Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
File: 34352e3137332e34302e302f32322d3234203d3e20323637383032.roa (raw, json)
Hash identifier: QVf3CAjD8GmJ5CY8J10+39eyAz0KYvPD6pWcWuFwQ+s=
Subject key identifier: 7F:43:18:5E:7E:E3:C6:D6:D4:B0:0E:AA:92:16:C1:F9:14:D3:89:3E
Certificate issuer: /CN=F759E6E90D87109CB242AF1806550668309A19C8
Certificate serial: 508EFAED7D687FF0ED59BF556BB2F4050A250071
Authority key identifier: F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
Signing time: Tue 04 Feb 2025 18:08:52 +0000
ROA not before: Tue 04 Feb 2025 18:03:52 +0000
ROA not after: Tue 03 Feb 2026 18:08:52 +0000
asID: 267802
IP address blocks: 45.173.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8e:fa:ed:7d:68:7f:f0:ed:59:bf:55:6b:b2:f4:05:0a:25:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F759E6E90D87109CB242AF1806550668309A19C8
Validity
Not Before: Feb 4 18:03:52 2025 GMT
Not After : Feb 3 18:08:52 2026 GMT
Subject: CN=7F43185E7EE3C6D6D4B00EAA9216C1F914D3893E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:65:6c:dd:c7:3e:8d:6b:2e:31:5d:ab:21:
60:39:78:71:54:03:8b:46:ef:5d:cf:73:64:a4:80:
b3:e3:1d:46:e8:a6:3d:12:72:ed:25:54:6f:c5:9e:
0e:8b:61:8f:11:2b:7f:b2:79:78:d7:d9:41:3c:34:
e6:9b:6b:96:a3:e5:11:dd:31:3e:6e:d6:1f:ae:93:
1f:f7:61:60:92:da:91:21:8c:2f:65:7f:ec:29:c5:
02:62:a6:cd:28:d9:a3:98:20:6a:a7:ac:98:47:4a:
d4:7a:c9:7a:8a:61:67:ef:f8:96:21:a8:45:89:7e:
03:b6:e6:d0:57:c8:bc:a0:6c:47:98:37:b5:f5:b9:
fa:6a:39:ed:b8:fe:5a:40:d9:78:60:11:5a:67:cc:
2b:56:a3:d1:05:72:67:1f:17:11:85:ca:d0:81:0e:
75:ab:03:31:20:e9:ba:88:63:f3:09:10:6a:08:f3:
d1:04:6b:3e:5e:6e:37:e0:c4:b9:3a:6b:b4:62:88:
f2:e6:81:17:11:b8:3a:68:39:e0:12:f0:71:a0:6e:
94:91:15:82:71:90:6b:2c:33:e1:2e:64:02:53:ae:
7e:ab:d1:64:70:99:31:de:62:9c:69:2b:9b:b2:56:
60:3a:1a:25:4d:50:06:b1:2d:23:18:d6:fa:c8:a9:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:18:5E:7E:E3:C6:D6:D4:B0:0E:AA:92:16:C1:F9:14:D3:89:3E
X509v3 Authority Key Identifier:
keyid:F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.40.0/22
Signature Algorithm: sha256WithRSAEncryption
94:35:ca:b2:89:b3:c8:fc:e0:b7:c1:fa:7d:7b:a3:e6:77:8d:
d2:35:0d:1b:d6:cb:95:be:1e:fd:72:16:8f:57:b1:26:3c:73:
10:00:7f:42:c9:74:d5:65:40:be:71:57:c9:29:d7:34:ca:39:
bf:bd:d6:3f:47:8f:e3:4c:53:aa:b1:72:67:62:a9:2c:1c:9f:
aa:68:7a:84:36:47:45:49:cc:5c:ef:27:0d:87:90:04:43:ae:
b9:7e:70:ed:12:e8:41:1a:f0:90:87:f8:2c:67:44:f2:61:26:
b4:b3:f3:d8:3e:1b:30:b3:35:c7:98:c3:45:69:92:68:78:d7:
ce:ee:0a:55:d0:48:af:97:27:25:0f:8d:dc:8f:f8:85:cb:09:
d4:3b:40:01:ee:c5:aa:8a:b1:21:5b:f7:e0:9a:cc:56:2d:bc:
f2:01:65:e4:82:58:66:a0:18:41:c6:9b:0e:41:29:78:e6:7d:
95:6f:e0:d7:cc:53:e5:0a:4d:ab:fc:da:2c:3e:bf:1c:7a:db:
a6:98:6f:f6:6f:ca:92:5e:02:15:e3:67:46:37:a8:73:2c:f3:
71:a6:ec:6a:0a:11:43:89:fd:2b:d1:53:0c:02:a5:78:fb:c9:
70:df:14:6b:c6:0c:05:f2:10:03:80:36:60:67:7c:7b:cf:0f:
b7:7c:1c:b6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUI767X1of/DtWb9Va7L0BQolAHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc1OUU2RTkwRDg3MTA5Q0IyNDJBRjE4MDY1NTA2Njgz
MDlBMTlDODAeFw0yNTAyMDQxODAzNTJaFw0yNjAyMDMxODA4NTJaMDMxMTAvBgNV
BAMTKDdGNDMxODVFN0VFM0M2RDZENEIwMEVBQTkyMTZDMUY5MTREMzg5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgGVs3cc+jWsuMV2rIWA5eHFU
A4tG713Pc2SkgLPjHUbopj0Scu0lVG/Fng6LYY8RK3+yeXjX2UE8NOaba5aj5RHd
MT5u1h+ukx/3YWCS2pEhjC9lf+wpxQJips0o2aOYIGqnrJhHStR6yXqKYWfv+JYh
qEWJfgO25tBXyLygbEeYN7X1ufpqOe24/lpA2XhgEVpnzCtWo9EFcmcfFxGFytCB
DnWrAzEg6bqIY/MJEGoI89EEaz5ebjfgxLk6a7RiiPLmgRcRuDpoOeAS8HGgbpSR
FYJxkGssM+EuZAJTrn6r0WRwmTHeYpxpK5uyVmA6GiVNUAaxLSMY1vrIqRoLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUf0MYXn7jxtbUsA6qkhbB+RTTiT4wHwYDVR0j
BBgwFoAU91nm6Q2HEJyyQq8YBlUGaDCaGcgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0I2OENEMzAwQjM4NDZBRDBGNkEyODYzQTYwQ0Y4Mjcy
QkEwREEyMzdCQjI4MzlDNTVFMUY4OEIzNkQ0RDU4LzAvRjc1OUU2RTkwRDg3MTA5
Q0IyNDJBRjE4MDY1NTA2NjgzMDlBMTlDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzU5RTZFOTBEODcxMDlDQjI0
MkFGMTgwNjU1MDY2ODMwOUExOUM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdCNjhDRDMwMEIzODQ2QUQwRjZBMjg2M0E2MENGODI3MkJBMERBMjM3
QkIyODM5QzU1RTFGODhCMzZENEQ1OC8wLzM0MzUyZTMxMzczMzJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2tKDAN
BgkqhkiG9w0BAQsFAAOCAQEAlDXKsomzyPzgt8H6fXuj5neN0jUNG9bLlb4e/XIW
j1exJjxzEAB/Qsl01WVAvnFXySnXNMo5v73WP0eP40xTqrFyZ2KpLByfqmh6hDZH
RUnMXO8nDYeQBEOuuX5w7RLoQRrwkIf4LGdE8mEmtLPz2D4bMLM1x5jDRWmSaHjX
zu4KVdBIr5cnJQ+N3I/4hcsJ1DtAAe7FqoqxIVv34JrMVi288gFl5IJYZqAYQcab
DkEpeOZ9lW/g18xT5QpNq/zaLD6/HHrbpphv9m/Kkl4CFeNnRjeocyzzcabsagoR
Q4n9K9FTDAKlePvJcN8Ua8YMBfIQA4A2YGd8e88Pt3wctg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:30 2025 by rpki-client