Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/34352e3233362e3132342e302f32322d3234203d3e20323636383031.roa
File: 34352e3233362e3132342e302f32322d3234203d3e20323636383031.roa (raw, json)
Hash identifier: hijaoQujvJiySPls//P1KLfnB17PkDfwtYFUngOJHrE=
Subject key identifier: 57:E0:9A:BF:C0:E6:B5:2F:72:88:97:E4:0C:6D:AC:A5:32:EE:08:82
Certificate issuer: /CN=A976892EB2868451AD737028E727E3BF1896C150
Certificate serial: 2AF9A313C50B533289D5F5C5855CC9026C567553
Authority key identifier: A9:76:89:2E:B2:86:84:51:AD:73:70:28:E7:27:E3:BF:18:96:C1:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A976892EB2868451AD737028E727E3BF1896C150.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/34352e3233362e3132342e302f32322d3234203d3e20323636383031.roa
Signing time: Tue 04 Feb 2025 20:06:45 +0000
ROA not before: Tue 04 Feb 2025 20:01:45 +0000
ROA not after: Tue 03 Feb 2026 20:06:45 +0000
asID: 266801
IP address blocks: 45.236.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f9:a3:13:c5:0b:53:32:89:d5:f5:c5:85:5c:c9:02:6c:56:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A976892EB2868451AD737028E727E3BF1896C150
Validity
Not Before: Feb 4 20:01:45 2025 GMT
Not After : Feb 3 20:06:45 2026 GMT
Subject: CN=57E09ABFC0E6B52F728897E40C6DACA532EE0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:ad:3a:70:21:ba:a4:84:40:27:6a:77:08:
31:82:a3:6a:58:a8:ad:0e:7a:34:08:65:10:a7:f0:
ed:1a:da:68:4f:39:a1:cc:0b:59:fd:8b:40:68:6e:
8b:fb:57:3c:65:1d:24:90:84:30:b7:64:c8:fd:43:
ac:4d:78:da:93:d1:63:8f:b8:d6:5f:75:44:82:fa:
67:eb:22:cc:17:dd:c3:6b:18:01:70:5e:3e:2d:c1:
14:fa:a1:84:d4:c6:24:10:07:f1:9e:66:a8:7c:c6:
4b:ea:9a:72:e2:56:93:ec:ed:40:bd:c4:1f:01:8c:
88:42:c6:10:8f:06:5f:2f:1b:93:40:8b:f1:6c:36:
75:b7:8e:d2:9e:73:c6:6a:96:78:c2:a5:21:c5:e8:
30:49:02:6f:3e:9b:ea:62:6a:91:76:1c:ff:b7:07:
20:94:44:3e:a4:51:d2:a7:c9:f7:18:c2:bc:24:a1:
6c:ce:ad:31:e8:fe:96:17:a5:d7:22:35:db:90:77:
5d:5f:7c:32:4f:78:2c:72:56:77:a1:d6:e2:0b:92:
b8:44:59:ea:7a:e5:0f:3c:c5:e1:fb:cb:f3:0c:15:
7d:95:ff:e5:02:df:45:28:83:45:e1:7c:d7:ee:a5:
e5:9b:24:a3:4e:56:2f:7b:76:08:b4:dc:fe:f2:ca:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:9A:BF:C0:E6:B5:2F:72:88:97:E4:0C:6D:AC:A5:32:EE:08:82
X509v3 Authority Key Identifier:
keyid:A9:76:89:2E:B2:86:84:51:AD:73:70:28:E7:27:E3:BF:18:96:C1:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/A976892EB2868451AD737028E727E3BF1896C150.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A976892EB2868451AD737028E727E3BF1896C150.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/34352e3233362e3132342e302f32322d3234203d3e20323636383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b2:b8:9a:f5:1c:a1:e2:78:c7:d7:6f:df:5b:49:c7:12:c7:
de:57:31:5c:83:bb:76:8f:0b:64:a4:e0:36:47:dd:50:2e:d9:
1d:20:93:d0:cb:7b:1d:69:d2:86:70:f4:eb:a7:9a:71:05:84:
8a:43:bd:07:1e:f1:8b:e9:c8:c2:71:4f:9a:a3:f4:22:9d:67:
8a:41:5b:8f:43:40:01:ac:17:c7:03:60:bb:72:13:f6:72:2e:
5e:8a:5a:1d:17:e5:1b:e9:77:7e:a9:45:32:29:e7:20:46:57:
fd:c7:e4:7b:42:c7:d7:0b:50:3d:92:fd:88:02:15:ec:e8:50:
30:f0:2c:e5:aa:ff:fc:72:c8:7e:94:4f:54:d9:e9:64:f7:95:
5e:9e:9e:c6:df:04:87:fe:1e:a7:76:d0:14:77:5c:64:92:d5:
2c:33:dc:5d:65:73:8c:86:08:60:14:a0:35:e1:db:45:e4:52:
7a:90:bd:bf:c1:31:29:41:e6:35:0e:91:5f:aa:ff:db:07:c4:
7d:b7:76:6a:fa:44:63:3b:e8:34:42:96:9c:bf:d8:fd:f1:f5:
42:4f:62:98:3c:b4:4b:a5:1b:05:d7:2b:b9:5e:04:2a:54:4d:
33:fc:09:00:05:3c:35:e8:1f:67:dd:89:be:7f:f2:10:07:eb:
29:f8:52:7d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKvmjE8ULUzKJ1fXFhVzJAmxWdVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk3Njg5MkVCMjg2ODQ1MUFENzM3MDI4RTcyN0UzQkYx
ODk2QzE1MDAeFw0yNTAyMDQyMDAxNDVaFw0yNjAyMDMyMDA2NDVaMDMxMTAvBgNV
BAMTKDU3RTA5QUJGQzBFNkI1MkY3Mjg4OTdFNDBDNkRBQ0E1MzJFRTA4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/a06cCG6pIRAJ2p3CDGCo2pY
qK0OejQIZRCn8O0a2mhPOaHMC1n9i0Bobov7VzxlHSSQhDC3ZMj9Q6xNeNqT0WOP
uNZfdUSC+mfrIswX3cNrGAFwXj4twRT6oYTUxiQQB/GeZqh8xkvqmnLiVpPs7UC9
xB8BjIhCxhCPBl8vG5NAi/FsNnW3jtKec8ZqlnjCpSHF6DBJAm8+m+piapF2HP+3
ByCURD6kUdKnyfcYwrwkoWzOrTHo/pYXpdciNduQd11ffDJPeCxyVneh1uILkrhE
Wep65Q88xeH7y/MMFX2V/+UC30Uog0XhfNfupeWbJKNOVi97dgi03P7yynz1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUV+Cav8DmtS9yiJfkDG2spTLuCIIwHwYDVR0j
BBgwFoAUqXaJLrKGhFGtc3Ao5yfjvxiWwVAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQkI3QjdBNDRDMDZFNTJFNEVFMkU3NDk5NzUyMTZGRThE
NkRFNTJGRjdGMTMyMDc1M0ZGMzE0MTY5MjIzRDlFLzAvQTk3Njg5MkVCMjg2ODQ1
MUFENzM3MDI4RTcyN0UzQkYxODk2QzE1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTc2ODkyRUIyODY4NDUxQUQ3
MzcwMjhFNzI3RTNCRjE4OTZDMTUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUJCN0I3QTQ0QzA2RTUyRTRFRTJFNzQ5OTc1MjE2RkU4RDZERTUyRkY3
RjEzMjA3NTNGRjMxNDE2OTIyM0Q5RS8wLzM0MzUyZTMyMzMzNjJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLex8
MA0GCSqGSIb3DQEBCwUAA4IBAQCLsria9Ryh4njH12/fW0nHEsfeVzFcg7t2jwtk
pOA2R91QLtkdIJPQy3sdadKGcPTrp5pxBYSKQ70HHvGL6cjCcU+ao/QinWeKQVuP
Q0ABrBfHA2C7chP2ci5eilodF+Ub6Xd+qUUyKecgRlf9x+R7QsfXC1A9kv2IAhXs
6FAw8Czlqv/8csh+lE9U2elk95Venp7G3wSH/h6ndtAUd1xkktUsM9xdZXOMhghg
FKA14dtF5FJ6kL2/wTEpQeY1DpFfqv/bB8R9t3Zq+kRjO+g0Qpacv9j98fVCT2KY
PLRLpRsF1yu5XgQqVE0z/AkABTw16B9n3Ym+f/IQB+sp+FJ9
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:08 2025 by rpki-client