Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
File: 3133312e302e3136382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier: 7/gOEcyzdsityfyQt4PUhFRUGsSC9favnwoIBuJhgvQ=
Subject key identifier: 69:76:29:E2:E5:5E:9C:82:C1:64:07:36:5C:8A:D8:F5:A7:A8:A8:97
Certificate issuer: /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial: 2F1EB3C4B27D527BDE5FA4CD73B71AEB0C7D98B3
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 18:27:39 +0000
ROA not before: Tue 04 Feb 2025 18:22:39 +0000
ROA not after: Tue 03 Feb 2026 18:27:39 +0000
asID: 262191
IP address blocks: 131.0.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1e:b3:c4:b2:7d:52:7b:de:5f:a4:cd:73:b7:1a:eb:0c:7d:98:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Validity
Not Before: Feb 4 18:22:39 2025 GMT
Not After : Feb 3 18:27:39 2026 GMT
Subject: CN=697629E2E55E9C82C16407365C8AD8F5A7A8A897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:8e:28:c3:7d:ba:c2:60:a4:33:02:c0:9b:
fb:a3:1f:62:96:44:b6:c0:66:fb:61:4f:ab:90:2e:
f3:37:8c:e6:9c:98:f1:02:50:79:75:c3:ef:0d:af:
d1:7c:35:aa:ba:17:3f:f2:26:d8:e4:e7:3e:6b:be:
73:4a:b5:4c:2c:97:b2:aa:c9:e4:a7:1f:86:63:6e:
30:2b:47:be:fa:18:0b:23:78:81:93:3f:bc:95:d0:
4d:68:22:3c:bf:e5:02:48:d7:c7:3a:a0:c2:af:3a:
9a:59:dc:2d:da:15:88:f5:3e:66:66:31:a5:bb:10:
ee:47:76:4b:9f:77:24:53:68:17:af:69:1c:e9:8e:
08:fb:85:fa:5f:dc:3d:78:ac:eb:9e:cb:2d:e2:49:
b1:b0:94:b5:06:2f:87:d5:75:58:dd:1a:2f:99:b1:
87:0b:89:2b:8d:3d:9b:cf:52:b1:e2:6a:d6:3f:9f:
a8:65:2e:37:31:f5:8b:67:83:2e:7c:a2:56:ef:89:
80:b7:33:83:18:4b:52:5c:34:cc:df:13:0a:da:60:
35:67:86:f3:f6:07:ea:84:25:48:da:5b:1b:79:6f:
c9:24:e2:ec:5c:a1:4a:25:68:18:b4:a5:6a:f5:28:
09:ee:91:b9:3d:c6:2e:ae:b6:83:5b:63:1b:6c:2d:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:29:E2:E5:5E:9C:82:C1:64:07:36:5C:8A:D8:F5:A7:A8:A8:97
X509v3 Authority Key Identifier:
keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:92:b8:18:51:30:90:a1:a6:da:1b:d4:44:20:8a:fa:ff:77:
25:d0:a6:d4:f9:1b:ea:72:f5:5e:f0:bc:1b:1d:39:a4:5c:8c:
fc:51:c9:8c:57:81:3a:92:7e:f6:6e:32:31:6a:19:bf:83:77:
57:e4:3f:9a:50:48:0f:27:9c:15:fc:d3:50:a1:89:f6:07:4f:
06:74:20:e6:26:2a:d8:a7:7f:8e:43:15:92:86:be:70:7f:61:
85:a7:eb:76:82:f9:30:18:87:46:f9:e8:60:34:a9:14:44:0d:
1e:ec:ff:5f:52:11:db:8e:ff:28:86:4d:70:08:1d:0b:2d:e2:
ef:aa:01:e7:e9:cc:b2:2f:2a:43:e5:f8:12:5a:82:bc:9e:4f:
5d:c2:0a:3f:85:1c:36:3f:c2:bd:b4:e4:3e:f9:66:ff:0e:d5:
fc:c1:5a:32:0b:aa:6c:07:13:c7:ab:b9:2a:f8:61:a8:22:d6:
0f:22:16:42:79:8e:f5:c6:84:ef:7b:41:3b:56:f7:a5:cf:81:
20:24:d2:80:3f:e8:d4:c4:b5:7e:73:44:a6:6b:df:0a:9a:a7:
7c:50:0d:9e:8c:40:89:20:7c:c5:09:00:3b:30:49:0a:e2:30:
90:65:c4:fd:3a:2e:dd:32:c0:fa:89:69:76:18:d7:04:af:32:
10:f0:bd:b2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULx6zxLJ9UnveX6TNc7ca6wx9mLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIyOTg5OEI2RTdGQjdGMzA0OEVCRDRGOENEQjlGODg5
NEQyNTJBODAeFw0yNTAyMDQxODIyMzlaFw0yNjAyMDMxODI3MzlaMDMxMTAvBgNV
BAMTKDY5NzYyOUUyRTU1RTlDODJDMTY0MDczNjVDOEFEOEY1QTdBOEE4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJo4ow326wmCkMwLAm/ujH2KW
RLbAZvthT6uQLvM3jOacmPECUHl1w+8Nr9F8Naq6Fz/yJtjk5z5rvnNKtUwsl7Kq
yeSnH4ZjbjArR776GAsjeIGTP7yV0E1oIjy/5QJI18c6oMKvOppZ3C3aFYj1PmZm
MaW7EO5HdkufdyRTaBevaRzpjgj7hfpf3D14rOueyy3iSbGwlLUGL4fVdVjdGi+Z
sYcLiSuNPZvPUrHiatY/n6hlLjcx9Ytngy58olbviYC3M4MYS1JcNMzfEwraYDVn
hvP2B+qEJUjaWxt5b8kk4uxcoUolaBi0pWr1KAnukbk9xi6utoNbYxtsLYXpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaXYp4uVenILBZAc2XIrY9aeoqJcwHwYDVR0j
BBgwFoAU4imJi25/t/MEjr1PjNufiJTSUqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkJCQzQ4QzJBMEM1NTk3QzM0NTlFODZEQ0U4QzYyREM2
RkUxNzYwRTBDOTRFNDlDREEwMzFBODE3RjYyQjhCLzAvRTIyOTg5OEI2RTdGQjdG
MzA0OEVCRDRGOENEQjlGODg5NEQyNTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjI5ODk4QjZFN0ZCN0YzMDQ4
RUJENEY4Q0RCOUY4ODk0RDI1MkE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJCQkM0OEMyQTBDNTU5N0MzNDU5RTg2RENFOEM2MkRDNkZFMTc2MEUw
Qzk0RTQ5Q0RBMDMxQTgxN0Y2MkI4Qi8wLzMxMzMzMTJlMzAyZTMxMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoMAqDAN
BgkqhkiG9w0BAQsFAAOCAQEATZK4GFEwkKGm2hvURCCK+v93JdCm1Pkb6nL1XvC8
Gx05pFyM/FHJjFeBOpJ+9m4yMWoZv4N3V+Q/mlBIDyecFfzTUKGJ9gdPBnQg5iYq
2Kd/jkMVkoa+cH9hhafrdoL5MBiHRvnoYDSpFEQNHuz/X1IR247/KIZNcAgdCy3i
76oB5+nMsi8qQ+X4ElqCvJ5PXcIKP4UcNj/CvbTkPvlm/w7V/MFaMguqbAcTx6u5
KvhhqCLWDyIWQnmO9caE73tBO1b3pc+BICTSgD/o1MS1fnNEpmvfCpqnfFANnoxA
iSB8xQkAOzBJCuIwkGXE/Tou3TLA+olpdhjXBK8yEPC9sg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:30 2025 by rpki-client