Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
File: 3137302e38332e33322e302f32322d3232203d3e203631353039.roa (raw, json)
Hash identifier: K4bpKgZhZgEvjw1UTobiZjD6JEwwbue1XsJmZ+WDxig=
Subject key identifier: 54:0C:C0:0A:4F:37:C3:B2:C7:7F:A7:5D:E7:E3:FC:47:FD:47:FC:E8
Certificate issuer: /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial: 59CD01F9646CB91911758E3B6179CDDC52818361
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
Signing time: Tue 04 Feb 2025 18:02:31 +0000
ROA not before: Tue 04 Feb 2025 17:57:31 +0000
ROA not after: Tue 03 Feb 2026 18:02:31 +0000
asID: 61509
IP address blocks: 170.83.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cd:01:f9:64:6c:b9:19:11:75:8e:3b:61:79:cd:dc:52:81:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Validity
Not Before: Feb 4 17:57:31 2025 GMT
Not After : Feb 3 18:02:31 2026 GMT
Subject: CN=540CC00A4F37C3B2C77FA75DE7E3FC47FD47FCE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:89:52:9d:68:06:b5:87:37:88:55:99:85:
f7:4d:82:2f:93:cb:91:15:a7:a4:f2:1b:67:d9:df:
f9:84:99:1c:2f:9d:58:44:73:7e:49:b0:8b:9f:25:
57:79:38:a5:7e:50:ea:a4:f9:6f:ec:2f:e9:0d:57:
a8:f5:d0:39:41:cd:43:17:83:2c:d1:f3:5b:47:f7:
b8:2c:6f:b3:d2:e7:b2:22:67:7c:4a:a8:ee:c3:94:
a2:53:79:d5:07:f8:8b:58:bc:d7:de:cb:e0:6a:ac:
bc:93:76:20:24:21:22:a3:fb:fe:ee:c6:92:2a:31:
57:38:0a:2f:06:d6:b8:3b:b6:41:95:5d:b0:37:ff:
51:1c:36:fd:df:8e:e2:29:3e:24:17:be:49:ee:c8:
09:04:64:c4:4f:85:bc:d9:cb:4d:f1:06:1f:bc:92:
d4:e8:1b:34:f8:a7:e5:9b:e2:00:cd:f8:42:49:4c:
55:eb:2a:d9:d3:04:b2:14:1b:0c:b1:25:98:a9:4e:
8e:52:b4:20:84:d3:b3:d2:eb:d9:44:f3:f6:6b:4b:
a8:c8:73:52:5a:85:4c:8b:10:8d:00:b6:62:3a:06:
45:83:eb:c5:d1:1e:05:24:ff:91:0e:d1:2a:ac:bc:
37:5e:08:87:88:7a:16:cb:f4:90:eb:ab:f3:11:af:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:C0:0A:4F:37:C3:B2:C7:7F:A7:5D:E7:E3:FC:47:FD:47:FC:E8
X509v3 Authority Key Identifier:
keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
92:00:7a:55:cf:78:a2:0b:3c:6f:62:f7:32:30:ca:52:cd:b3:
cb:b4:97:1d:3a:93:a0:f2:ad:f8:1b:c0:90:84:04:0d:a4:58:
31:5c:d5:0d:a5:10:bf:d6:62:1f:c6:2a:40:ff:c0:7e:bc:c3:
5c:ba:1e:80:a2:81:dd:64:d3:ce:f8:8f:1d:04:4d:07:8f:6a:
f8:a3:b0:0d:78:54:7a:b7:4d:78:62:98:bb:cb:cb:3e:84:56:
89:48:a6:5c:e1:8f:17:9b:0e:bc:e3:c5:4b:ca:e7:67:5c:d0:
7d:07:0e:78:1c:f7:ce:cf:e6:9f:42:7b:8e:38:31:b8:5a:04:
1e:2f:63:c0:36:a8:76:a6:bd:51:28:e3:f0:7e:c9:a9:98:4c:
6e:13:1f:63:d4:3a:2f:ac:b2:31:0b:d2:4e:04:9b:23:da:57:
a6:d0:32:de:8e:f8:31:d6:4c:67:dd:1f:58:28:1b:73:92:4b:
27:52:75:bf:f1:db:69:4d:bd:65:9b:0a:06:59:75:40:29:03:
22:52:74:5c:ac:52:49:2b:45:f3:30:ac:14:5f:42:b4:c2:d9:
60:f5:8a:cb:7a:98:82:5e:9e:4e:ea:00:7f:ac:5b:34:0e:5a:
dd:04:9c:0d:fd:f7:29:0e:2d:87:bc:39:ab:d0:d8:7b:c7:93:
c8:1f:91:54
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWc0B+WRsuRkRdY47YXnN3FKBg2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJCQTNCRkZGMTQ2NzQzOENDMUY5ODU0NzU4RjZGNTRF
RkQwODExNTAeFw0yNTAyMDQxNzU3MzFaFw0yNjAyMDMxODAyMzFaMDMxMTAvBgNV
BAMTKDU0MENDMDBBNEYzN0MzQjJDNzdGQTc1REU3RTNGQzQ3RkQ0N0ZDRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKz4lSnWgGtYc3iFWZhfdNgi+T
y5EVp6TyG2fZ3/mEmRwvnVhEc35JsIufJVd5OKV+UOqk+W/sL+kNV6j10DlBzUMX
gyzR81tH97gsb7PS57IiZ3xKqO7DlKJTedUH+ItYvNfey+BqrLyTdiAkISKj+/7u
xpIqMVc4Ci8G1rg7tkGVXbA3/1EcNv3fjuIpPiQXvknuyAkEZMRPhbzZy03xBh+8
ktToGzT4p+Wb4gDN+EJJTFXrKtnTBLIUGwyxJZipTo5StCCE07PS69lE8/ZrS6jI
c1JahUyLEI0AtmI6BkWD68XRHgUk/5EO0SqsvDdeCIeIehbL9JDrq/MRr3nBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUVAzACk83w7LHf6dd5+P8R/1H/OgwHwYDVR0j
BBgwFoAUm7o7//FGdDjMH5hUdY9vVO/QgRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTY1QTYyMURBRUI3NjFEQTFCNDIzMjUwNzQyQzUzOEMy
NTM3REM3RDFDMkM2QjA0QTIzQzg2MEVEMUZEQUZELzAvOUJCQTNCRkZGMTQ2NzQz
OENDMUY5ODU0NzU4RjZGNTRFRkQwODExNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkJBM0JGRkYxNDY3NDM4Q0Mx
Rjk4NTQ3NThGNkY1NEVGRDA4MTE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk2NUE2MjFEQUVCNzYxREExQjQyMzI1MDc0MkM1MzhDMjUzN0RDN0Qx
QzJDNkIwNEEyM0M4NjBFRDFGREFGRC8wLzMxMzczMDJlMzgzMzJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzEzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqUyAwDQYJ
KoZIhvcNAQELBQADggEBAJIAelXPeKILPG9i9zIwylLNs8u0lx06k6DyrfgbwJCE
BA2kWDFc1Q2lEL/WYh/GKkD/wH68w1y6HoCigd1k0874jx0ETQePavijsA14VHq3
TXhimLvLyz6EVolIplzhjxebDrzjxUvK52dc0H0HDngc987P5p9Ce444MbhaBB4v
Y8A2qHamvVEo4/B+yamYTG4TH2PUOi+ssjEL0k4EmyPaV6bQMt6O+DHWTGfdH1go
G3OSSydSdb/x22lNvWWbCgZZdUApAyJSdFysUkkrRfMwrBRfQrTC2WD1ist6mIJe
nk7qAH+sWzQOWt0EnA399ykOLYe8OavQ2HvHk8gfkVQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:38 2025 by rpki-client