Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa
File: 34352e3233392e34372e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier: EtMCstzxZsRO1AxVaV0N+ju8W8y2wZY2dIAYF+2BWYU=
Subject key identifier: 8F:16:CF:4F:A7:7A:81:07:BE:EE:D4:8B:D6:34:F8:50:5B:31:32:E3
Certificate issuer: /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial: 1AD7735A875FE2F125772994641DE527D74F0343
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa
Signing time: Tue 04 Feb 2025 18:23:12 +0000
ROA not before: Tue 04 Feb 2025 18:18:12 +0000
ROA not after: Tue 03 Feb 2026 18:23:12 +0000
asID: 266858
IP address blocks: 45.239.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d7:73:5a:87:5f:e2:f1:25:77:29:94:64:1d:e5:27:d7:4f:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Validity
Not Before: Feb 4 18:18:12 2025 GMT
Not After : Feb 3 18:23:12 2026 GMT
Subject: CN=8F16CF4FA77A8107BEEED48BD634F8505B3132E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:ad:76:f4:05:5a:28:43:0a:65:5b:8b:57:
8b:6f:7a:9f:7f:02:ee:b8:71:ea:8d:f7:6e:0e:d6:
f3:9c:70:03:05:90:6f:57:7a:35:9c:41:15:0f:63:
64:f8:26:9e:a9:61:a7:a3:cb:c4:e0:c7:53:bd:70:
1c:48:2d:a4:b4:01:d7:de:bf:56:f0:44:46:68:8c:
28:32:99:6e:59:7e:35:96:41:53:21:f8:18:6f:24:
b1:50:f8:69:da:a0:04:2f:47:6a:c0:30:3d:03:c1:
47:26:1a:91:3a:f7:c6:8b:0d:24:07:0e:31:b3:34:
87:46:80:bb:c9:e4:5c:aa:9e:c3:c3:22:12:84:92:
03:11:4a:be:f9:71:c6:23:92:6c:3b:3c:b9:cc:e7:
9b:18:54:f8:fb:7c:bb:ee:b2:91:7e:11:db:80:95:
a3:5c:b8:6b:93:fc:63:f2:ae:d3:08:8c:84:02:ed:
b9:da:b2:7c:a7:28:1b:26:f2:fb:a4:60:65:3e:7b:
9d:48:0b:eb:66:35:42:6d:d4:9c:fb:cb:9c:74:1b:
eb:58:21:1e:4b:a1:15:52:49:54:8d:ef:05:41:d4:
85:03:37:d7:24:6e:cb:22:5f:c2:66:01:09:e9:32:
65:5b:78:57:70:3c:22:b9:cc:fe:7b:8c:46:4a:dd:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:CF:4F:A7:7A:81:07:BE:EE:D4:8B:D6:34:F8:50:5B:31:32:E3
X509v3 Authority Key Identifier:
keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6b:57:cd:b8:d4:d3:1a:31:b1:d9:24:47:e1:d1:ca:48:44:
0a:05:66:17:5a:88:a6:ba:05:3c:1c:1a:02:34:5d:dc:bd:c6:
d4:bc:5d:2e:2d:57:2c:27:62:45:37:0f:1a:39:e8:af:0e:be:
78:b0:27:1c:8f:51:52:73:ec:df:82:d6:69:c9:dd:ed:7b:e3:
17:08:bc:00:17:38:ae:80:39:3f:2d:35:f3:c6:28:33:98:9f:
67:74:e6:b1:d5:6d:8b:f9:25:23:61:40:7c:20:b6:d9:6d:51:
72:7d:5b:84:fe:94:56:07:df:64:92:93:2f:3a:63:2a:15:3c:
67:ad:11:e2:67:72:2a:e3:03:00:be:23:97:1f:a2:9a:84:2a:
b1:73:3c:99:de:79:c7:e6:29:63:4a:f7:47:71:76:ef:00:54:
3c:d6:e1:2f:31:c9:3b:2a:17:f5:a2:b5:5e:df:08:04:95:66:
24:d9:a8:da:ef:41:8a:5f:ed:a9:61:2b:3c:9a:00:ab:f5:35:
28:4a:fb:0f:b4:dd:05:36:17:f9:ac:7f:05:3a:0b:d9:76:df:
f0:58:ee:ff:24:96:9a:30:7c:40:fb:48:82:1e:e6:94:9a:bb:
e6:36:e5:59:3b:36:15:56:bc:f0:c1:89:bb:34:33:f8:d1:42:
1e:fc:60:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGtdzWodf4vEldymUZB3lJ9dPA0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCODlCRDJEQ0RBQjdCREZGOEY1NjhDMTAwQjI2OENB
MjJFNkJDMTAeFw0yNTAyMDQxODE4MTJaFw0yNjAyMDMxODIzMTJaMDMxMTAvBgNV
BAMTKDhGMTZDRjRGQTc3QTgxMDdCRUVFRDQ4QkQ2MzRGODUwNUIzMTMyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGa129AVaKEMKZVuLV4tvep9/
Au64ceqN924O1vOccAMFkG9XejWcQRUPY2T4Jp6pYaejy8Tgx1O9cBxILaS0Adfe
v1bwREZojCgymW5ZfjWWQVMh+BhvJLFQ+GnaoAQvR2rAMD0DwUcmGpE698aLDSQH
DjGzNIdGgLvJ5FyqnsPDIhKEkgMRSr75ccYjkmw7PLnM55sYVPj7fLvuspF+EduA
laNcuGuT/GPyrtMIjIQC7bnasnynKBsm8vukYGU+e51IC+tmNUJt1Jz7y5x0G+tY
IR5LoRVSSVSN7wVB1IUDN9ckbssiX8JmAQnpMmVbeFdwPCK5zP57jEZK3QlnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjxbPT6d6gQe+7tSL1jT4UFsxMuMwHwYDVR0j
BBgwFoAUirib0tzat73/j1aMEAsmjKIua8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzVBN0VDNkQ3RkUwMzRGNDgzRjE1MTkwQkQ4NUI2Nzk5
RTM2MEM5ODNBRDY1ODQ5RTBDRkQwNzdDMzc5NkE1LzAvOEFCODlCRDJEQ0RBQjdC
REZGOEY1NjhDMTAwQjI2OENBMjJFNkJDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUI4OUJEMkRDREFCN0JERkY4
RjU2OEMxMDBCMjY4Q0EyMkU2QkMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM1QTdFQzZEN0ZFMDM0RjQ4M0YxNTE5MEJEODVCNjc5OUUzNjBDOTgz
QUQ2NTg0OUUwQ0ZEMDc3QzM3OTZBNS8wLzM0MzUyZTMyMzMzOTJlMzQzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vLzAN
BgkqhkiG9w0BAQsFAAOCAQEAXGtXzbjU0xoxsdkkR+HRykhECgVmF1qIproFPBwa
AjRd3L3G1LxdLi1XLCdiRTcPGjnorw6+eLAnHI9RUnPs34LWacnd7XvjFwi8ABc4
roA5Py0188YoM5ifZ3TmsdVti/klI2FAfCC22W1Rcn1bhP6UVgffZJKTLzpjKhU8
Z60R4mdyKuMDAL4jlx+imoQqsXM8md55x+YpY0r3R3F27wBUPNbhLzHJOyoX9aK1
Xt8IBJVmJNmo2u9Bil/tqWErPJoAq/U1KEr7D7TdBTYX+ax/BToL2Xbf8Fju/ySW
mjB8QPtIgh7mlJq75jblWTs2FVa88MGJuzQz+NFCHvxg+A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:39 2025 by rpki-client