Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa
File: 3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa (raw, json)
Hash identifier: O9R5bhX9vSlwNsXayv9xgRMZ5gyfiNflr2jnlOLB3vo=
Subject key identifier: 9D:7D:3D:B6:05:D1:4E:B8:30:2C:FE:87:47:CB:7D:0C:EB:19:76:C8
Certificate issuer: /CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
Certificate serial: 328D5B8F64710ACF695EADD9BDE740AF8EBAF493
Authority key identifier: 5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa
Signing time: Tue 04 Feb 2025 18:31:09 +0000
ROA not before: Tue 04 Feb 2025 18:26:09 +0000
ROA not after: Tue 03 Feb 2026 18:31:09 +0000
asID: 265636
IP address blocks: 170.245.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8d:5b:8f:64:71:0a:cf:69:5e:ad:d9:bd:e7:40:af:8e:ba:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
Validity
Not Before: Feb 4 18:26:09 2025 GMT
Not After : Feb 3 18:31:09 2026 GMT
Subject: CN=9D7D3DB605D14EB8302CFE8747CB7D0CEB1976C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:60:a4:5b:37:b5:7b:f3:73:84:fb:37:56:
da:32:11:c0:ea:f9:28:2a:24:87:cc:73:f7:42:b9:
a0:70:18:c6:9f:ba:1d:9b:a4:ae:c3:c7:65:c4:b8:
e1:07:8d:8d:e5:13:63:d5:21:cd:56:ce:00:14:6e:
f6:57:81:fb:2d:fb:a9:9b:10:02:11:4b:c5:1d:f2:
aa:d0:1b:0f:af:d7:de:af:4c:95:6c:86:4b:52:3b:
ce:f1:f2:df:2b:60:44:03:5f:15:f4:b2:0d:b9:5f:
3a:12:73:00:0d:c1:ba:14:e5:d8:66:98:4d:c0:6d:
47:3c:ce:fa:dc:08:bc:4b:8e:f4:15:d9:6b:6a:17:
33:e0:19:44:d2:d6:3c:23:0d:20:ec:21:78:61:e5:
a3:7e:57:f0:08:a6:a2:9a:90:d2:49:c8:97:a0:66:
89:15:c4:11:52:37:8f:49:0e:d3:2f:10:ad:83:2b:
bb:98:ba:76:c2:d9:f0:f8:1c:36:c9:49:11:51:bf:
c3:57:f5:7a:cd:e5:f8:b8:11:b9:ed:15:8f:5e:84:
e0:1a:7f:a2:3d:e3:08:ab:b7:02:70:b3:a4:64:56:
a6:2e:92:e7:de:ce:58:b0:66:ee:a1:2c:d8:68:ad:
e8:ea:d2:16:9d:27:8e:e7:b5:97:03:0e:7e:38:35:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:3D:B6:05:D1:4E:B8:30:2C:FE:87:47:CB:7D:0C:EB:19:76:C8
X509v3 Authority Key Identifier:
keyid:5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:87:69:3f:55:af:5b:c4:76:8c:ee:8a:14:23:e5:c1:85:ee:
68:5b:7c:f9:42:7f:1e:1a:04:27:9c:b8:29:24:6a:47:c8:6e:
8e:9b:0b:eb:32:b5:76:9b:1b:c0:b5:ea:6d:af:65:6d:a4:8b:
d8:d4:c0:a5:56:73:11:7c:c7:6b:4b:fb:ae:85:d6:41:8d:98:
de:ab:d8:b8:68:56:5e:dc:95:80:4a:9d:99:26:8c:8c:14:b2:
f8:b0:72:0c:33:80:5a:1d:05:eb:af:73:25:2a:04:ed:a4:f6:
c7:27:2e:c6:85:45:1b:a7:8c:6d:ae:0d:6f:74:45:27:0a:f6:
87:85:8e:e7:11:9e:38:d0:86:0f:3d:a6:cc:57:2a:5b:57:64:
70:26:77:5a:dc:f4:dc:5e:c1:07:c0:1d:f2:b4:2d:da:25:e4:
99:d3:0d:e2:fe:38:6f:dd:c5:5c:03:f4:86:01:0c:3a:dc:1e:
f3:0d:ad:a5:00:c1:38:41:5d:1c:b2:da:94:77:76:9b:61:0f:
73:5c:bf:e2:ac:c0:43:f3:68:7d:53:7b:a2:55:44:bc:d7:33:
69:90:4d:f8:1c:ea:ec:17:32:2d:38:d1:10:8e:05:a2:06:fc:
eb:10:46:1d:0f:5f:cb:de:07:39:78:94:a9:9f:c3:b2:a2:69:
b7:c1:8b:ab
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMo1bj2RxCs9pXq3ZvedAr4669JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY5MzE0ODEwMDU2QTJBNERDRTRENDA3MUU2Q0UyQ0Qw
M0E0RjY0MjAeFw0yNTAyMDQxODI2MDlaFw0yNjAyMDMxODMxMDlaMDMxMTAvBgNV
BAMTKDlEN0QzREI2MDVEMTRFQjgzMDJDRkU4NzQ3Q0I3RDBDRUIxOTc2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOGCkWze1e/NzhPs3VtoyEcDq
+SgqJIfMc/dCuaBwGMafuh2bpK7Dx2XEuOEHjY3lE2PVIc1WzgAUbvZXgfst+6mb
EAIRS8Ud8qrQGw+v196vTJVshktSO87x8t8rYEQDXxX0sg25XzoScwANwboU5dhm
mE3AbUc8zvrcCLxLjvQV2WtqFzPgGUTS1jwjDSDsIXhh5aN+V/AIpqKakNJJyJeg
ZokVxBFSN49JDtMvEK2DK7uYunbC2fD4HDbJSRFRv8NX9XrN5fi4EbntFY9ehOAa
f6I94wirtwJws6RkVqYukufezliwZu6hLNhorejq0hadJ47ntZcDDn44NfkHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUnX09tgXRTrgwLP6HR8t9DOsZdsgwHwYDVR0j
BBgwFoAUX5MUgQBWoqTc5NQHHmzizQOk9kIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODYyMDY3QzE1RUI5NUE3NzM5MDZCODlGRkYxNDA5MDU4
NTc2OTUzODk5MDIwOEYzNDJFQjY4OTVBMjlGQjMzLzAvNUY5MzE0ODEwMDU2QTJB
NERDRTRENDA3MUU2Q0UyQ0QwM0E0RjY0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjkzMTQ4MTAwNTZBMkE0RENF
NEQ0MDcxRTZDRTJDRDAzQTRGNjQyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg2MjA2N0MxNUVCOTVBNzczOTA2Qjg5RkZGMTQwOTA1ODU3Njk1Mzg5
OTAyMDhGMzQyRUI2ODk1QTI5RkIzMy8wLzMxMzczMDJlMzIzNDM1MmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjMzMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
9fAwDQYJKoZIhvcNAQELBQADggEBAFyHaT9Vr1vEdozuihQj5cGF7mhbfPlCfx4a
BCecuCkkakfIbo6bC+sytXabG8C16m2vZW2ki9jUwKVWcxF8x2tL+66F1kGNmN6r
2LhoVl7clYBKnZkmjIwUsviwcgwzgFodBeuvcyUqBO2k9scnLsaFRRunjG2uDW90
RScK9oeFjucRnjjQhg89psxXKltXZHAmd1rc9NxewQfAHfK0Ldol5JnTDeL+OG/d
xVwD9IYBDDrcHvMNraUAwThBXRyy2pR3dpthD3Ncv+KswEPzaH1Te6JVRLzXM2mQ
Tfgc6uwXMi040RCOBaIG/OsQRh0PX8veBzl4lKmfw7KiabfBi6s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:27:54 2025 by rpki-client