Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32322d3232203d3e20323639373738.roa
File: 34352e3138302e36302e302f32322d3232203d3e20323639373738.roa (raw, json)
Hash identifier: X32iDdTnyxlafHevnqTZ3N2P3JsncCnfkbgYH68VKO4=
Subject key identifier: 39:52:97:BD:DD:1C:60:14:1F:56:71:75:CC:F2:E8:FA:6C:7A:C3:4C
Certificate issuer: /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial: 11F3AC3F48ED7690C25D08E51AAA8739E582CF7C
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32322d3232203d3e20323639373738.roa
Signing time: Sat 21 Dec 2024 04:30:00 +0000
ROA not before: Sat 21 Dec 2024 04:25:00 +0000
ROA not after: Sat 20 Dec 2025 04:30:00 +0000
asID: 269778
IP address blocks: 45.180.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f3:ac:3f:48:ed:76:90:c2:5d:08:e5:1a:aa:87:39:e5:82:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
Validity
Not Before: Dec 21 04:25:00 2024 GMT
Not After : Dec 20 04:30:00 2025 GMT
Subject: CN=395297BDDD1C60141F567175CCF2E8FA6C7AC34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:20:79:35:0c:49:3a:d2:5a:d0:4d:43:c6:
30:e4:0d:e0:42:47:60:47:df:be:50:ae:7f:8f:d7:
64:15:0d:53:15:db:74:92:22:18:52:b4:e6:d8:39:
59:33:a0:b2:19:a8:2c:9d:97:ef:db:1d:59:ec:4e:
13:a8:52:de:8b:a5:55:7e:e8:2b:da:cc:14:98:66:
a6:b7:1d:bc:2e:68:cc:dc:e7:f4:81:ea:54:fe:40:
19:5c:88:1b:61:26:52:63:47:3a:42:37:83:b5:da:
b8:8b:c3:65:4e:11:74:1d:2e:6f:50:0c:bc:8d:36:
8b:38:8d:58:a1:10:0b:e9:76:26:cf:2c:8f:6e:d7:
87:26:9d:ac:d2:85:a8:02:d3:b4:27:a6:92:1d:2b:
df:dd:0f:c7:cf:d5:c3:40:92:65:d1:60:16:8c:67:
8d:38:30:98:d1:f5:aa:bd:69:05:79:87:3d:0f:89:
de:1c:64:43:c0:a0:03:3e:91:72:f5:95:27:be:ca:
11:a7:57:27:88:3f:97:b9:59:de:2b:9f:55:bc:72:
05:a1:7b:02:3d:6d:86:de:61:a7:e4:a0:42:06:3a:
29:99:12:41:f0:e0:b0:fc:92:1e:42:7c:97:81:90:
70:2c:ac:20:93:52:88:5c:2f:b7:55:2f:9e:e8:80:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:97:BD:DD:1C:60:14:1F:56:71:75:CC:F2:E8:FA:6C:7A:C3:4C
X509v3 Authority Key Identifier:
keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32322d3232203d3e20323639373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:36:1c:2b:ea:5b:36:ab:3d:36:b3:39:81:71:21:6a:59:3e:
de:17:62:ea:ac:ea:61:24:f3:ef:3e:9b:26:3b:8e:43:c7:1d:
0c:37:3d:f0:86:c6:f2:be:1b:9b:4a:67:f9:f1:03:1f:b8:a0:
5e:8d:01:4e:3b:86:f0:52:08:3f:a8:0f:c5:b3:8f:67:1f:7b:
7c:2a:83:63:3a:89:81:6d:11:2d:f0:78:ce:65:c2:46:8c:d4:
91:51:75:9f:14:4a:92:9a:0e:10:38:70:2d:46:dd:9f:93:f3:
ef:be:77:ba:a4:ff:e8:6f:05:ab:31:b1:7e:79:8a:67:26:33:
aa:23:7e:4e:d5:b7:35:03:b2:7a:19:a5:da:5c:7b:3a:77:0c:
cf:44:07:31:0c:96:b8:f4:82:61:37:93:01:a7:63:34:86:08:
31:f5:1a:2c:c6:9d:80:42:3b:61:b3:f7:03:e2:af:41:4f:62:
86:39:56:b3:84:b0:a2:5b:be:7a:b6:5a:a1:77:eb:14:7c:57:
5b:db:55:70:53:1f:7f:d0:63:89:53:0a:88:b4:ee:e7:7b:02:
5c:ee:3c:ab:90:2d:64:75:71:3b:ae:47:c0:e2:c0:fe:61:67:
08:7e:f6:f8:25:c3:43:63:f5:d0:a1:47:b9:94:c1:de:bf:cc:
54:54:84:fe
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEfOsP0jtdpDCXQjlGqqHOeWCz3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMzMzE2NDFGNDc3NzdFNkQzOUQ2NjBDQkQ2MTBCM0FD
NUM3MTIwMDAeFw0yNDEyMjEwNDI1MDBaFw0yNTEyMjAwNDMwMDBaMDMxMTAvBgNV
BAMTKDM5NTI5N0JEREQxQzYwMTQxRjU2NzE3NUNDRjJFOEZBNkM3QUMzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0CB5NQxJOtJa0E1DxjDkDeBC
R2BH375Qrn+P12QVDVMV23SSIhhStObYOVkzoLIZqCydl+/bHVnsThOoUt6LpVV+
6CvazBSYZqa3HbwuaMzc5/SB6lT+QBlciBthJlJjRzpCN4O12riLw2VOEXQdLm9Q
DLyNNos4jVihEAvpdibPLI9u14cmnazShagC07QnppIdK9/dD8fP1cNAkmXRYBaM
Z404MJjR9aq9aQV5hz0Pid4cZEPAoAM+kXL1lSe+yhGnVyeIP5e5Wd4rn1W8cgWh
ewI9bYbeYafkoEIGOimZEkHw4LD8kh5CfJeBkHAsrCCTUohcL7dVL57ogK8BAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOVKXvd0cYBQfVnF1zPLo+mx6w0wwHwYDVR0j
BBgwFoAUMzMWQfR3d+bTnWYMvWELOsXHEgAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzRERTM1RUQ1OUQxREQ3MzQ1NkU1QUQ3M0M3QUJDMUU3
RjYzRTA3NTc3MzEzQUIzMjk3MzA2NDUzQTI5MzZELzAvMzMzMzE2NDFGNDc3NzdF
NkQzOUQ2NjBDQkQ2MTBCM0FDNUM3MTIwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzMzMTY0MUY0Nzc3N0U2RDM5
RDY2MENCRDYxMEIzQUM1QzcxMjAwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc0REUzNUVENTlEMURENzM0NTZFNUFENzNDN0FCQzFFN0Y2M0UwNzU3
NzMxM0FCMzI5NzMwNjQ1M0EyOTM2RC8wLzM0MzUyZTMxMzgzMDJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTM3MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi20PDAN
BgkqhkiG9w0BAQsFAAOCAQEAiDYcK+pbNqs9NrM5gXEhalk+3hdi6qzqYSTz7z6b
JjuOQ8cdDDc98IbG8r4bm0pn+fEDH7igXo0BTjuG8FIIP6gPxbOPZx97fCqDYzqJ
gW0RLfB4zmXCRozUkVF1nxRKkpoOEDhwLUbdn5Pz7753uqT/6G8FqzGxfnmKZyYz
qiN+TtW3NQOyehml2lx7OncMz0QHMQyWuPSCYTeTAadjNIYIMfUaLMadgEI7YbP3
A+KvQU9ihjlWs4Swolu+erZaoXfrFHxXW9tVcFMff9BjiVMKiLTu53sCXO48q5At
ZHVxO65HwOLA/mFnCH72+CXDQ2P10KFHuZTB3r/MVFSE/g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:52 2025 by rpki-client