Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3137302e38302e32302e302f32322d3234203d3e20323634363337.roa
File: 3137302e38302e32302e302f32322d3234203d3e20323634363337.roa (raw, json)
Hash identifier: 35fmXZYDUIy35SbZHwDwdKd8LIb+5boEkNvyvMUoqc0=
Subject key identifier: BD:BB:6C:DE:20:BE:3F:4E:8D:75:BB:6C:FC:07:74:3F:A1:F6:18:A9
Certificate issuer: /CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
Certificate serial: 0A24CD529B53CA567F7F9C3325D6CB71AE3EE783
Authority key identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3137302e38302e32302e302f32322d3234203d3e20323634363337.roa
Signing time: Tue 04 Feb 2025 18:22:08 +0000
ROA not before: Tue 04 Feb 2025 18:17:08 +0000
ROA not after: Tue 03 Feb 2026 18:22:08 +0000
asID: 264637
IP address blocks: 170.80.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:24:cd:52:9b:53:ca:56:7f:7f:9c:33:25:d6:cb:71:ae:3e:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
Validity
Not Before: Feb 4 18:17:08 2025 GMT
Not After : Feb 3 18:22:08 2026 GMT
Subject: CN=BDBB6CDE20BE3F4E8D75BB6CFC07743FA1F618A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:16:1e:f4:f4:fb:ca:c5:b6:13:f0:4e:93:
64:92:4e:de:ff:1f:8f:f7:f2:74:50:62:15:22:e2:
89:c6:7b:32:d4:6b:a9:4e:04:2b:75:cf:0e:31:68:
bc:22:a9:1b:93:68:8b:0f:31:a9:e9:79:26:d3:e1:
c2:91:f5:58:48:e7:b6:34:e3:61:90:78:9b:56:7f:
10:c6:67:1e:fc:8a:bc:bd:5b:84:31:81:a4:33:65:
4e:87:4b:54:de:43:3a:b0:48:be:23:3a:aa:2d:96:
1d:10:80:c2:12:48:61:3a:15:87:88:b1:06:a6:6f:
bd:dd:7b:82:7b:60:46:e3:31:f6:36:3a:ed:1f:6e:
91:b4:3d:62:ff:8c:ce:60:31:97:b3:3e:73:77:11:
17:da:ca:be:b2:81:d0:fc:4b:df:18:b5:85:4c:70:
53:d2:c1:12:14:59:77:9e:32:93:b3:b0:02:8b:c2:
0c:a0:d9:99:7e:b3:3a:9d:9a:a2:04:84:b0:1e:9a:
6e:4a:8c:f3:dd:8d:86:6d:17:ed:41:cc:c3:b0:d5:
24:6e:a0:dc:20:df:c3:54:97:fb:1f:e2:fb:51:60:
36:91:d6:87:66:df:12:33:36:c6:58:b8:54:97:6d:
44:90:3e:b2:b5:80:2e:22:cd:fb:0a:2c:96:63:2e:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:6C:DE:20:BE:3F:4E:8D:75:BB:6C:FC:07:74:3F:A1:F6:18:A9
X509v3 Authority Key Identifier:
keyid:A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3137302e38302e32302e302f32322d3234203d3e20323634363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.20.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:89:5e:13:e4:78:2d:8e:88:4b:07:b2:e7:1d:89:a8:0a:0d:
ba:5f:03:7f:ad:29:79:14:bb:d9:d6:9c:de:9a:6a:a3:6d:0a:
a4:3d:15:6f:db:88:ec:0a:d4:ad:8f:81:db:7c:13:55:9c:14:
d1:32:79:fc:bc:83:96:f0:46:56:69:66:4f:ea:8a:60:f1:53:
db:5b:01:df:f6:1a:86:d1:96:f8:7d:9a:1b:21:da:c1:4e:68:
d9:6e:1f:ee:e5:a3:b0:6b:c4:b9:96:2c:d5:ff:ff:e0:89:8b:
36:18:73:30:0b:fd:10:49:d0:66:c0:f5:b8:99:28:5c:fb:ad:
87:21:df:50:06:c8:78:a0:eb:6d:3e:3c:ac:f8:95:5a:6e:f9:
ba:8a:fe:d2:3e:c5:6b:58:52:d2:08:03:d1:7a:cf:50:b1:26:
3b:6c:df:85:90:31:6e:af:5a:39:fa:3f:23:15:98:1c:8e:21:
91:1d:34:25:ba:e5:45:6c:8e:fb:ad:bc:ca:c3:bd:34:8d:28:
e4:32:7f:46:2f:57:08:31:92:fd:c9:14:57:a8:f3:b1:88:f5:
37:df:2d:e6:2a:b3:3a:e7:bb:f6:15:78:5f:32:52:b6:9d:72:
4a:ee:07:01:78:00:62:6e:73:73:0f:0a:c9:ae:91:1f:d7:04:
5f:94:6f:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCiTNUptTylZ/f5wzJdbLca4+54MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBRUM3RTM3MUNDQjc3RTlGNjE4NTQ3NTAzMkVDRjY2
RjVBRjhFNjAeFw0yNTAyMDQxODE3MDhaFw0yNjAyMDMxODIyMDhaMDMxMTAvBgNV
BAMTKEJEQkI2Q0RFMjBCRTNGNEU4RDc1QkI2Q0ZDMDc3NDNGQTFGNjE4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzBYe9PT7ysW2E/BOk2SSTt7/
H4/38nRQYhUi4onGezLUa6lOBCt1zw4xaLwiqRuTaIsPManpeSbT4cKR9VhI57Y0
42GQeJtWfxDGZx78iry9W4QxgaQzZU6HS1TeQzqwSL4jOqotlh0QgMISSGE6FYeI
sQamb73de4J7YEbjMfY2Ou0fbpG0PWL/jM5gMZezPnN3ERfayr6ygdD8S98YtYVM
cFPSwRIUWXeeMpOzsAKLwgyg2Zl+szqdmqIEhLAemm5KjPPdjYZtF+1BzMOw1SRu
oNwg38NUl/sf4vtRYDaR1odm3xIzNsZYuFSXbUSQPrK1gC4izfsKLJZjLt/DAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvbts3iC+P06Ndbts/Ad0P6H2GKkwHwYDVR0j
BBgwFoAUoK7H43HMt36fYYVHUDLs9m9a+OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0UwNDM2Mzk5MTVDRkQyQ0JBNzk0MjRBQzYzREQwRTY3
MkUyMjAyNDA0Mzg4RkRBMTY2NzFDRDJDREFBNzFDLzAvQTBBRUM3RTM3MUNDQjc3
RTlGNjE4NTQ3NTAzMkVDRjY2RjVBRjhFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEFFQzdFMzcxQ0NCNzdFOUY2
MTg1NDc1MDMyRUNGNjZGNUFGOEU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNFMDQzNjM5OTE1Q0ZEMkNCQTc5NDI0QUM2M0REMEU2NzJFMjIwMjQw
NDM4OEZEQTE2NjcxQ0QyQ0RBQTcxQy8wLzMxMzczMDJlMzgzMDJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpQFDAN
BgkqhkiG9w0BAQsFAAOCAQEA2YleE+R4LY6ISwey5x2JqAoNul8Df60peRS72dac
3ppqo20KpD0Vb9uI7ArUrY+B23wTVZwU0TJ5/LyDlvBGVmlmT+qKYPFT21sB3/Ya
htGW+H2aGyHawU5o2W4f7uWjsGvEuZYs1f//4ImLNhhzMAv9EEnQZsD1uJkoXPut
hyHfUAbIeKDrbT48rPiVWm75uor+0j7Fa1hS0ggD0XrPULEmO2zfhZAxbq9aOfo/
IxWYHI4hkR00JbrlRWyO+628ysO9NI0o5DJ/Ri9XCDGS/ckUV6jzsYj1N98t5iqz
Oue79hV4XzJStp1ySu4HAXgAYm5zcw8Kya6RH9cEX5RvkQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:47 2025 by rpki-client