Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
File: 34352e3233392e3132302e302f32322d3234203d3e203631353033.roa (raw, json)
Hash identifier: 7fgQqumi0Dkkn2J/uD9JG43tU7acIBtRfM0EcN1wXHg=
Subject key identifier: F6:3D:BF:22:EE:D1:13:BA:17:95:AA:EE:96:02:69:44:D2:71:C7:EB
Certificate issuer: /CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Certificate serial: 131F2A73A64AA13CE4B033A2988CB9631FFF5244
Authority key identifier: 5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
Signing time: Tue 04 Feb 2025 18:32:42 +0000
ROA not before: Tue 04 Feb 2025 18:27:42 +0000
ROA not after: Tue 03 Feb 2026 18:32:42 +0000
asID: 61503
IP address blocks: 45.239.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1f:2a:73:a6:4a:a1:3c:e4:b0:33:a2:98:8c:b9:63:1f:ff:52:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Validity
Not Before: Feb 4 18:27:42 2025 GMT
Not After : Feb 3 18:32:42 2026 GMT
Subject: CN=F63DBF22EED113BA1795AAEE96026944D271C7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:02:68:b5:13:50:64:44:cd:2b:fb:31:54:
8e:1c:d8:a7:f6:96:bd:80:e5:9d:16:cc:db:f9:db:
23:9e:79:7b:2d:c6:10:ee:2e:69:67:8f:7a:37:af:
32:46:4b:1a:11:8a:a6:3c:cb:25:69:04:09:cc:7c:
70:97:d2:21:cd:d3:fd:d9:fd:be:a5:ed:f8:8d:b2:
84:9b:a8:97:e7:e7:d0:41:26:ca:a8:c2:ff:10:e3:
e5:4c:7a:d5:4f:05:dd:06:5d:79:2f:32:0d:b8:56:
e5:43:b7:c9:74:a4:91:12:c6:4a:26:8d:03:fe:c7:
05:2a:3f:6d:65:e3:f3:7a:0d:00:70:30:4d:35:39:
75:24:55:b5:2b:58:10:73:c8:31:6a:f8:d1:42:f5:
c4:0a:e7:2e:0b:2d:48:46:c2:d7:cf:e0:18:64:34:
da:ae:63:63:29:24:9c:3d:f0:ed:9a:3b:1f:8d:78:
53:34:5d:5c:ba:b0:a8:a3:e9:9f:7b:49:9c:be:88:
be:7c:9a:a1:9d:cc:4e:31:f9:c8:e4:b4:76:d1:28:
e4:ad:f0:7a:0b:2b:2d:02:ae:4e:8b:76:da:a2:21:
60:83:fc:21:3e:63:03:92:7b:8b:29:94:9e:25:e9:
42:ff:1b:b5:cf:e7:95:b7:d7:ad:16:3d:2a:c1:b9:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:BF:22:EE:D1:13:BA:17:95:AA:EE:96:02:69:44:D2:71:C7:EB
X509v3 Authority Key Identifier:
keyid:5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
22:a7:0f:64:41:e1:86:0e:e2:0e:7a:fd:18:62:e9:5f:f0:5f:
93:e0:10:7a:8c:69:0e:cc:f5:63:2b:94:ad:e6:6f:b7:9b:c3:
d8:73:0d:50:97:2d:de:f2:ad:d1:d6:0b:d2:39:09:91:ab:01:
e4:d9:88:db:fc:ac:b4:16:2c:00:88:ea:4c:32:0f:45:bc:35:
80:bd:f6:65:15:a4:7d:29:b4:bf:d2:e0:48:b3:34:72:68:59:
19:79:22:cd:46:82:bc:ac:13:fe:2b:de:a4:9d:f9:77:e2:28:
9c:be:34:3a:d6:c0:3c:95:62:84:2d:a7:6b:42:36:fe:31:35:
bb:5f:cc:1a:db:49:e6:36:ee:2f:be:5d:40:2e:4c:4c:da:31:
46:6c:39:27:27:d2:c0:6c:60:16:ab:6b:96:e5:26:7c:2a:00:
f1:88:a8:ea:e0:72:76:0c:33:ce:e0:4d:2a:5b:b6:9b:bb:1e:
a6:e9:65:29:ec:af:a4:77:e8:0b:9c:32:5d:2f:e0:41:71:79:
7f:73:15:67:93:3f:b8:67:d6:ac:40:41:9c:2e:50:05:fc:16:
44:69:05:54:f8:b7:59:4a:0f:0a:34:6c:77:91:10:99:1b:8c:
fe:d9:77:ae:8e:be:96:65:b5:eb:ed:b7:b3:1e:b5:95:bd:5f:
70:a1:40:7a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEx8qc6ZKoTzksDOimIy5Yx//UkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwQ0RERDVFRTdFN0ExNDVBOTY3NTM1Nzk3RDgzODUx
OEQ0RjRENzAeFw0yNTAyMDQxODI3NDJaFw0yNjAyMDMxODMyNDJaMDMxMTAvBgNV
BAMTKEY2M0RCRjIyRUVEMTEzQkExNzk1QUFFRTk2MDI2OTQ0RDI3MUM3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmgJotRNQZETNK/sxVI4c2Kf2
lr2A5Z0WzNv52yOeeXstxhDuLmlnj3o3rzJGSxoRiqY8yyVpBAnMfHCX0iHN0/3Z
/b6l7fiNsoSbqJfn59BBJsqowv8Q4+VMetVPBd0GXXkvMg24VuVDt8l0pJESxkom
jQP+xwUqP21l4/N6DQBwME01OXUkVbUrWBBzyDFq+NFC9cQK5y4LLUhGwtfP4Bhk
NNquY2MpJJw98O2aOx+NeFM0XVy6sKij6Z97SZy+iL58mqGdzE4x+cjktHbRKOSt
8HoLKy0Crk6LdtqiIWCD/CE+YwOSe4splJ4l6UL/G7XP55W3160WPSrBuYhBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9j2/Iu7RE7oXlarulgJpRNJxx+swHwYDVR0j
BBgwFoAUXwzd1e5+ehRalnU1eX2DhRjU9NcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjA3NEVEQTkzODBDNzc5MzhENjBEREMyNTEwM0E3MzND
RUY3ODU5NjY0RTgyQzc5NUVFMTlENzQxMUFCMzhBLzAvNUYwQ0RERDVFRTdFN0Ex
NDVBOTY3NTM1Nzk3RDgzODUxOEQ0RjRENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjBDRERENUVFN0U3QTE0NUE5
Njc1MzU3OTdEODM4NTE4RDRGNEQ3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYwNzRFREE5MzgwQzc3OTM4RDYwRERDMjUxMDNBNzMzQ0VGNzg1OTY2
NEU4MkM3OTVFRTE5RDc0MTFBQjM4QS8wLzM0MzUyZTMyMzMzOTJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3veDAN
BgkqhkiG9w0BAQsFAAOCAQEAIqcPZEHhhg7iDnr9GGLpX/Bfk+AQeoxpDsz1YyuU
reZvt5vD2HMNUJct3vKt0dYL0jkJkasB5NmI2/ystBYsAIjqTDIPRbw1gL32ZRWk
fSm0v9LgSLM0cmhZGXkizUaCvKwT/ivepJ35d+IonL40OtbAPJVihC2na0I2/jE1
u1/MGttJ5jbuL75dQC5MTNoxRmw5JyfSwGxgFqtrluUmfCoA8Yio6uBydgwzzuBN
Klu2m7sepullKeyvpHfoC5wyXS/gQXF5f3MVZ5M/uGfWrEBBnC5QBfwWRGkFVPi3
WUoPCjRsd5EQmRuM/tl3ro6+lmW16+23sx61lb1fcKFAeg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:49 2025 by rpki-client