Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203238343233.roa
File: 34352e3137362e3139312e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: kY2xDHCClENz0dJhHkGMlWb4RMqxLp61IZmVjMuuHGA=
Subject key identifier: AF:C0:9D:C0:A8:34:06:4F:6C:41:59:4C:5C:8B:9E:77:3A:E2:CC:FC
Certificate issuer: /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial: 1FBEE92213B2F95864840D1E0A6B69CCD539C757
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203238343233.roa
Signing time: Sun 26 Jan 2025 01:45:00 +0000
ROA not before: Sun 26 Jan 2025 01:40:00 +0000
ROA not after: Sun 25 Jan 2026 01:45:00 +0000
asID: 28423
IP address blocks: 45.176.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:be:e9:22:13:b2:f9:58:64:84:0d:1e:0a:6b:69:cc:d5:39:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
Validity
Not Before: Jan 26 01:40:00 2025 GMT
Not After : Jan 25 01:45:00 2026 GMT
Subject: CN=AFC09DC0A834064F6C41594C5C8B9E773AE2CCFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:3c:dc:e0:c1:6b:33:9f:a3:cf:a9:d5:bf:
d5:bc:57:dc:18:14:1c:7b:73:66:4b:8b:6c:f2:27:
ef:03:fe:b3:9f:13:6f:84:0d:78:66:58:6e:ff:f0:
11:bb:30:4b:96:cb:5c:37:fd:d1:56:32:6b:2c:2e:
68:78:79:07:05:c1:9d:85:7e:c8:cd:0e:24:10:fe:
55:d2:c6:0f:2a:39:84:57:b9:94:47:19:b0:fc:cf:
4c:80:3a:8b:ac:c8:66:46:ba:7e:df:e5:8f:31:1c:
35:db:97:2a:54:48:a4:fc:c5:ae:a3:3f:05:e7:03:
f5:66:15:ee:84:89:57:d7:2e:44:bf:da:a4:8e:d0:
22:1b:97:67:ea:82:65:70:07:93:6b:51:7f:6b:66:
17:32:a7:2c:2b:ec:0a:01:78:8e:0f:ff:c6:ec:34:
a7:5f:3f:85:5c:de:a1:04:d2:0f:28:f7:fa:07:e2:
62:05:e4:99:af:cd:7d:59:bb:96:08:db:cb:7d:35:
12:57:2f:22:9c:f4:7a:df:3d:72:93:75:b2:47:1d:
c5:39:3f:e4:e5:12:06:29:8d:0f:b6:db:7d:4b:5b:
b9:58:06:53:b9:84:75:f4:89:f8:b6:2a:4d:61:94:
57:34:e6:1f:70:a9:5e:38:ca:3c:b3:e6:58:ac:14:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:9D:C0:A8:34:06:4F:6C:41:59:4C:5C:8B:9E:77:3A:E2:CC:FC
X509v3 Authority Key Identifier:
keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:82:27:b2:b6:2e:6c:1b:7c:f1:41:00:79:e9:ae:bb:74:7b:
ea:55:82:d5:35:a2:d9:84:10:d2:a2:a5:1d:21:4b:52:dc:ab:
9f:f0:ba:20:cd:65:d4:07:93:f0:e4:3c:8b:fc:7d:c0:37:d2:
dd:46:b0:15:4f:d4:34:c2:a3:c3:7d:db:28:51:12:11:8a:88:
15:7f:40:30:29:78:74:f5:56:07:cb:35:96:eb:5c:45:ae:95:
7a:c8:78:a3:b7:58:f7:53:be:40:2b:70:67:d5:c2:04:be:d0:
8b:b3:7c:30:d8:b2:48:7b:09:4a:62:a4:d3:59:a5:48:74:cf:
6d:b4:d4:68:14:68:0a:99:e4:a4:d4:7d:e2:41:ad:da:16:16:
8f:ea:39:0d:e3:ca:4f:bf:8b:8a:56:e2:6c:45:2f:64:f7:1c:
f4:20:50:24:53:a3:e9:6e:68:60:ef:15:b1:04:3a:e6:31:d8:
2d:e0:70:c1:a9:83:c5:1f:57:9c:be:52:35:51:68:46:f0:f4:
9d:f9:08:17:5c:d5:df:1e:ff:2a:78:5b:ea:bc:ea:9a:04:29:
48:7c:98:03:f7:bb:b7:17:c0:65:c4:55:f0:04:3f:3a:03:98:
e3:5f:98:22:52:b9:61:3e:3a:e7:43:02:8d:36:e7:cc:20:8c:
e1:1d:35:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUH77pIhOy+VhkhA0eCmtpzNU5x1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFOTAwNUQxNUMxNTA1ODUzNDU2NjE1NkUwMEJCMDMy
NDRDOTExRDAeFw0yNTAxMjYwMTQwMDBaFw0yNjAxMjUwMTQ1MDBaMDMxMTAvBgNV
BAMTKEFGQzA5REMwQTgzNDA2NEY2QzQxNTk0QzVDOEI5RTc3M0FFMkNDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRTzc4MFrM5+jz6nVv9W8V9wY
FBx7c2ZLi2zyJ+8D/rOfE2+EDXhmWG7/8BG7MEuWy1w3/dFWMmssLmh4eQcFwZ2F
fsjNDiQQ/lXSxg8qOYRXuZRHGbD8z0yAOousyGZGun7f5Y8xHDXblypUSKT8xa6j
PwXnA/VmFe6EiVfXLkS/2qSO0CIbl2fqgmVwB5NrUX9rZhcypywr7AoBeI4P/8bs
NKdfP4Vc3qEE0g8o9/oH4mIF5JmvzX1Zu5YI28t9NRJXLyKc9HrfPXKTdbJHHcU5
P+TlEgYpjQ+2231LW7lYBlO5hHX0ifi2Kk1hlFc05h9wqV44yjyz5lisFHpvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUr8CdwKg0Bk9sQVlMXIuedzrizPwwHwYDVR0j
BBgwFoAUlOkAXRXBUFhTRWYVbgC7AyRMkR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDNFMEExQTBBNDQ0NTdCODlGQkQ4MDdERkQzQUQ2QTEw
QTQyRDE1QkU5NTVFRjc2OTA0NkY0NEFBOEE0MTJCLzAvOTRFOTAwNUQxNUMxNTA1
ODUzNDU2NjE1NkUwMEJCMDMyNDRDOTExRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEU5MDA1RDE1QzE1MDU4NTM0
NTY2MTU2RTAwQkIwMzI0NEM5MTFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjAzRTBBMUEwQTQ0NDU3Qjg5RkJEODA3REZEM0FENkExMEE0MkQxNUJF
OTU1RUY3NjkwNDZGNDRBQThBNDEyQi8wLzM0MzUyZTMxMzczNjJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2wvzAN
BgkqhkiG9w0BAQsFAAOCAQEAXYInsrYubBt88UEAeemuu3R76lWC1TWi2YQQ0qKl
HSFLUtyrn/C6IM1l1AeT8OQ8i/x9wDfS3UawFU/UNMKjw33bKFESEYqIFX9AMCl4
dPVWB8s1lutcRa6Vesh4o7dY91O+QCtwZ9XCBL7Qi7N8MNiySHsJSmKk01mlSHTP
bbTUaBRoCpnkpNR94kGt2hYWj+o5DePKT7+LilbibEUvZPcc9CBQJFOj6W5oYO8V
sQQ65jHYLeBwwamDxR9XnL5SNVFoRvD0nfkIF1zV3x7/Knhb6rzqmgQpSHyYA/e7
txfAZcRV8AQ/OgOY41+YIlK5YT4650MCjTbnzCCM4R01/w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client