Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa
File: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (raw, json)
Hash identifier: 7y3IFM3NwuLfRDKqbCtjdZ5YY02akKWgfUvsoylFEKE=
Subject key identifier: 1D:55:A2:D2:6F:28:E6:9C:3C:3B:05:4F:64:8D:8E:F3:C7:DE:B4:D9
Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial: 14EA62F7BB96277488795ED3A6D4CF4DC902CF67
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa
Signing time: Tue 04 Feb 2025 20:04:58 +0000
ROA not before: Tue 04 Feb 2025 19:59:58 +0000
ROA not after: Tue 03 Feb 2026 20:04:58 +0000
asID: 266706
IP address blocks: 45.229.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ea:62:f7:bb:96:27:74:88:79:5e:d3:a6:d4:cf:4d:c9:02:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Validity
Not Before: Feb 4 19:59:58 2025 GMT
Not After : Feb 3 20:04:58 2026 GMT
Subject: CN=1D55A2D26F28E69C3C3B054F648D8EF3C7DEB4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:36:7a:35:85:c1:17:61:7d:78:65:2d:8e:
5c:57:ce:2b:61:d6:75:a8:98:5f:2d:e4:9b:93:5f:
44:72:0b:b3:82:63:97:2a:9a:69:a4:d6:4b:bc:77:
02:08:e9:b8:b6:4e:49:e2:7d:fb:f1:b5:9e:d8:45:
63:34:1d:4c:c0:da:3d:e8:d4:bb:78:04:32:e2:7c:
9e:38:0a:cd:3c:10:20:e4:d6:aa:34:56:d3:e8:22:
94:80:36:48:80:d9:15:18:91:75:86:6a:14:2a:3a:
af:cf:c6:7d:a6:c2:68:b0:40:15:74:6c:be:12:f6:
8d:3c:10:d7:49:74:b3:05:16:50:33:23:3f:31:4e:
95:7d:8d:6f:1d:f7:90:b5:40:56:69:17:94:1b:ed:
22:af:15:c4:b7:1a:d5:fb:63:d3:e2:6a:01:89:fa:
65:10:0c:30:18:f6:3b:21:62:9a:af:69:a0:e7:d9:
be:67:c2:60:45:8d:d5:9a:87:54:e4:64:79:50:fb:
fe:59:9b:78:32:50:93:bd:08:95:14:c0:dc:c5:b5:
4e:d5:23:6a:49:f8:81:0a:44:92:f8:e3:86:c6:77:
e4:1e:6b:d0:43:e8:7b:78:ae:b7:f8:49:3e:2d:ae:
e7:b4:7a:ab:62:65:fa:65:ef:ff:0a:be:a6:67:57:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:55:A2:D2:6F:28:E6:9C:3C:3B:05:4F:64:8D:8E:F3:C7:DE:B4:D9
X509v3 Authority Key Identifier:
keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:61:ad:d9:bf:79:fc:2d:95:5b:af:92:9f:a8:ba:b3:ea:fe:
31:60:5c:59:ba:93:59:79:9d:7d:30:e5:06:15:71:c2:f9:7c:
09:d3:88:90:67:e6:31:30:d7:96:fd:e1:0a:c0:c5:65:95:29:
bf:9b:d1:41:29:1b:ad:ab:ad:df:b0:dc:4f:1b:b9:8e:fb:06:
47:d6:59:dd:e7:cd:2e:e8:ba:c3:c3:4d:9d:76:c5:8c:44:a7:
e9:b8:05:03:33:95:a3:22:c2:5e:5c:36:b2:80:13:ca:0f:bc:
56:73:24:8c:15:cc:53:37:91:6d:f4:aa:6f:76:68:a8:3e:06:
2b:53:45:3d:62:f4:99:7f:1a:7e:f0:44:e4:69:29:a0:84:f1:
c8:f3:83:91:c9:1d:86:54:11:15:9a:79:ba:c8:4b:9b:da:44:
9a:2a:7b:6f:75:74:01:96:ee:00:06:63:c6:15:ed:f6:2e:56:
41:e7:99:a9:77:fe:50:bd:c9:d7:ed:73:06:50:62:69:81:27:
b6:c8:5c:b4:c2:eb:34:a9:1a:ac:c3:26:73:33:21:d5:c1:b2:
6f:9d:19:c5:8d:27:d0:31:3d:4b:a8:aa:d8:ca:ef:ff:c5:90:
30:82:4f:ae:8a:0e:06:1f:24:51:96:b0:d8:cb:3c:be:3d:9f:
c8:8c:b9:b2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFOpi97uWJ3SIeV7TptTPTckCz2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz
NEE4NTBEODAeFw0yNTAyMDQxOTU5NThaFw0yNjAyMDMyMDA0NThaMDMxMTAvBgNV
BAMTKDFENTVBMkQyNkYyOEU2OUMzQzNCMDU0RjY0OEQ4RUYzQzdERUI0RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tjZ6NYXBF2F9eGUtjlxXzith
1nWomF8t5JuTX0RyC7OCY5cqmmmk1ku8dwII6bi2TkniffvxtZ7YRWM0HUzA2j3o
1Lt4BDLifJ44Cs08ECDk1qo0VtPoIpSANkiA2RUYkXWGahQqOq/Pxn2mwmiwQBV0
bL4S9o08ENdJdLMFFlAzIz8xTpV9jW8d95C1QFZpF5Qb7SKvFcS3GtX7Y9PiagGJ
+mUQDDAY9jshYpqvaaDn2b5nwmBFjdWah1TkZHlQ+/5Zm3gyUJO9CJUUwNzFtU7V
I2pJ+IEKRJL444bGd+Qea9BD6Ht4rrf4ST4true0eqtiZfpl7/8KvqZnV2gRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHVWi0m8o5pw8OwVPZI2O88fetNkwHwYDVR0j
BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz
OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2
N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz
M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB
MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzM0MzUyZTMyMzIzOTJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzczMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeW8
MA0GCSqGSIb3DQEBCwUAA4IBAQCmYa3Zv3n8LZVbr5KfqLqz6v4xYFxZupNZeZ19
MOUGFXHC+XwJ04iQZ+YxMNeW/eEKwMVllSm/m9FBKRutq63fsNxPG7mO+wZH1lnd
580u6LrDw02ddsWMRKfpuAUDM5WjIsJeXDaygBPKD7xWcySMFcxTN5Ft9Kpvdmio
PgYrU0U9YvSZfxp+8ETkaSmghPHI84ORyR2GVBEVmnm6yEub2kSaKntvdXQBlu4A
BmPGFe32LlZB55mpd/5QvcnX7XMGUGJpgSe2yFy0wus0qRqswyZzMyHVwbJvnRnF
jSfQMT1LqKrYyu//xZAwgk+uig4GHyRRlrDYyzy+PZ/IjLmy
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:51 2025 by rpki-client