Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa
File: 34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa (raw, json)
Hash identifier: pGaWzqZk9Ab6xuvGWePdqEp0CPWzT4knEiqK0/4Dh48=
Subject key identifier: 18:7F:4B:D0:44:38:C9:F7:C2:A4:09:9B:BA:6C:67:94:67:90:AB:D9
Certificate issuer: /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial: 64739E65857745A7D2C2B4688BF1D59AA1C26DC2
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa
Signing time: Tue 04 Feb 2025 18:20:55 +0000
ROA not before: Tue 04 Feb 2025 18:15:55 +0000
ROA not after: Tue 03 Feb 2026 18:20:55 +0000
asID: 267878
IP address blocks: 45.175.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:73:9e:65:85:77:45:a7:d2:c2:b4:68:8b:f1:d5:9a:a1:c2:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Validity
Not Before: Feb 4 18:15:55 2025 GMT
Not After : Feb 3 18:20:55 2026 GMT
Subject: CN=187F4BD04438C9F7C2A4099BBA6C67946790ABD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:e8:06:64:60:d9:3a:d1:b3:d8:5e:94:d8:
3f:2a:5d:dd:5c:78:c5:7e:7a:db:36:43:bc:18:d6:
35:2a:4e:2a:2c:dc:3f:d4:0a:d6:28:0a:1f:cb:8d:
a2:7d:32:8f:f0:7a:47:d9:cf:f3:17:8a:6a:a6:c5:
19:e6:d3:19:91:54:0a:3c:9e:02:1a:bb:f3:26:59:
83:2f:54:ce:55:7c:4c:cb:e8:c6:de:cd:d5:73:4b:
6b:43:3e:84:8f:9a:66:28:76:90:67:3d:94:e6:2a:
bf:3d:02:d3:97:28:9f:6d:2a:fb:b4:f0:61:7d:78:
e5:b7:2f:95:e2:47:04:a3:82:5f:e3:cb:6f:84:f8:
78:6c:b0:48:f4:99:f2:52:9a:75:38:ff:e1:2d:71:
dc:be:59:c1:cc:27:72:bb:1c:dd:8b:40:e7:26:5f:
e7:e8:1f:c4:c9:4b:28:9b:79:bb:ba:64:24:5a:3a:
f3:d4:8a:75:39:31:f2:43:84:19:68:7b:a5:da:d3:
41:72:06:bb:e0:d9:a4:a0:d2:e7:59:45:4c:a0:b8:
c0:1a:4a:cc:0a:cc:8f:31:ba:73:1a:b4:7c:64:b7:
9f:89:be:fa:d7:eb:17:2e:7a:72:bd:82:c7:1b:f3:
01:3e:6e:e6:c9:83:3b:be:8d:e2:26:ff:7c:39:5f:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7F:4B:D0:44:38:C9:F7:C2:A4:09:9B:BA:6C:67:94:67:90:AB:D9
X509v3 Authority Key Identifier:
keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6a:84:f3:1f:b1:45:44:05:4b:91:90:3c:e7:d3:91:77:c8:
3f:43:f9:de:e9:a9:ac:32:7f:77:bd:78:51:79:77:0a:fc:da:
54:ea:58:61:2c:2c:55:d4:e4:d5:f1:61:d1:15:fb:a5:de:2b:
85:c6:86:58:6e:4a:9c:b8:27:1e:d7:65:9e:c3:79:a3:37:0f:
99:4b:e2:cf:1e:e8:81:bf:ae:e8:f0:c7:74:65:7e:09:9e:f3:
e0:6e:29:9f:9d:f1:92:8e:57:bc:d4:ec:d3:94:b3:ee:73:f0:
9f:1d:e1:52:87:27:c6:66:70:c0:e2:37:09:c2:ee:44:85:0d:
34:c5:36:e9:fd:32:72:88:90:33:f5:72:65:a9:be:47:d7:19:
71:90:4c:7b:74:49:37:c8:0a:14:ff:ff:51:23:b2:d5:db:97:
9a:d1:d4:0c:57:d4:51:12:95:f5:b9:7d:11:6e:e1:c4:f2:2b:
60:63:aa:a7:f4:d0:3d:35:e9:20:0a:76:85:fd:da:1b:e8:8e:
12:7f:3c:82:22:3f:f5:c2:e5:79:7d:7f:84:8b:bb:f7:43:9d:
31:f6:bf:ff:60:31:bc:3d:13:3f:6c:e1:cd:c1:e4:fc:2f:48:
a3:5b:68:ed:ee:58:ff:84:3c:a1:18:52:e0:a9:52:c2:93:7a:
00:97:a4:ac
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZHOeZYV3RafSwrRoi/HVmqHCbcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG
NTc2RDg4RDAeFw0yNTAyMDQxODE1NTVaFw0yNjAyMDMxODIwNTVaMDMxMTAvBgNV
BAMTKDE4N0Y0QkQwNDQzOEM5RjdDMkE0MDk5QkJBNkM2Nzk0Njc5MEFCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YugGZGDZOtGz2F6U2D8qXd1c
eMV+ets2Q7wY1jUqTios3D/UCtYoCh/LjaJ9Mo/wekfZz/MXimqmxRnm0xmRVAo8
ngIau/MmWYMvVM5VfEzL6MbezdVzS2tDPoSPmmYodpBnPZTmKr89AtOXKJ9tKvu0
8GF9eOW3L5XiRwSjgl/jy2+E+HhssEj0mfJSmnU4/+Etcdy+WcHMJ3K7HN2LQOcm
X+foH8TJSyibebu6ZCRaOvPUinU5MfJDhBloe6Xa00FyBrvg2aSg0udZRUyguMAa
SswKzI8xunMatHxkt5+JvvrX6xcuenK9gscb8wE+bubJgzu+jeIm/3w5X83HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGH9L0EQ4yffCpAmbumxnlGeQq9kwHwYDVR0j
BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0
QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0
NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF
OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE
QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wLzM0MzUyZTMxMzczNTJlMzEzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+V
MA0GCSqGSIb3DQEBCwUAA4IBAQCaaoTzH7FFRAVLkZA859ORd8g/Q/ne6amsMn93
vXhReXcK/NpU6lhhLCxV1OTV8WHRFful3iuFxoZYbkqcuCce12Wew3mjNw+ZS+LP
HuiBv67o8Md0ZX4JnvPgbimfnfGSjle81OzTlLPuc/CfHeFShyfGZnDA4jcJwu5E
hQ00xTbp/TJyiJAz9XJlqb5H1xlxkEx7dEk3yAoU//9RI7LV25ea0dQMV9RREpX1
uX0RbuHE8itgY6qn9NA9NekgCnaF/dob6I4SfzyCIj/1wuV5fX+Ei7v3Q50x9r//
YDG8PRM/bOHNweT8L0ijW2jt7lj/hDyhGFLgqVLCk3oAl6Ss
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:35 2025 by rpki-client