Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/344a7691bdd708240560c7e9fca50d098303f232.roa
File: 344a7691bdd708240560c7e9fca50d098303f232.roa (raw, json)
Hash identifier: wMKYQks5vI5wpUWymTtZ+3D18AhHubs0JgYuOiR6LhQ=
Subject key identifier: 47:D6:01:92:2C:0A:D8:82:43:9A:D3:4B:51:79:25:B4:13:70:CE:7B
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 2029E2
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/344a7691bdd708240560c7e9fca50d098303f232.roa
Signing time: Wed 07 Feb 2024 17:40:04 +0000
ROA not before: Wed 07 Feb 2024 17:40:04 +0000
ROA not after: Sat 07 Feb 2026 17:40:04 +0000
asID: 265768
IP address blocks: 45.228.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107874 (0x2029e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 7 17:40:04 2024 GMT
Not After : Feb 7 17:40:04 2026 GMT
Subject: CN=344a7691bdd708240560c7e9fca50d098303f232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:79:69:d9:c1:41:47:b1:8f:6e:3d:ab:10:
99:1c:25:70:f5:03:af:39:06:3c:4d:e6:46:02:4c:
c0:56:e5:86:32:57:1a:57:65:d8:43:7d:1d:ef:4e:
64:48:c2:47:04:67:e8:cf:55:3c:2b:56:0b:ab:9d:
23:78:a8:54:aa:24:3f:4d:2d:3f:1e:fb:a5:51:92:
41:91:1c:5c:7a:89:78:f1:58:41:7d:a5:f5:bf:2e:
57:63:e9:09:19:a6:5c:0d:fb:d0:01:6f:f0:3f:fe:
f4:51:84:98:11:b9:aa:2d:b5:08:91:2f:96:bc:20:
e1:e8:d8:21:20:a9:a5:b8:63:21:4e:25:f3:be:f6:
77:01:3c:85:bf:92:2f:f8:be:a1:69:b4:db:d2:35:
4a:a2:de:ea:0a:38:94:45:a2:73:6b:fa:f7:3d:26:
2a:8b:20:e1:39:6a:f5:f9:a0:33:17:3c:d1:e0:4f:
34:e5:de:af:17:34:3c:a9:30:12:6e:3b:1e:6f:aa:
df:c7:6d:0f:32:20:1f:da:6f:7f:5e:07:ef:cc:c5:
84:23:ec:fe:b2:d5:c2:8c:54:83:50:81:d7:2b:ab:
22:96:1b:c9:5d:c5:4b:df:91:60:cd:8c:b8:c9:fe:
eb:44:7a:e5:13:49:61:13:07:c5:01:f3:52:1f:f3:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:01:92:2C:0A:D8:82:43:9A:D3:4B:51:79:25:B4:13:70:CE:7B
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/344a7691bdd708240560c7e9fca50d098303f232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:97:c5:95:b2:02:9f:3a:3c:7d:42:16:e6:71:51:7e:9d:05:
83:a9:62:ee:da:07:22:85:4e:40:61:7f:ad:c3:f1:f7:a0:b6:
96:a9:8e:56:09:9a:ff:bc:c9:f7:0e:1c:6a:18:f6:64:73:ca:
9b:f2:25:24:77:7e:7f:e9:97:eb:92:6d:40:72:de:4c:48:25:
58:15:2e:2e:d6:f5:88:5f:8e:4e:87:a0:2f:6e:98:fc:be:05:
36:b1:44:64:de:6e:39:00:b9:7d:30:8e:64:4e:64:ba:c5:33:
23:03:8b:d1:8c:e9:ed:61:aa:b0:c6:30:3c:d9:00:60:8c:80:
97:bc:b6:8f:3c:9a:ab:cb:f7:88:4f:39:d5:9b:2e:ad:fb:81:
9f:08:74:a0:61:ed:b5:1d:c6:3d:b0:51:8f:a9:2a:a1:b9:f1:
13:3e:44:7c:c2:68:46:22:de:24:8c:89:da:44:d7:29:85:9a:
f0:d6:48:93:3c:34:fc:46:3a:8b:98:8b:9c:5c:f7:09:bc:a9:
95:df:3c:40:65:d3:c2:78:00:a7:5f:e2:92:a8:0c:a2:4f:63:
be:f0:40:ff:90:ee:a4:37:65:1e:fd:44:4d:b2:9f:c4:30:bc:
bc:16:1a:c2:74:19:9b:9e:13:f6:ed:d2:aa:8b:b9:2a:04:33:
db:74:74:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDICniMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OGU5YWNlNTY5NWUxODhmZTUwZjJhNzYxZDgxOGU3OTk3NmMwODYwHhcNMjQwMjA3
MTc0MDA0WhcNMjYwMjA3MTc0MDA0WjAzMTEwLwYDVQQDEygzNDRhNzY5MWJkZDcw
ODI0MDU2MGM3ZTlmY2E1MGQwOTgzMDNmMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3Dp5adnBQUexj249qxCZHCVw9QOvOQY8TeZGAkzAVuWGMlca
V2XYQ30d705kSMJHBGfoz1U8K1YLq50jeKhUqiQ/TS0/HvulUZJBkRxceol48VhB
faX1vy5XY+kJGaZcDfvQAW/wP/70UYSYEbmqLbUIkS+WvCDh6NghIKmluGMhTiXz
vvZ3ATyFv5Iv+L6habTb0jVKot7qCjiURaJza/r3PSYqiyDhOWr1+aAzFzzR4E80
5d6vFzQ8qTASbjseb6rfx20PMiAf2m9/XgfvzMWEI+z+stXCjFSDUIHXK6silhvJ
XcVL35FgzYy4yf7rRHrlE0lhEwfFAfNSH/PKzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEfWAZIsCtiCQ5rTS1F5JbQTcM57MB8GA1UdIwQYMBaAFDtEtP/zKg3RBIAs
K7MWuJWL4U7PMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU4ZTlh
Y2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODVmYzI2NTctOWRkNS00ZTE4LWEwNDMtYzFlZDk2
NzMwYmY4LzM0NGE3NjkxYmRkNzA4MjQwNTYwYzdlOWZjYTUwZDA5ODMwM2YyMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NWZjMjY1Ny05ZGQ1LTRlMTgtYTA0My1jMWVk
OTY3MzBiZjgvZjU4ZTlhY2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3k3DANBgkqhkiG9w0BAQsFAAOCAQEAfJfFlbICnzo8fUIW
5nFRfp0Fg6li7toHIoVOQGF/rcPx96C2lqmOVgma/7zJ9w4cahj2ZHPKm/IlJHd+
f+mX65JtQHLeTEglWBUuLtb1iF+OToegL26Y/L4FNrFEZN5uOQC5fTCOZE5kusUz
IwOL0Yzp7WGqsMYwPNkAYIyAl7y2jzyaq8v3iE851ZsurfuBnwh0oGHttR3GPbBR
j6kqobnxEz5EfMJoRiLeJIyJ2kTXKYWa8NZIkzw0/EY6i5iLnFz3Cbypld88QGXT
wngAp1/ikqgMok9jvvBA/5DupDdlHv1ETbKfxDC8vBYawnQZm54T9u3Sqou5KgQz
23R0Eg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:16:48 2025 by rpki-client