Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa
File: 3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa (raw, json)
Hash identifier: a2L9YGTFryA2t69B51JQACsxELEmyWNz1YE9ab/zoN4=
Subject key identifier: E7:AA:F7:15:FD:C1:D3:36:21:32:A6:E6:0D:7F:32:28:92:C7:04:4A
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2B3C65BD34A2F67BF2227B9BD5CA859EC08C15AF
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa
Signing time: Tue 04 Feb 2025 18:26:59 +0000
ROA not before: Tue 04 Feb 2025 18:21:59 +0000
ROA not after: Tue 03 Feb 2026 18:26:59 +0000
asID: 27875
IP address blocks: 170.210.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3c:65:bd:34:a2:f6:7b:f2:22:7b:9b:d5:ca:85:9e:c0:8c:15:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:21:59 2025 GMT
Not After : Feb 3 18:26:59 2026 GMT
Subject: CN=E7AAF715FDC1D3362132A6E60D7F322892C7044A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:ff:39:3d:18:c3:d0:f4:7f:4a:87:51:81:
2c:df:ce:83:ff:16:e1:a7:80:d0:68:2b:62:a5:7a:
25:c3:15:c3:b4:b4:e9:98:b8:27:77:2b:91:07:a1:
15:45:e3:87:a2:cd:b1:32:26:9c:f4:98:e5:75:a3:
c4:c0:ff:1a:7d:ee:86:f2:26:e0:bb:fd:26:a8:2b:
fc:d9:3e:3f:ca:ad:4c:f7:ce:b7:54:54:6e:16:b6:
f9:ac:da:88:da:19:b2:81:eb:c7:8a:74:11:7d:64:
21:9d:d9:ad:fe:5b:9b:73:d2:06:8d:7f:71:03:bb:
b9:74:64:fe:64:b8:c0:ac:73:12:82:2a:c7:37:77:
a2:ec:9e:a7:53:3a:2a:7c:ee:6b:24:52:70:ef:08:
37:02:06:f1:71:06:05:a0:1b:bc:23:18:0e:24:58:
ac:1c:d6:32:d7:6a:6f:cb:2d:df:e9:73:d7:41:c0:
80:6c:8a:58:28:c2:d9:2e:14:bf:04:ef:cf:d5:71:
70:6c:51:3d:69:3c:29:80:aa:36:f4:42:fa:89:b9:
a1:2c:85:f4:a0:f6:fa:da:3c:a0:bc:2d:73:17:90:
f9:3c:20:18:86:0e:b1:d3:43:54:21:03:0d:86:19:
da:98:44:53:74:e4:70:11:89:ec:4d:c0:5e:4a:00:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:F7:15:FD:C1:D3:36:21:32:A6:E6:0D:7F:32:28:92:C7:04:4A
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.144.0/21
Signature Algorithm: sha256WithRSAEncryption
44:7e:de:ac:a3:be:00:d0:19:55:75:24:e5:6f:73:d5:49:2a:
df:73:e3:59:f3:dc:8d:2c:dd:c2:f0:2b:ae:e2:1e:dc:4a:e3:
55:92:3d:bc:e5:69:cc:ae:e1:87:78:da:63:b6:b1:af:6b:e0:
49:a8:5d:fb:f1:3a:37:a3:c6:7b:72:9b:fd:73:f8:08:07:80:
01:8f:85:7e:4a:d3:f0:f0:02:c7:ca:01:f3:5b:8d:2c:b4:7a:
cf:1b:7d:82:01:21:9d:d6:1f:cd:fc:bd:4a:12:c1:ba:ed:06:
be:c7:e7:27:f7:0b:83:23:f9:f2:78:b6:ab:ec:f0:fd:9b:68:
56:d5:6c:f9:38:47:7e:9c:fc:3c:c3:61:13:b4:29:8e:82:7b:
f0:df:3c:c6:63:27:fa:ca:1f:92:d9:32:f1:d6:c4:0c:83:df:
b2:7d:44:3f:8a:c4:bd:9e:85:dc:e4:ab:12:7f:1c:f4:20:ce:
ea:a3:43:9e:bd:10:2e:b0:5b:7a:8d:72:a3:64:c6:c8:ba:4e:
9f:5a:12:a0:e6:32:74:94:02:59:b9:fd:36:88:43:12:2b:2d:
e5:dd:57:99:fd:43:31:6b:74:02:a0:72:ca:26:53:5a:fa:76:
c6:b8:06:8d:1c:b6:3e:9f:1c:ee:af:8a:6e:91:c1:25:3f:83:
87:62:90:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKzxlvTSi9nvyInub1cqFnsCMFa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNTAyMDQxODIxNTlaFw0yNjAyMDMxODI2NTlaMDMxMTAvBgNV
BAMTKEU3QUFGNzE1RkRDMUQzMzYyMTMyQTZFNjBEN0YzMjI4OTJDNzA0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgf85PRjD0PR/SodRgSzfzoP/
FuGngNBoK2KleiXDFcO0tOmYuCd3K5EHoRVF44eizbEyJpz0mOV1o8TA/xp97oby
JuC7/SaoK/zZPj/KrUz3zrdUVG4Wtvms2ojaGbKB68eKdBF9ZCGd2a3+W5tz0gaN
f3EDu7l0ZP5kuMCscxKCKsc3d6LsnqdTOip87mskUnDvCDcCBvFxBgWgG7wjGA4k
WKwc1jLXam/LLd/pc9dBwIBsilgowtkuFL8E78/VcXBsUT1pPCmAqjb0QvqJuaEs
hfSg9vraPKC8LXMXkPk8IBiGDrHTQ1QhAw2GGdqYRFN05HARiexNwF5KAOZ/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU56r3Ff3B0zYhMqbmDX8yKJLHBEowHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMTM0MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzgzNzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqtKQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBEft6so74A0BlVdSTlb3PVSSrfc+NZ89yNLN3C
8Cuu4h7cSuNVkj285WnMruGHeNpjtrGva+BJqF378To3o8Z7cpv9c/gIB4ABj4V+
StPw8ALHygHzW40stHrPG32CASGd1h/N/L1KEsG67Qa+x+cn9wuDI/nyeLar7PD9
m2hW1Wz5OEd+nPw8w2ETtCmOgnvw3zzGYyf6yh+S2TLx1sQMg9+yfUQ/isS9noXc
5KsSfxz0IM7qo0OevRAusFt6jXKjZMbIuk6fWhKg5jJ0lAJZuf02iEMSKy3l3VeZ
/UMxa3QCoHLKJlNa+nbGuAaNHLY+nxzur4pukcElP4OHYpCr
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:50 2025 by rpki-client