Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa
File: 34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (raw, json)
Hash identifier: SvkXsMv55PSYZqXEFuqtC+A52E6JploJKAslELlq4Tg=
Subject key identifier: B1:D1:4F:A8:2C:C0:1B:24:14:01:A5:6C:26:F9:2E:4E:61:B7:A3:9D
Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial: 6B4AF5B5C902642E569AF86CA321B76AEA1DC288
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa
Signing time: Tue 04 Feb 2025 18:39:08 +0000
ROA not before: Tue 04 Feb 2025 18:34:08 +0000
ROA not after: Tue 03 Feb 2026 18:39:08 +0000
asID: 265596
IP address blocks: 45.181.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4a:f5:b5:c9:02:64:2e:56:9a:f8:6c:a3:21:b7:6a:ea:1d:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Validity
Not Before: Feb 4 18:34:08 2025 GMT
Not After : Feb 3 18:39:08 2026 GMT
Subject: CN=B1D14FA82CC01B241401A56C26F92E4E61B7A39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:49:c0:a9:5a:e3:3b:51:c7:7d:49:5c:e7:
58:5f:92:91:a2:dd:a1:2f:64:dc:25:8b:ff:ff:35:
73:98:84:88:6c:87:0a:6e:2b:a1:18:b2:43:c5:11:
9d:80:9a:d6:25:50:30:1e:f9:a2:4a:98:59:46:ae:
a4:25:e2:5a:0f:15:5a:dc:84:60:e2:f4:73:1a:47:
a9:8a:cc:c8:0e:ce:68:62:fe:3c:99:e7:c3:72:d4:
b0:ee:4c:56:2d:d4:9a:c8:e1:92:29:20:87:51:05:
95:1f:4f:5e:3f:0d:15:c7:af:06:b9:29:b7:3d:6d:
98:01:c5:d4:86:66:6c:6c:f9:d5:32:6d:7c:c4:2a:
60:85:ff:73:b3:b3:8e:9b:02:ef:e1:44:9a:2e:93:
1a:cf:bb:68:c3:7f:c8:de:c3:90:72:1d:07:ab:26:
cf:87:eb:6b:2e:96:01:40:d0:ac:69:63:ad:c8:1b:
f5:bf:cd:e7:c9:31:91:88:5a:c9:69:a7:cf:05:56:
c5:5a:02:8d:b3:0f:a6:1c:83:72:0c:36:b1:e8:a9:
1d:40:7d:b6:59:ee:ae:b5:19:9d:9e:15:f0:4f:b7:
1a:69:f2:e1:09:b6:81:a8:9f:31:57:b9:c3:ea:76:
ae:93:4c:46:6a:37:10:0d:92:b0:ee:72:1a:6a:6f:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:4F:A8:2C:C0:1B:24:14:01:A5:6C:26:F9:2E:4E:61:B7:A3:9D
X509v3 Authority Key Identifier:
keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.40.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:50:c8:4f:a8:89:20:fa:e6:dd:56:f1:50:8b:68:44:60:e5:
bf:54:1c:ea:a6:68:27:bc:d6:80:3d:39:27:3f:30:a1:a6:35:
f5:8e:8a:35:0e:cc:41:30:b1:be:03:f7:83:a1:cd:ae:fe:a0:
d4:3e:78:d6:b3:ed:ad:41:45:b0:c3:7e:50:52:30:f6:13:72:
d9:56:4b:8a:16:86:67:ec:5a:20:37:c4:b7:d5:42:78:a6:72:
14:17:d0:dd:ac:0d:33:d9:7f:d5:7e:e4:47:12:99:a6:a6:0f:
40:05:bb:bc:30:09:e5:43:78:e8:cd:37:84:83:9e:8c:72:8b:
b1:e1:02:6c:e3:52:1a:84:f3:08:46:de:dd:20:3c:ea:68:5f:
97:db:af:8b:72:22:79:07:eb:4c:e7:30:e3:06:19:68:c5:3e:
66:98:cd:fd:b4:38:07:83:d5:0b:97:a8:e6:74:f5:fa:c4:e1:
34:0d:11:bd:d2:2e:e1:85:15:8a:33:3c:12:79:d1:0e:1a:06:
f6:8d:41:58:24:3c:49:2e:96:79:c1:1f:dc:0f:39:02:51:ba:
b8:33:a6:be:a5:b4:0e:42:76:1f:b5:c5:1f:7e:5b:7b:c9:5e:
3e:28:2b:b2:9a:c7:cf:d3:46:85:37:a4:d5:30:d3:dc:df:e5:
32:2c:f6:6c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUa0r1tckCZC5WmvhsoyG3auodwogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE5QTBBMEM0MTExQkEwMjc4MkEyRTk3NjkxRjlGQzZD
MDhGRUY0RDAeFw0yNTAyMDQxODM0MDhaFw0yNjAyMDMxODM5MDhaMDMxMTAvBgNV
BAMTKEIxRDE0RkE4MkNDMDFCMjQxNDAxQTU2QzI2RjkyRTRFNjFCN0EzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7EnAqVrjO1HHfUlc51hfkpGi
3aEvZNwli///NXOYhIhshwpuK6EYskPFEZ2AmtYlUDAe+aJKmFlGrqQl4loPFVrc
hGDi9HMaR6mKzMgOzmhi/jyZ58Ny1LDuTFYt1JrI4ZIpIIdRBZUfT14/DRXHrwa5
Kbc9bZgBxdSGZmxs+dUybXzEKmCF/3Ozs46bAu/hRJoukxrPu2jDf8jew5ByHQer
Js+H62sulgFA0KxpY63IG/W/zefJMZGIWslpp88FVsVaAo2zD6Ycg3IMNrHoqR1A
fbZZ7q61GZ2eFfBPtxpp8uEJtoGonzFXucPqdq6TTEZqNxANkrDuchpqb91HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsdFPqCzAGyQUAaVsJvkuTmG3o50wHwYDVR0j
BBgwFoAUqpoKDEERugJ4Ki6XaR+fxsCP700wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTIxQjlCRkEwQzIzNzQzNDZGMzNFNkNFMUFFQzc5NDEy
QjJERkI1ODY2QzVGQzBDMUMwQzY1QzQ2NjVDNTg4LzAvQUE5QTBBMEM0MTExQkEw
Mjc4MkEyRTk3NjkxRjlGQzZDMDhGRUY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTlBMEEwQzQxMTFCQTAyNzgy
QTJFOTc2OTFGOUZDNkMwOEZFRjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUUyMUI5QkZBMEMyMzc0MzQ2RjMzRTZDRTFBRUM3OTQxMkIyREZCNTg2
NkM1RkMwQzFDMEM2NUM0NjY1QzU4OC8wLzM0MzUyZTMxMzgzMTJlMzQzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC21KDAN
BgkqhkiG9w0BAQsFAAOCAQEAv1DIT6iJIPrm3VbxUItoRGDlv1Qc6qZoJ7zWgD05
Jz8woaY19Y6KNQ7MQTCxvgP3g6HNrv6g1D541rPtrUFFsMN+UFIw9hNy2VZLihaG
Z+xaIDfEt9VCeKZyFBfQ3awNM9l/1X7kRxKZpqYPQAW7vDAJ5UN46M03hIOejHKL
seECbONSGoTzCEbe3SA86mhfl9uvi3IieQfrTOcw4wYZaMU+ZpjN/bQ4B4PVC5eo
5nT1+sThNA0RvdIu4YUVijM8EnnRDhoG9o1BWCQ8SS6WecEf3A85AlG6uDOmvqW0
DkJ2H7XFH35be8lePigrsprHz9NGhTek1TDT3N/lMiz2bA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:26 2025 by rpki-client