Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235312e302f32342d3234203d3e203532323537.roa
File: 3135372e3130302e3235312e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier: Gi7r2P4uaI3oa1P2EpkeXVc/CQOtPPdnO74fwZ96/Lo=
Subject key identifier: 48:CF:0B:2F:B5:C2:61:C9:06:CA:E9:50:65:71:E6:20:D7:1A:8B:7E
Certificate issuer: /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial: 036AE1A9D4D406E8019FDAF38852BCE522564260
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235312e302f32342d3234203d3e203532323537.roa
Signing time: Tue 04 Feb 2025 20:08:29 +0000
ROA not before: Tue 04 Feb 2025 20:03:29 +0000
ROA not after: Tue 03 Feb 2026 20:08:29 +0000
asID: 52257
IP address blocks: 157.100.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6a:e1:a9:d4:d4:06:e8:01:9f:da:f3:88:52:bc:e5:22:56:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Validity
Not Before: Feb 4 20:03:29 2025 GMT
Not After : Feb 3 20:08:29 2026 GMT
Subject: CN=48CF0B2FB5C261C906CAE9506571E620D71A8B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:36:22:4e:f2:ab:d1:35:75:f1:20:a3:2c:
bc:03:2c:a7:52:23:f1:46:6b:da:52:eb:41:4d:74:
d5:e2:3c:5e:88:53:5a:37:d2:54:25:a0:14:84:f1:
f9:0c:a2:d6:3a:bd:8b:71:e9:17:d4:dd:a0:91:d8:
b0:53:7a:e6:a1:43:e8:47:4e:30:35:7a:4d:a6:66:
9f:a6:3f:ee:10:9b:00:e5:fc:61:76:0e:ee:fc:ef:
a2:84:2b:c3:e9:92:72:34:98:11:f9:b8:02:04:ad:
79:4a:56:ab:af:3d:34:b3:46:81:47:82:1d:30:1a:
53:4f:8b:5b:51:c5:55:69:14:0e:84:c0:22:e2:34:
54:db:63:72:b7:62:0f:0a:95:e0:18:01:38:49:64:
e5:43:88:90:37:20:60:b2:7a:fd:03:87:2e:a0:9d:
77:f6:de:45:d1:63:81:03:dc:67:9f:cc:79:a8:90:
90:23:da:a4:a8:63:c2:58:c9:32:2b:13:ee:e0:eb:
f4:e3:6c:be:13:78:cd:05:9e:f9:34:2d:d2:ce:2a:
f3:5b:7f:42:a4:bd:23:c1:08:6c:d1:9d:ba:92:91:
8d:9e:56:15:c9:c0:64:ed:e8:2b:9d:17:08:28:74:
70:d4:83:2c:2f:17:15:78:6e:60:be:4b:f3:43:8a:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:0B:2F:B5:C2:61:C9:06:CA:E9:50:65:71:E6:20:D7:1A:8B:7E
X509v3 Authority Key Identifier:
keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235312e302f32342d3234203d3e203532323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bf:b0:e0:55:bb:ba:3c:27:36:25:b0:e2:96:d6:91:be:5b:
ef:1b:40:b3:5b:75:a2:4f:99:9b:dc:d2:85:44:16:a2:84:20:
3a:58:2e:70:6a:e3:87:f6:d6:4f:8a:ab:88:41:93:ea:1a:ad:
ac:cd:ee:dd:b9:ce:d0:da:0e:06:35:0a:6a:9d:ba:15:3d:d2:
37:a0:4f:bb:14:e4:1a:7c:53:a8:d8:9f:57:e9:c8:44:b6:3c:
5f:05:06:46:07:5b:49:15:e7:e5:bb:23:ce:e0:2d:86:63:7c:
da:42:9f:0d:0a:fb:48:30:c3:57:a7:42:dc:e4:96:1b:82:24:
9a:c0:d8:4c:59:4e:d6:5a:0e:64:d9:4e:f0:69:d0:bb:44:f4:
0c:c7:c1:98:93:19:6e:fb:8e:b1:36:49:17:39:1a:69:4f:2b:
31:89:bb:d6:ab:7c:da:2d:73:a5:f1:50:8b:55:e5:9d:fe:90:
30:89:2b:3d:0f:63:71:9c:b5:72:8d:54:5f:8d:ff:31:2b:65:
14:61:2b:7d:86:a5:55:f2:2e:d8:b4:94:af:6c:5a:54:c1:27:
a9:68:d8:c0:59:0b:e9:db:22:c9:78:ff:73:65:bf:5f:1d:d1:
7c:da:03:22:c1:c8:84:6a:7c:8e:6c:09:e1:77:bc:76:a0:a2:
e2:71:d0:5e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA2rhqdTUBugBn9rziFK85SJWQmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMjlaFw0yNjAyMDMyMDA4MjlaMDMxMTAvBgNV
BAMTKDQ4Q0YwQjJGQjVDMjYxQzkwNkNBRTk1MDY1NzFFNjIwRDcxQThCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5jYiTvKr0TV18SCjLLwDLKdS
I/FGa9pS60FNdNXiPF6IU1o30lQloBSE8fkMotY6vYtx6RfU3aCR2LBTeuahQ+hH
TjA1ek2mZp+mP+4QmwDl/GF2Du7876KEK8PpknI0mBH5uAIErXlKVquvPTSzRoFH
gh0wGlNPi1tRxVVpFA6EwCLiNFTbY3K3Yg8KleAYAThJZOVDiJA3IGCyev0Dhy6g
nXf23kXRY4ED3GefzHmokJAj2qSoY8JYyTIrE+7g6/TjbL4TeM0Fnvk0LdLOKvNb
f0KkvSPBCGzRnbqSkY2eVhXJwGTt6CudFwgodHDUgywvFxV4bmC+S/NDisVvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSM8LL7XCYckGyulQZXHmINcai34wHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzMjM1MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWT7
MA0GCSqGSIb3DQEBCwUAA4IBAQBLv7DgVbu6PCc2JbDiltaRvlvvG0CzW3WiT5mb
3NKFRBaihCA6WC5wauOH9tZPiquIQZPqGq2sze7duc7Q2g4GNQpqnboVPdI3oE+7
FOQafFOo2J9X6chEtjxfBQZGB1tJFefluyPO4C2GY3zaQp8NCvtIMMNXp0Lc5JYb
giSawNhMWU7WWg5k2U7wadC7RPQMx8GYkxlu+46xNkkXORppTysxibvWq3zaLXOl
8VCLVeWd/pAwiSs9D2NxnLVyjVRfjf8xK2UUYSt9hqVV8i7YtJSvbFpUwSepaNjA
WQvp2yLJeP9zZb9fHdF82gMiwciEanyObAnhd7x2oKLicdBe
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:14 2025 by rpki-client