Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa
File: 3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa (raw, json)
Hash identifier: oTDxonv3Vm/dbcBphXWeLmxJ03jcU4AmpfZd8C/WUbU=
Subject key identifier: 11:83:ED:70:C0:99:C7:F8:A6:E0:31:07:37:64:74:F2:85:CC:60:E1
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 7748977CDA653E0FBE5C9FF353587490D63F5996
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa
Signing time: Tue 04 Feb 2025 18:27:02 +0000
ROA not before: Tue 04 Feb 2025 18:22:02 +0000
ROA not after: Tue 03 Feb 2026 18:27:02 +0000
asID: 27770
IP address blocks: 170.210.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:48:97:7c:da:65:3e:0f:be:5c:9f:f3:53:58:74:90:d6:3f:59:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:22:02 2025 GMT
Not After : Feb 3 18:27:02 2026 GMT
Subject: CN=1183ED70C099C7F8A6E03107376474F285CC60E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:ea:02:f9:be:3c:bc:d3:6f:55:16:9a:b1:
0e:b3:a3:3b:dd:c8:ba:a4:0a:83:11:01:3e:b4:72:
03:59:eb:dd:bf:e5:e1:ac:c2:e3:33:d5:74:23:35:
60:b4:e0:9a:a2:9c:35:76:db:11:8e:9b:b7:22:6a:
55:c5:9a:03:bd:7d:74:d7:85:21:a7:70:69:0d:46:
bf:34:26:f5:2f:95:a5:14:27:e5:26:dd:fe:2f:66:
5d:a9:05:5f:c4:54:f5:71:8a:b3:a4:9b:ee:d5:c4:
bf:37:b8:82:6c:e7:98:fc:05:8f:91:4c:ec:14:b7:
42:c9:e1:31:6c:e6:55:d0:03:a8:dc:b2:72:e5:cd:
38:0e:35:bc:38:d7:a9:98:c8:60:4b:b0:2a:56:fa:
03:62:f0:a5:8e:57:0e:cb:37:7d:a8:f1:2c:a5:ec:
f7:31:a1:83:7c:7c:15:4a:67:82:91:35:5e:01:9f:
8f:32:b9:a2:40:d5:76:a1:ba:e0:1c:1f:63:b2:5c:
51:5f:ec:01:42:91:64:76:f4:0c:2a:4b:35:6b:b3:
1d:b8:13:60:1c:46:d6:07:8a:2e:43:f8:02:e3:08:
d9:51:36:af:a4:b0:7b:da:ee:5c:7b:0d:46:60:6e:
96:46:84:3c:e1:51:af:db:97:9f:0f:28:c5:ab:20:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:ED:70:C0:99:C7:F8:A6:E0:31:07:37:64:74:F2:85:CC:60:E1
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.128.0/21
Signature Algorithm: sha256WithRSAEncryption
68:dc:1d:ab:63:d9:3e:70:dc:a4:fc:1a:5c:d6:ea:21:d9:86:
a4:18:8d:1f:a1:81:53:89:ca:36:99:5b:be:c8:b0:98:12:db:
b8:0c:42:7d:31:79:5c:d6:68:a6:46:5a:ec:8e:17:3d:8d:6f:
5c:23:b4:d4:d3:bd:77:45:82:bc:6a:c0:d1:d4:f2:a1:1a:fa:
e2:ed:0f:1b:25:3a:80:63:79:64:e2:61:f6:17:ab:41:e4:34:
b9:4f:fc:30:68:5e:12:51:9e:6d:89:44:31:25:09:f4:5d:84:
31:8a:16:1b:0b:06:26:a5:29:ed:2f:32:33:e1:74:82:7c:2f:
6c:2f:eb:47:e6:e1:05:a7:5a:12:eb:a1:56:76:2d:13:5e:68:
e6:2f:2a:0f:d4:4e:7c:23:57:2f:d4:25:1a:fa:e4:a5:c6:d1:
1a:cc:84:eb:48:2a:ca:14:b4:de:79:d0:e0:48:fa:48:52:b9:
fc:5d:e4:ed:ec:f2:78:a4:41:8a:4b:af:ae:66:ee:a1:08:f1:
8f:49:d3:a6:0f:be:5d:b1:d9:22:bb:82:1c:b2:f0:b7:eb:15:
91:af:10:75:46:c2:8c:19:b8:9e:45:96:d4:0a:f4:fa:d5:3a:
5e:04:2d:d2:57:82:b2:35:04:5b:05:0f:a4:df:06:3a:cd:7d:
0b:49:dd:f9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd0iXfNplPg++XJ/zU1h0kNY/WZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNTAyMDQxODIyMDJaFw0yNjAyMDMxODI3MDJaMDMxMTAvBgNV
BAMTKDExODNFRDcwQzA5OUM3RjhBNkUwMzEwNzM3NjQ3NEYyODVDQzYwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIuoC+b48vNNvVRaasQ6zozvd
yLqkCoMRAT60cgNZ692/5eGswuMz1XQjNWC04JqinDV22xGOm7cialXFmgO9fXTX
hSGncGkNRr80JvUvlaUUJ+Um3f4vZl2pBV/EVPVxirOkm+7VxL83uIJs55j8BY+R
TOwUt0LJ4TFs5lXQA6jcsnLlzTgONbw416mYyGBLsCpW+gNi8KWOVw7LN32o8Syl
7PcxoYN8fBVKZ4KRNV4Bn48yuaJA1XahuuAcH2OyXFFf7AFCkWR29AwqSzVrsx24
E2AcRtYHii5D+ALjCNlRNq+ksHva7lx7DUZgbpZGhDzhUa/bl58PKMWrIFk5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEYPtcMCZx/im4DEHN2R08oXMYOEwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMTMyMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzczNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqtKA
MA0GCSqGSIb3DQEBCwUAA4IBAQBo3B2rY9k+cNyk/Bpc1uoh2YakGI0foYFTico2
mVu+yLCYEtu4DEJ9MXlc1mimRlrsjhc9jW9cI7TU0713RYK8asDR1PKhGvri7Q8b
JTqAY3lk4mH2F6tB5DS5T/wwaF4SUZ5tiUQxJQn0XYQxihYbCwYmpSntLzIz4XSC
fC9sL+tH5uEFp1oS66FWdi0TXmjmLyoP1E58I1cv1CUa+uSlxtEazITrSCrKFLTe
edDgSPpIUrn8XeTt7PJ4pEGKS6+uZu6hCPGPSdOmD75dsdkiu4IcsvC36xWRrxB1
RsKMGbieRZbUCvT61TpeBC3SV4KyNQRbBQ+k3wY6zX0LSd35
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:43 2025 by rpki-client