Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa
File: 3134332e302e3234342e302f32322d3234203d3e203132313530.roa (raw, json)
Hash identifier: 8UvIw+lYmcAqrJvNClDvTRKJOBHCoJjp87J62mAJztc=
Subject key identifier: 68:79:68:33:B4:76:08:28:3B:83:51:9E:2F:A2:2F:C0:80:C1:B1:FA
Certificate issuer: /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial: 6245795F5F477D497D2C713F74E46E58793DCA55
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa
Signing time: Tue 04 Feb 2025 18:00:55 +0000
ROA not before: Tue 04 Feb 2025 17:55:55 +0000
ROA not after: Tue 03 Feb 2026 18:00:55 +0000
asID: 12150
IP address blocks: 143.0.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:45:79:5f:5f:47:7d:49:7d:2c:71:3f:74:e4:6e:58:79:3d:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Validity
Not Before: Feb 4 17:55:55 2025 GMT
Not After : Feb 3 18:00:55 2026 GMT
Subject: CN=68796833B47608283B83519E2FA22FC080C1B1FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:1c:96:2d:d9:36:f4:3e:19:8f:f2:ae:b7:
ab:1d:6c:e8:05:ea:94:57:31:90:e7:ad:c3:48:33:
80:76:2a:fe:6d:00:04:83:37:61:6e:4e:79:90:85:
c4:bf:c5:38:2d:96:06:ab:a0:76:c2:35:3c:90:06:
ca:9f:1c:22:9f:ae:f0:a3:dd:36:cc:bc:38:60:ff:
b0:05:83:1f:8b:61:bf:6e:60:b1:62:52:78:ff:9a:
e7:68:e4:1b:84:6f:90:c0:48:fb:e1:b9:e2:16:7c:
28:ce:40:32:64:b0:67:88:4c:1c:52:2f:aa:7a:45:
2e:78:a4:81:f5:f0:7f:75:b9:22:84:e0:41:9f:ff:
31:f2:49:67:fe:6b:76:91:7e:c2:48:0f:a7:ba:22:
35:57:5f:96:50:c7:73:76:6d:b0:b6:b2:40:cd:99:
5c:a2:e2:60:30:a2:5b:c4:ff:35:ba:bf:5d:7f:1b:
f9:54:f0:45:ed:89:81:a5:8d:0b:96:ea:bc:90:60:
61:0e:cf:99:da:ad:2a:f3:b2:3a:64:94:fc:f1:50:
25:66:b5:dd:28:50:ea:5c:42:24:22:20:95:73:39:
a9:27:21:b0:78:31:46:a8:8c:b3:fa:c5:4b:b9:5c:
20:9a:89:64:8d:df:4b:a1:bf:6e:fa:91:b4:83:bf:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:68:33:B4:76:08:28:3B:83:51:9E:2F:A2:2F:C0:80:C1:B1:FA
X509v3 Authority Key Identifier:
keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:5c:a7:a8:13:0b:52:67:5c:e6:a0:0e:45:22:bb:60:08:a4:
ac:36:3f:6a:6c:0e:cb:49:48:40:ec:9f:24:ef:c5:78:20:86:
2c:24:42:fa:b1:79:51:c3:d6:0c:3a:2e:f0:e7:24:37:a6:ab:
16:f8:2c:e5:97:22:91:02:8b:e1:e9:6c:c6:6f:36:9b:d9:1d:
be:bf:ad:85:2b:7f:dd:d8:f5:77:bf:67:b4:ce:17:22:2b:72:
e2:1f:20:b0:74:62:5a:bc:ba:dd:e1:f2:ec:39:f8:37:9d:33:
5a:2b:b6:9b:d8:d2:f4:16:35:e0:01:79:5d:68:0b:58:61:11:
e8:61:db:55:70:31:63:b2:f3:a9:65:b2:d3:9d:e0:4b:00:67:
6a:65:35:9d:c1:1e:cb:d6:e9:35:4e:d7:da:d7:ad:f5:fb:05:
e0:4a:3c:46:55:e0:0e:09:d2:03:ef:b1:db:d7:6e:ac:da:2c:
bb:3a:14:ab:a3:26:1c:9b:5b:7e:89:da:ef:94:46:d1:fc:4b:
e0:fd:4d:45:bc:f6:8c:ac:c8:c9:d6:50:0a:cf:0e:5e:6b:d9:
7c:88:d4:8c:c0:26:3e:d9:29:53:1a:9e:14:2a:d0:32:9d:38:
2a:bc:85:c7:f9:e0:e2:a9:8d:c9:7c:38:be:aa:47:d1:cd:d7:
54:32:36:bc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYkV5X19HfUl9LHE/dORuWHk9ylUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCRDdDN0Q3NEY0OUNFNkJFQzgwRDk1Qzk2MjEzREQw
REM1QzRCNzAeFw0yNTAyMDQxNzU1NTVaFw0yNjAyMDMxODAwNTVaMDMxMTAvBgNV
BAMTKDY4Nzk2ODMzQjQ3NjA4MjgzQjgzNTE5RTJGQTIyRkMwODBDMUIxRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGByWLdk29D4Zj/Kut6sdbOgF
6pRXMZDnrcNIM4B2Kv5tAASDN2FuTnmQhcS/xTgtlgaroHbCNTyQBsqfHCKfrvCj
3TbMvDhg/7AFgx+LYb9uYLFiUnj/mudo5BuEb5DASPvhueIWfCjOQDJksGeITBxS
L6p6RS54pIH18H91uSKE4EGf/zHySWf+a3aRfsJID6e6IjVXX5ZQx3N2bbC2skDN
mVyi4mAwolvE/zW6v11/G/lU8EXtiYGljQuW6ryQYGEOz5narSrzsjpklPzxUCVm
td0oUOpcQiQiIJVzOaknIbB4MUaojLP6xUu5XCCaiWSN30uhv276kbSDv7TxAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUaHloM7R2CCg7g1GeL6IvwIDBsfowHwYDVR0j
BBgwFoAUwr18fXT0nOa+yA2VyWIT3Q3FxLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RkZGMjJDMjc3QTEwNDQ0OEM5QkNGRjlGNzU5NUMxQkRC
RDgwREUwOTBEOUE0ODg5RUI3QjcwM0UxRjMxOTQ1LzAvQzJCRDdDN0Q3NEY0OUNF
NkJFQzgwRDk1Qzk2MjEzREQwREM1QzRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkJEN0M3RDc0RjQ5Q0U2QkVD
ODBEOTVDOTYyMTNERDBEQzVDNEI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkZGRjIyQzI3N0ExMDQ0NDhDOUJDRkY5Rjc1OTVDMUJEQkQ4MERFMDkw
RDlBNDg4OUVCN0I3MDNFMUYzMTk0NS8wLzMxMzQzMzJlMzAyZTMyMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzIzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKPAPQwDQYJ
KoZIhvcNAQELBQADggEBALZcp6gTC1JnXOagDkUiu2AIpKw2P2psDstJSEDsnyTv
xXgghiwkQvqxeVHD1gw6LvDnJDemqxb4LOWXIpECi+HpbMZvNpvZHb6/rYUrf93Y
9Xe/Z7TOFyIrcuIfILB0Ylq8ut3h8uw5+DedM1ortpvY0vQWNeABeV1oC1hhEehh
21VwMWOy86llstOd4EsAZ2plNZ3BHsvW6TVO19rXrfX7BeBKPEZV4A4J0gPvsdvX
bqzaLLs6FKujJhybW36J2u+URtH8S+D9TUW89oysyMnWUArPDl5r2XyI1IzAJj7Z
KVManhQq0DKdOCq8hcf54OKpjcl8OL6qR9HN11QyNrw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:16 2025 by rpki-client