Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa
File: 3133322e3235352e32302e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier: fkulb5GdHhURsFPhNf1zUWFHw/qdjEmF2pxYoEvr+Zs=
Subject key identifier: D7:F1:9E:91:B4:21:FD:EA:EC:A5:6B:5A:9B:D7:0B:94:92:C8:82:E5
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 1DBF9D56B19EB96B7A0E0C7314D519044DCAC938
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa
Signing time: Tue 04 Feb 2025 19:56:53 +0000
ROA not before: Tue 04 Feb 2025 19:51:53 +0000
ROA not after: Tue 03 Feb 2026 19:56:53 +0000
asID: 27951
IP address blocks: 132.255.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:9d:56:b1:9e:b9:6b:7a:0e:0c:73:14:d5:19:04:4d:ca:c9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:51:53 2025 GMT
Not After : Feb 3 19:56:53 2026 GMT
Subject: CN=D7F19E91B421FDEAECA56B5A9BD70B9492C882E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:ad:4a:90:9d:60:46:48:54:b3:3e:3c:1e:
d8:1c:d1:3b:ad:f3:8d:67:6d:48:d1:26:d0:63:36:
49:dc:07:03:03:e5:ce:af:be:1a:85:a7:c9:a4:47:
f2:df:c6:63:5c:5a:6d:fb:27:f5:4f:2e:e8:af:d4:
95:b5:62:e0:10:53:b0:5b:16:0f:22:22:48:4e:8e:
19:d8:fd:5c:6c:42:b9:f5:eb:5c:25:6d:9b:4f:a6:
93:53:e7:d8:59:4d:b1:3c:31:55:ed:3c:15:30:49:
02:6c:e9:ea:75:9a:41:20:56:b0:6f:82:e9:05:0a:
2d:2e:a7:a4:7a:dd:81:1a:c2:d7:c3:9d:fb:d4:37:
00:92:99:a6:63:64:b9:7a:c6:56:45:09:17:80:5b:
3f:37:c0:c4:da:36:a1:f2:5d:1b:cc:0e:90:e6:a6:
e0:73:1e:52:39:49:e5:90:78:32:b9:5b:7d:d7:b7:
5c:92:c6:85:28:aa:41:ae:21:83:fc:8f:ab:56:f2:
ae:16:6d:e1:ab:3f:9e:2b:3b:1f:67:96:69:d5:8b:
4f:4b:b3:9e:7e:aa:e1:06:36:0b:7d:11:d7:48:b0:
a0:68:e4:73:3c:5d:a1:14:b0:40:62:2d:d6:a1:ee:
28:23:75:85:46:49:ba:08:bd:89:ab:ab:49:4d:a0:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:9E:91:B4:21:FD:EA:EC:A5:6B:5A:9B:D7:0B:94:92:C8:82:E5
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:82:72:34:d3:dd:ae:34:58:a8:cf:1d:70:6f:83:1d:60:58:
c1:1d:c7:3e:0c:7f:d1:0a:8b:62:31:87:88:56:db:e2:3b:be:
60:01:3e:fe:4a:23:d7:c9:73:e1:de:fa:b2:51:63:df:04:33:
48:a1:46:29:10:fe:90:01:70:7e:c6:b4:b8:76:db:0e:8e:40:
e7:5b:51:4e:8d:5a:19:2f:d1:5b:a9:dc:0a:23:00:53:74:23:
43:8f:56:24:30:b8:41:7f:e5:ae:f4:51:10:b0:9d:87:9f:74:
db:7b:86:24:24:90:42:b8:43:d3:08:3b:a6:3d:35:87:20:c5:
28:83:e0:ac:3c:c5:c7:97:df:f0:56:99:63:2b:c1:22:c5:ff:
24:c8:8c:d5:12:1d:de:c9:13:5d:1d:26:d3:b6:d8:3e:5d:06:
e7:27:7d:8c:7f:52:ab:3b:b0:78:92:63:12:26:41:69:9e:8a:
2c:2d:e4:ab:f9:04:a8:84:ef:6d:8b:49:32:c9:28:b7:08:dd:
f5:62:df:fa:85:4a:8a:c0:9f:b3:92:6e:77:63:35:18:a2:88:
3f:95:bd:61:81:49:1b:5f:06:99:4a:ab:2a:51:77:b4:d5:aa:
f1:35:d6:bc:fa:ed:43:01:97:53:27:91:6e:d5:34:24:05:6a:
95:9e:fe:8c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHb+dVrGeuWt6DgxzFNUZBE3KyTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUxNTNaFw0yNjAyMDMxOTU2NTNaMDMxMTAvBgNV
BAMTKEQ3RjE5RTkxQjQyMUZERUFFQ0E1NkI1QTlCRDcwQjk0OTJDODgyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pa1KkJ1gRkhUsz48Htgc0Tut
841nbUjRJtBjNkncBwMD5c6vvhqFp8mkR/LfxmNcWm37J/VPLuiv1JW1YuAQU7Bb
Fg8iIkhOjhnY/VxsQrn161wlbZtPppNT59hZTbE8MVXtPBUwSQJs6ep1mkEgVrBv
gukFCi0up6R63YEawtfDnfvUNwCSmaZjZLl6xlZFCReAWz83wMTaNqHyXRvMDpDm
puBzHlI5SeWQeDK5W33Xt1ySxoUoqkGuIYP8j6tW8q4WbeGrP54rOx9nlmnVi09L
s55+quEGNgt9EddIsKBo5HM8XaEUsEBiLdah7igjdYVGSboIvYmrq0lNoJ9ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1/GekbQh/erspWtam9cLlJLIguUwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzMzMjJlMzIzNTM1MmUzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/FDAN
BgkqhkiG9w0BAQsFAAOCAQEAvIJyNNPdrjRYqM8dcG+DHWBYwR3HPgx/0QqLYjGH
iFbb4ju+YAE+/koj18lz4d76slFj3wQzSKFGKRD+kAFwfsa0uHbbDo5A51tRTo1a
GS/RW6ncCiMAU3QjQ49WJDC4QX/lrvRRELCdh59023uGJCSQQrhD0wg7pj01hyDF
KIPgrDzFx5ff8FaZYyvBIsX/JMiM1RId3skTXR0m07bYPl0G5yd9jH9SqzuweJJj
EiZBaZ6KLC3kq/kEqITvbYtJMskotwjd9WLf+oVKisCfs5Jud2M1GKKIP5W9YYFJ
G18GmUqrKlF3tNWq8TXWvPrtQwGXUyeRbtU0JAVqlZ7+jA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:05 2025 by rpki-client