Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
File: 34352e3233382e35362e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier: u3n5WqkswBTbvRrdWx9+f0rcP2qgs4D3v+el534MWfE=
Subject key identifier: 3D:EA:4E:EC:28:E5:72:F0:7E:C0:D2:FE:5A:D1:E7:CE:77:46:2B:C3
Certificate issuer: /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial: 0A8CB8DD6E7DBABE31C46A08AA6B2AEDFFE8FAA3
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:05:57 +0000
ROA not before: Tue 04 Feb 2025 18:00:57 +0000
ROA not after: Tue 03 Feb 2026 18:05:57 +0000
asID: 52468
IP address blocks: 45.238.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8c:b8:dd:6e:7d:ba:be:31:c4:6a:08:aa:6b:2a:ed:ff:e8:fa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Validity
Not Before: Feb 4 18:00:57 2025 GMT
Not After : Feb 3 18:05:57 2026 GMT
Subject: CN=3DEA4EEC28E572F07EC0D2FE5AD1E7CE77462BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:4e:71:88:2a:56:b9:aa:2d:08:e1:91:01:
f2:78:8d:2a:1f:bd:ba:1a:ca:e7:36:fd:e6:d3:41:
bf:53:e3:07:7d:b3:dd:87:5b:ff:00:bc:6b:a1:48:
38:ec:78:8e:28:27:49:ad:d8:f6:53:ec:16:03:28:
83:41:64:f3:57:11:cc:82:b7:8b:b1:5a:ac:7f:32:
e2:6b:32:b4:d9:cd:d7:c8:a4:42:ef:8d:2a:3a:41:
1f:0f:fd:a1:7d:2a:46:af:9f:7f:80:8a:bf:c2:ad:
de:06:e8:ab:30:5e:94:8a:c6:e2:e3:7d:1b:c5:1d:
e5:87:45:84:ef:76:bc:8b:84:05:6f:30:99:c6:69:
7c:2f:1f:3b:58:5f:bd:cf:27:d0:25:5b:52:c7:2b:
34:75:9d:14:02:58:22:6c:f0:63:5e:7a:8b:2b:d8:
74:23:f1:2c:75:97:0e:42:ba:04:d8:1d:0a:0a:b4:
8f:a9:f2:51:5a:2d:f3:47:96:36:34:03:55:28:3f:
9d:09:d2:7f:52:d8:5a:c3:fa:9a:3a:c0:eb:c5:b4:
69:2f:fa:f1:0f:99:ec:42:63:db:ec:84:5f:81:9b:
8b:90:81:5f:20:8c:cb:f8:1f:2d:2f:6d:60:da:8f:
6a:7e:7c:9f:78:e8:44:fa:68:bc:96:86:82:fb:83:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:4E:EC:28:E5:72:F0:7E:C0:D2:FE:5A:D1:E7:CE:77:46:2B:C3
X509v3 Authority Key Identifier:
keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.56.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a3:91:c0:ad:ea:80:47:69:c8:e4:5a:7d:96:1d:ed:20:7c:
f6:a2:45:de:6c:67:e4:65:b9:aa:7c:90:42:c8:55:aa:d2:3d:
74:be:8e:96:b0:c5:3b:f5:c9:cd:c1:96:05:2a:e3:7f:8f:25:
d5:f4:93:8f:b8:1c:dd:91:18:4f:2e:d2:60:7d:e3:67:55:6a:
5c:3f:56:4c:f4:ea:9d:0d:47:d8:ad:a3:b8:16:ff:7d:39:53:
a9:87:ac:45:1f:8c:01:a7:df:91:1d:5b:7d:b2:f3:b3:e5:76:
4a:fb:b1:23:1e:7e:97:65:a0:21:de:9a:b3:61:96:d3:ff:2d:
49:be:a1:f6:55:b6:eb:0b:13:b6:33:66:66:67:a5:82:38:f6:
d2:4c:20:54:b1:c4:51:c2:cb:db:cb:09:eb:76:8c:5e:4e:d6:
e2:a6:92:26:fe:27:df:df:af:9c:9f:15:c8:9e:bf:08:c1:cf:
43:70:79:8a:3b:24:43:91:c7:46:b2:4a:ec:2c:38:75:71:95:
6a:f2:b8:5f:02:f8:8a:f4:97:32:d3:2b:f6:ed:ae:e9:53:a9:
22:0f:81:80:34:0a:87:1b:67:d7:53:ac:da:45:b7:7d:a1:31:
65:1c:77:cf:9a:ac:a5:d7:74:1e:19:50:41:13:1f:99:e0:9c:
2c:47:a6:b3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCoy43W59ur4xxGoIqmsq7f/o+qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMDBDRTIyQTEzRTAzNjVCMjYzQzFCMDY4REU2MTJE
QjNGQTBDQzAeFw0yNTAyMDQxODAwNTdaFw0yNjAyMDMxODA1NTdaMDMxMTAvBgNV
BAMTKDNERUE0RUVDMjhFNTcyRjA3RUMwRDJGRTVBRDFFN0NFNzc0NjJCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbk5xiCpWuaotCOGRAfJ4jSof
vboayuc2/ebTQb9T4wd9s92HW/8AvGuhSDjseI4oJ0mt2PZT7BYDKINBZPNXEcyC
t4uxWqx/MuJrMrTZzdfIpELvjSo6QR8P/aF9Kkavn3+Air/Crd4G6KswXpSKxuLj
fRvFHeWHRYTvdryLhAVvMJnGaXwvHztYX73PJ9AlW1LHKzR1nRQCWCJs8GNeeosr
2HQj8Sx1lw5CugTYHQoKtI+p8lFaLfNHljY0A1UoP50J0n9S2FrD+po6wOvFtGkv
+vEPmexCY9vshF+Bm4uQgV8gjMv4Hy0vbWDaj2p+fJ946ET6aLyWhoL7gyrrAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUPepO7CjlcvB+wNL+WtHnzndGK8MwHwYDVR0j
BBgwFoAUtiAM4ioT4DZbJjwbBo3mEts/oMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjUyOTlGMTVDMDcyRUIzMzhDRDI3ODY2NDU3Rjc5ODM1
RTE4QTJGRDYzQzQ3MDAyQzFFRTMxRjM1OEY3MzdCLzAvQjYyMDBDRTIyQTEzRTAz
NjVCMjYzQzFCMDY4REU2MTJEQjNGQTBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjIwMENFMjJBMTNFMDM2NUIy
NjNDMUIwNjhERTYxMkRCM0ZBMENDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUY1Mjk5RjE1QzA3MkVCMzM4Q0QyNzg2NjQ1N0Y3OTgzNUUxOEEyRkQ2
M0M0NzAwMkMxRUUzMUYzNThGNzM3Qi8wLzM0MzUyZTMyMzMzODJlMzUzNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt7jgwDQYJ
KoZIhvcNAQELBQADggEBAGGjkcCt6oBHacjkWn2WHe0gfPaiRd5sZ+Rluap8kELI
VarSPXS+jpawxTv1yc3BlgUq43+PJdX0k4+4HN2RGE8u0mB942dValw/Vkz06p0N
R9ito7gW/305U6mHrEUfjAGn35EdW32y87Pldkr7sSMefpdloCHemrNhltP/LUm+
ofZVtusLE7YzZmZnpYI49tJMIFSxxFHCy9vLCet2jF5O1uKmkib+J9/fr5yfFcie
vwjBz0NweYo7JEORx0aySuwsOHVxlWryuF8C+Ir0lzLTK/btrulTqSIPgYA0Cocb
Z9dTrNpFt32hMWUcd8+arKXXdB4ZUEETH5ngnCxHprM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:40 2025 by rpki-client