Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa
File: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (raw, json)
Hash identifier: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=
Subject key identifier: 67:B5:D4:2C:F6:AC:52:74:BD:EA:B0:CB:B3:3D:F6:59:68:30:AC:8D
Certificate issuer: /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial: 2A47B3E3C30060FF18E01C218F2214935C3F0948
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa
Signing time: Tue 25 Feb 2025 22:35:00 +0000
ROA not before: Tue 25 Feb 2025 22:30:00 +0000
ROA not after: Tue 24 Feb 2026 22:35:00 +0000
asID: 265814
IP address blocks: 45.70.181.224/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:47:b3:e3:c3:00:60:ff:18:e0:1c:21:8f:22:14:93:5c:3f:09:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Validity
Not Before: Feb 25 22:30:00 2025 GMT
Not After : Feb 24 22:35:00 2026 GMT
Subject: CN=67B5D42CF6AC5274BDEAB0CBB33DF6596830AC8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:8d:73:fe:cd:a9:01:6d:17:a1:d9:23:92:
38:4b:44:70:c6:cb:b2:cd:54:f5:b1:76:db:96:11:
aa:6f:18:b4:66:fc:be:d6:76:0d:91:b6:f4:15:9c:
88:26:16:c3:81:3c:00:44:bf:e4:ba:e1:d9:8d:73:
c6:47:38:9e:fe:58:67:c8:f8:58:68:cc:cb:a0:fd:
76:9a:a9:46:09:ca:7a:67:2a:53:8b:59:da:ae:cf:
7f:b6:73:6b:e0:33:ac:40:d9:5e:b2:cb:dd:14:4e:
b4:fe:df:45:9a:25:e3:21:69:a7:7e:90:16:f5:8e:
32:7a:97:23:0b:65:d2:f9:78:c2:ba:bd:02:a8:3d:
4a:95:7a:84:1f:90:07:02:c5:72:88:c6:5b:42:c4:
8e:e8:4e:c2:bd:04:7f:83:41:06:a8:f0:b9:9b:e1:
48:ae:62:dd:59:f1:4b:53:09:d6:89:59:f4:4a:db:
03:73:39:12:ad:47:91:d5:e0:02:2d:70:15:37:40:
ac:1c:93:f8:95:46:41:9f:17:fd:5a:89:4b:d2:17:
0b:0e:af:91:34:0d:52:5f:88:62:e9:de:2e:de:2e:
98:b6:49:c7:e6:d1:b3:10:c1:15:8b:8e:50:53:f7:
fa:e9:24:6e:70:83:66:78:d7:15:a0:c7:5b:3b:a5:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B5:D4:2C:F6:AC:52:74:BD:EA:B0:CB:B3:3D:F6:59:68:30:AC:8D
X509v3 Authority Key Identifier:
keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.181.224/27
Signature Algorithm: sha256WithRSAEncryption
cc:a9:7c:16:c2:d4:f1:3d:42:22:41:9a:b3:32:80:60:0b:11:
63:05:2b:dc:d0:3a:e4:eb:10:40:83:74:2d:f8:f6:1c:2d:f1:
e3:e6:d7:10:bc:b6:21:95:6c:ef:1d:15:1d:37:ec:c2:07:b1:
e3:94:25:e5:f2:98:66:03:7d:81:1e:73:28:7a:2a:54:60:d1:
6b:33:5a:fb:e9:6f:9d:e9:59:98:55:de:a1:82:d2:dc:3b:2c:
95:33:ac:f7:c5:9e:3b:90:5a:7c:15:8a:e0:53:39:3d:61:b6:
d8:c1:4d:b3:dd:75:d2:bf:1f:30:12:9d:c2:6e:2c:ce:60:0b:
c3:3e:bb:bb:1c:cb:99:b2:e9:2c:2b:ec:81:ab:c4:83:a3:ed:
ab:4e:b5:ba:51:94:bc:4e:6d:e6:c3:a8:32:ee:dd:ae:8b:30:
8c:52:ab:25:ed:c6:b0:68:67:b5:d1:d7:a5:01:4a:05:09:8c:
a0:9d:52:37:55:a7:a8:d8:90:40:dd:ab:38:32:a0:b9:22:d9:
96:16:ce:a1:c3:d2:a9:de:fc:71:78:5f:59:ca:93:a8:f8:b4:
da:bd:15:c3:7b:ad:92:eb:2b:e0:bf:d4:72:b9:88:68:5f:a2:
3e:b1:a8:69:cf:a5:c3:a5:10:61:e8:19:eb:d5:ec:45:03:3b:
0c:be:8e:e5
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKkez48MAYP8Y4BwhjyIUk1w/CUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlEM0UwREJDNEMzRUIwRUU3Q0E1NjRGMEY5MUEwMzhB
MUQ1ODc3QzAeFw0yNTAyMjUyMjMwMDBaFw0yNjAyMjQyMjM1MDBaMDMxMTAvBgNV
BAMTKDY3QjVENDJDRjZBQzUyNzRCREVBQjBDQkIzM0RGNjU5NjgzMEFDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2041z/s2pAW0XodkjkjhLRHDG
y7LNVPWxdtuWEapvGLRm/L7Wdg2RtvQVnIgmFsOBPABEv+S64dmNc8ZHOJ7+WGfI
+FhozMug/XaaqUYJynpnKlOLWdquz3+2c2vgM6xA2V6yy90UTrT+30WaJeMhaad+
kBb1jjJ6lyMLZdL5eMK6vQKoPUqVeoQfkAcCxXKIxltCxI7oTsK9BH+DQQao8Lmb
4UiuYt1Z8UtTCdaJWfRK2wNzORKtR5HV4AItcBU3QKwck/iVRkGfF/1aiUvSFwsO
r5E0DVJfiGLp3i7eLpi2Scfm0bMQwRWLjlBT9/rpJG5wg2Z41xWgx1s7pUNJAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUZ7XULPasUnS96rDLsz32WWgwrI0wHwYDVR0j
BBgwFoAU2dPg28TD6w7nylZPD5GgOKHVh3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjYwQUFGMTMyODVCNzQwM0Q0M0JFMTQ0NjM3OEI2MDIz
OUEyNDdGQzEzNTBBMjdFMzc0NjQzNkI0NTMwNzU2LzAvRDlEM0UwREJDNEMzRUIw
RUU3Q0E1NjRGMEY5MUEwMzhBMUQ1ODc3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOUQzRTBEQkM0QzNFQjBFRTdD
QTU2NEYwRjkxQTAzOEExRDU4NzdDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUY2MEFBRjEzMjg1Qjc0MDNENDNCRTE0NDYzNzhCNjAyMzlBMjQ3RkMx
MzUwQTI3RTM3NDY0MzZCNDUzMDc1Ni8wLzM0MzUyZTM3MzAyZTMxMzgzMTJlMzIz
MjM0MmYzMjM3MmQzMjM3MjAzZDNlMjAzMjM2MzUzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQUt
RrXgMA0GCSqGSIb3DQEBCwUAA4IBAQDMqXwWwtTxPUIiQZqzMoBgCxFjBSvc0Drk
6xBAg3Qt+PYcLfHj5tcQvLYhlWzvHRUdN+zCB7HjlCXl8phmA32BHnMoeipUYNFr
M1r76W+d6VmYVd6hgtLcOyyVM6z3xZ47kFp8FYrgUzk9YbbYwU2z3XXSvx8wEp3C
bizOYAvDPru7HMuZsuksK+yBq8SDo+2rTrW6UZS8Tm3mw6gy7t2uizCMUqsl7caw
aGe10delAUoFCYygnVI3Vaeo2JBA3as4MqC5ItmWFs6hw9Kp3vxxeF9ZypOo+LTa
vRXDe62S6yvgv9RyuYhoX6I+sahpz6XDpRBh6Bnr1exFAzsMvo7l
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:42 2025 by rpki-client