Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa
File: 3230312e3231342e302e302f31352d3234203d3e203232303437.roa (raw, json)
Hash identifier: oMDA1kCPI9BB9bpEUlTZvRyRKsBgQRdNDAA27yB+GVQ=
Subject key identifier: 9A:6E:6C:D1:EC:2D:E6:AC:22:82:55:7B:DE:A4:7E:A2:3D:53:98:44
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 16E7399B24C93BC70D684DD844707D3F8E05E210
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:15 +0000
ROA not before: Tue 04 Feb 2025 18:14:15 +0000
ROA not after: Tue 03 Feb 2026 18:19:15 +0000
asID: 22047
IP address blocks: 201.214.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e7:39:9b:24:c9:3b:c7:0d:68:4d:d8:44:70:7d:3f:8e:05:e2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:15 2025 GMT
Not After : Feb 3 18:19:15 2026 GMT
Subject: CN=9A6E6CD1EC2DE6AC2282557BDEA47EA23D539844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:85:c2:46:20:7c:a0:fb:da:95:af:2e:eb:
76:27:84:61:6d:a3:53:fe:41:df:64:49:77:a0:9c:
c7:f8:ad:7e:ce:5a:9e:ba:3d:23:19:43:24:67:8f:
85:22:0f:d1:f6:1a:ba:8c:42:bf:a3:c4:84:79:a5:
20:77:97:91:da:5d:b4:b6:56:1d:b0:7c:43:0a:35:
a7:27:82:1b:ee:97:eb:5f:26:a9:9a:fe:88:6f:05:
43:e6:a8:02:7f:e7:fc:4a:37:5e:71:82:b9:52:5c:
9e:94:fe:f4:44:c3:1f:9d:ff:f5:65:f9:3d:d5:02:
7c:15:d2:e6:43:27:b2:be:6b:75:bf:17:bd:32:f3:
94:d5:f7:e8:3d:1f:f2:8d:8c:bc:4f:8a:6f:2f:3e:
10:a5:e1:06:43:fe:82:d9:f1:c7:83:02:21:5c:be:
9c:6f:29:83:13:bd:8e:05:74:bd:7d:70:c2:b4:23:
61:53:57:d3:22:de:03:5c:1e:02:f8:49:99:67:cd:
b8:32:6c:6a:ac:51:be:de:db:67:f7:3e:2f:35:1a:
72:6d:d9:00:8b:67:b7:6e:13:d6:22:e4:92:6f:31:
b5:d8:e6:00:e1:4f:42:b2:f7:b9:10:ce:eb:0f:85:
d2:8d:5f:86:50:82:b5:e6:cd:96:55:a3:28:fd:78:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:6C:D1:EC:2D:E6:AC:22:82:55:7B:DE:A4:7E:A2:3D:53:98:44
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3a:e3:bf:29:6f:d1:eb:90:2b:09:ee:8d:28:bd:66:c2:ba:41:
a0:80:2e:66:49:9d:58:ac:af:19:0b:28:fd:76:3e:7f:c9:72:
3e:53:37:ad:0f:b8:94:6d:46:0d:b1:1b:60:b1:94:0b:8b:6a:
b2:bb:52:48:1c:bd:4e:a2:49:da:b8:d0:42:5a:07:d6:79:4e:
a2:69:41:96:47:82:d1:4d:8d:d6:c3:ed:da:56:ca:e3:58:0b:
67:b4:3c:97:58:74:b5:0c:dc:06:24:2d:6b:34:66:c9:5b:68:
17:80:ee:c3:59:5c:01:c6:8c:3f:f7:d8:95:a0:dd:04:a6:8f:
7d:b6:1e:ba:43:62:ec:29:05:dd:90:a9:55:b7:41:97:2f:85:
06:70:b5:f7:ef:b3:ce:8a:f6:8b:e8:3f:dc:91:ad:0e:27:06:
78:60:ec:9f:77:ee:60:a4:ec:25:85:c8:9a:2d:82:87:2f:cf:
d6:22:6f:18:32:d5:6a:03:ff:dc:e6:08:b1:1e:64:7d:fc:75:
50:fd:00:be:8b:94:80:04:e7:bb:5c:00:ed:10:1e:5f:08:50:
d2:8b:d8:14:3c:d6:2b:30:d5:44:43:d5:50:ae:4c:23:9e:18:
24:69:3f:e5:e0:12:a2:64:b2:22:8d:a5:89:eb:89:00:4c:c4:
60:5f:4e:36
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFuc5myTJO8cNaE3YRHB9P44F4hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNTAyMDQxODE0MTVaFw0yNjAyMDMxODE5MTVaMDMxMTAvBgNV
BAMTKDlBNkU2Q0QxRUMyREU2QUMyMjgyNTU3QkRFQTQ3RUEyM0Q1Mzk4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHYXCRiB8oPvala8u63YnhGFt
o1P+Qd9kSXegnMf4rX7OWp66PSMZQyRnj4UiD9H2GrqMQr+jxIR5pSB3l5HaXbS2
Vh2wfEMKNacnghvul+tfJqma/ohvBUPmqAJ/5/xKN15xgrlSXJ6U/vREwx+d//Vl
+T3VAnwV0uZDJ7K+a3W/F70y85TV9+g9H/KNjLxPim8vPhCl4QZD/oLZ8ceDAiFc
vpxvKYMTvY4FdL19cMK0I2FTV9Mi3gNcHgL4SZlnzbgybGqsUb7e22f3Pi81GnJt
2QCLZ7duE9Yi5JJvMbXY5gDhT0Ky97kQzusPhdKNX4ZQgrXmzZZVoyj9eJxLAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUmm5s0ewt5qwiglV73qR+oj1TmEQwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzAzMTJlMzIzMTM0MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMyMzIzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHJ1jANBgkq
hkiG9w0BAQsFAAOCAQEAOuO/KW/R65ArCe6NKL1mwrpBoIAuZkmdWKyvGQso/XY+
f8lyPlM3rQ+4lG1GDbEbYLGUC4tqsrtSSBy9TqJJ2rjQQloH1nlOomlBlkeC0U2N
1sPt2lbK41gLZ7Q8l1h0tQzcBiQtazRmyVtoF4Duw1lcAcaMP/fYlaDdBKaPfbYe
ukNi7CkF3ZCpVbdBly+FBnC19++zzor2i+g/3JGtDicGeGDsn3fuYKTsJYXImi2C
hy/P1iJvGDLVagP/3OYIsR5kffx1UP0AvouUgATnu1wA7RAeXwhQ0ovYFDzWKzDV
REPVUK5MI54YJGk/5eASomSyIo2lieuJAEzEYF9ONg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client