:05:9e:b3:42:36:35:4b:e6:ff:d9:16:d1:90:31:39:b7:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Validity
Not Before: Feb 4 18:21:07 2025 GMT
Not After : Feb 3 18:26:07 2026 GMT
Subject: CN=DB9C0D51CAA21644E8DA7A81DD7876DA57FFE081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:77:36:ed:44:fd:50:08:f3:06:87:a1:c1:
ef:72:94:04:37:30:7e:fd:e8:38:66:92:45:22:e9:
64:41:58:b0:81:b9:78:90:b6:aa:d9:24:7f:cf:a3:
37:8f:7e:90:7d:5e:0f:aa:8f:15:49:97:da:09:c2:
87:ad:5a:1b:81:8c:04:2d:3d:0a:69:e6:da:bc:de:
e5:2a:de:0a:c1:e0:b4:95:af:d7:a3:cd:38:e6:b8:
f8:1a:a6:31:f3:7b:d9:2a:9b:b5:d2:46:cc:69:ba:
ec:4e:8c:d0:68:44:73:b3:4c:3c:03:c5:70:73:46:
70:4e:a4:c9:d8:d1:53:13:89:fd:92:d1:98:cf:44:
45:11:e8:7f:7e:87:f8:8d:ce:10:0f:ef:a2:02:13:
be:cb:72:59:53:52:a8:a4:d9:19:0a:2c:b9:af:87:
4c:30:19:a2:64:1d:83:c8:44:2b:d6:0f:a1:88:ec:
ce:9a:94:7c:65:f2:df:6e:46:c9:8c:ff:49:6d:58:
9d:36:f4:75:c1:37:17:1e:d7:19:be:89:3d:87:77:
0b:00:27:d4:5d:88:27:85:79:d1:c0:ac:f3:e5:21:
0d:cd:2b:68:a8:2e:55:59:48:ee:52:28:36:11:bb:
d2:8a:5c:88:bd:e1:34:35:88:fd:3e:94:25:8d:64:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9C:0D:51:CA:A2:16:44:E8:DA:7A:81:DD:78:76:DA:57:FF:E0:81
X509v3 Authority Key Identifier:
keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3230382e302f32322d3234203d3e20323633373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:fe:d8:11:21:42:7a:a2:5c:a5:c4:87:55:d4:f8:0f:68:22:
25:da:8f:19:29:44:c5:28:13:92:32:a3:94:d0:f9:f2:c6:30:
14:a0:a9:fe:22:2c:51:8d:d2:e6:c4:bb:9a:60:ef:84:a6:49:
e0:7e:89:fc:65:ae:23:a7:f3:af:91:3e:63:13:9a:23:72:42:
a4:b7:7f:7b:64:70:85:4e:08:8f:e1:54:49:63:56:e6:c4:a7:
52:89:0c:f3:5e:50:64:c3:0c:dc:f2:b7:c8:65:7b:39:15:66:
79:a1:15:13:6a:af:b0:80:67:c0:a7:78:d4:e4:cf:68:f6:62:
dd:56:66:d5:2d:d2:e5:20:64:97:ae:51:df:c0:5c:1f:c1:7c:
45:97:3d:93:7f:35:b8:08:f3:9b:f7:f6:9b:62:be:fa:65:1e:
56:62:97:41:37:a2:2c:91:9f:ba:20:39:7d:84:46:89:f5:8c:
fc:3d:e9:ef:21:9a:8d:23:4e:7d:2d:59:e6:2e:0b:69:74:1b:
45:98:21:d2:68:72:f3:d3:29:f7:34:6a:fa:99:fa:96:61:c6:
9c:3d:42:0f:57:e5:be:30:b8:73:8d:64:10:63:89:04:60:00:
a1:34:19:26:02:2d:d1:d5:33:df:7f:23:95:87:0e:a1:6b:c0:
76:b0:54:8a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAjUFnrNCNjVL5v/ZFtGQMTm3EkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRGM0Q2QTkzRUQzOTIwMEI3QkUwRTdEQTI4NzdCRkVC
RDMwNDE4NDAeFw0yNTAyMDQxODIxMDdaFw0yNjAyMDMxODI2MDdaMDMxMTAvBgNV
BAMTKERCOUMwRDUxQ0FBMjE2NDRFOERBN0E4MURENzg3NkRBNTdGRkUwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSXc27UT9UAjzBoehwe9ylAQ3
MH796DhmkkUi6WRBWLCBuXiQtqrZJH/PozePfpB9Xg+qjxVJl9oJwoetWhuBjAQt
PQpp5tq83uUq3grB4LSVr9ejzTjmuPgapjHze9kqm7XSRsxpuuxOjNBoRHOzTDwD
xXBzRnBOpMnY0VMTif2S0ZjPREUR6H9+h/iNzhAP76ICE77LcllTUqik2RkKLLmv
h0wwGaJkHYPIRCvWD6GI7M6alHxl8t9uRsmM/0ltWJ029HXBNxce1xm+iT2HdwsA
J9RdiCeFedHArPPlIQ3NK2ioLlVZSO5SKDYRu9KKXIi94TQ1iP0+lCWNZH01AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU25wNUcqiFkTo2nqB3Xh22lf/4IEwHwYDVR0j
BBgwFoAUxPPWqT7TkgC3vg59ood7/r0wQYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjIxNDgxOEM1OUExMzAyOTQ5NUNFNzFCRjlFODM0Q0U0
NkIwM0UwNERCQkFFQjE0QzFDRDZDRDU2RTE5NjhFLzAvQzRGM0Q2QTkzRUQzOTIw
MEI3QkUwRTdEQTI4NzdCRkVCRDMwNDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEYzRDZBOTNFRDM5MjAwQjdC
RTBFN0RBMjg3N0JGRUJEMzA0MTg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIyMTQ4MThDNTlBMTMwMjk0OTVDRTcxQkY5RTgzNENFNDZCMDNFMDRE
QkJBRUIxNEMxQ0Q2Q0Q1NkUxOTY4RS8wLzM0MzUyZTMxMzgzNjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbrQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBL/tgRIUJ6olylxIdV1PgPaCIl2o8ZKUTFKBOS
MqOU0PnyxjAUoKn+IixRjdLmxLuaYO+Epkngfon8Za4jp/OvkT5jE5ojckKkt397
ZHCFTgiP4VRJY1bmxKdSiQzzXlBkwwzc8rfIZXs5FWZ5oRUTaq+wgGfAp3jU5M9o
9mLdVmbVLdLlIGSXrlHfwFwfwXxFlz2TfzW4CPOb9/abYr76ZR5WYpdBN6IskZ+6
IDl9hEaJ9Yz8PenvIZqNI059LVnmLgtpdBtFmCHSaHLz0yn3NGr6mfqWYcacPUIP
V+W+MLhzjWQQY4kEYAChNBkmAi3R1TPffyOVhw6ha8B2sFSK
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:20 2025 by rpki-client