Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa
File: 3133312e37322e3234312e302f32342d3234203d3e203532333239.roa (raw, json)
Hash identifier: 4DXaiuYnfSrGKFRrUrCdDqxhnpt+D2cN4Jj+fvzhyKc=
Subject key identifier: 6B:70:50:99:D2:C6:18:87:58:71:09:83:30:CB:F2:5A:21:74:79:1B
Certificate issuer: /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial: 237674C6DFDDA65932ED85E8C5030743BC4464B3
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa
Signing time: Mon 13 Jan 2025 20:45:00 +0000
ROA not before: Mon 13 Jan 2025 20:40:00 +0000
ROA not after: Mon 12 Jan 2026 20:45:00 +0000
asID: 52329
IP address blocks: 131.72.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:76:74:c6:df:dd:a6:59:32:ed:85:e8:c5:03:07:43:bc:44:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Validity
Not Before: Jan 13 20:40:00 2025 GMT
Not After : Jan 12 20:45:00 2026 GMT
Subject: CN=6B705099D2C618875871098330CBF25A2174791B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:a3:22:69:e8:17:20:3b:6b:85:9e:63:d1:
f2:1e:72:f6:2c:56:f0:d9:eb:ac:39:29:18:16:17:
e2:74:4b:28:19:b4:3e:67:be:58:ed:80:7f:4b:66:
36:c8:ae:05:be:ba:78:5f:bc:ae:dd:c2:69:91:eb:
5e:a7:10:3e:cc:fe:7c:92:75:46:c6:c7:06:a9:79:
7a:7e:3c:b4:eb:d1:65:2e:b4:03:11:33:7f:a7:a2:
57:2a:0e:fb:56:22:59:ae:e4:84:1f:bd:e8:aa:19:
3e:b8:a5:bc:6d:9c:0f:b0:0b:4f:7b:b3:2d:0f:be:
b2:a5:af:cf:fe:0a:04:16:ad:47:33:d6:da:43:6f:
a4:88:6a:c7:ed:fc:e8:2e:21:10:d0:b0:fa:9b:28:
8d:54:3e:5a:64:3b:1c:fb:c5:2b:7c:89:7d:b7:a3:
ad:05:8e:44:17:99:34:e6:63:48:1f:c4:47:de:16:
14:6e:86:76:36:38:d1:b2:99:97:c6:94:b1:66:e7:
57:6a:d3:94:97:ca:3b:db:d3:96:47:1f:3f:b4:20:
20:c4:df:67:6a:ad:a8:df:31:ed:62:49:45:2e:76:
6e:78:87:15:bd:24:f6:4a:bf:c4:d1:a6:ff:a8:5a:
20:35:e4:57:19:5f:a8:40:7d:05:f2:91:05:35:dd:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:50:99:D2:C6:18:87:58:71:09:83:30:CB:F2:5A:21:74:79:1B
X509v3 Authority Key Identifier:
keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.241.0/24
Signature Algorithm: sha256WithRSAEncryption
06:60:d4:19:77:f2:2d:26:75:2a:68:5b:30:df:50:4a:e0:08:
da:c1:10:f8:0e:1d:bc:75:6c:34:c7:9e:9f:0e:5f:b2:c5:c2:
e9:38:a4:1c:1f:b1:58:43:aa:d5:ab:27:30:cd:e7:64:ce:59:
b6:ec:e4:dd:c9:52:d4:79:8d:20:ba:32:10:e2:1c:af:9d:ee:
91:6e:15:b7:bc:0e:85:30:99:b8:e1:5b:f2:40:fe:63:fb:aa:
97:6b:95:8f:49:d1:40:88:48:43:f2:45:5f:71:27:0b:49:63:
b3:0d:cf:7a:f1:1c:ed:fb:c6:94:c0:2d:c5:30:1c:14:ef:b8:
e6:2c:4b:7e:d1:1e:22:97:6b:fc:3f:38:09:54:e0:aa:d1:31:
56:17:ba:cc:53:9a:20:40:c9:37:a7:6d:50:ba:79:05:5d:a0:
53:87:e8:2d:83:e0:6e:9d:8e:b4:cb:70:0f:be:fe:2d:36:9f:
7d:85:26:4c:ba:99:fe:24:43:76:d5:e7:af:5b:20:5d:8d:cf:
bd:77:2e:6c:8b:a6:19:3a:29:f1:2a:6b:5d:99:ba:07:6a:13:
11:46:7b:81:30:d7:63:23:ae:2a:4c:a6:b1:82:40:89:be:7a:
e9:f9:80:96:ee:fd:dd:5e:64:7f:9d:b8:a9:db:e2:03:67:85:
43:88:b5:55
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI3Z0xt/dplky7YXoxQMHQ7xEZLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM4NjlCQUZCNUEzODgyRkI3Q0I2RDdGMjJGRDM2Njg1
OTYxQzVCNzAeFw0yNTAxMTMyMDQwMDBaFw0yNjAxMTIyMDQ1MDBaMDMxMTAvBgNV
BAMTKDZCNzA1MDk5RDJDNjE4ODc1ODcxMDk4MzMwQ0JGMjVBMjE3NDc5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeo6MiaegXIDtrhZ5j0fIecvYs
VvDZ66w5KRgWF+J0SygZtD5nvljtgH9LZjbIrgW+unhfvK7dwmmR616nED7M/nyS
dUbGxwapeXp+PLTr0WUutAMRM3+nolcqDvtWIlmu5IQfveiqGT64pbxtnA+wC097
sy0PvrKlr8/+CgQWrUcz1tpDb6SIasft/OguIRDQsPqbKI1UPlpkOxz7xSt8iX23
o60FjkQXmTTmY0gfxEfeFhRuhnY2ONGymZfGlLFm51dq05SXyjvb05ZHHz+0ICDE
32dqrajfMe1iSUUudm54hxW9JPZKv8TRpv+oWiA15FcZX6hAfQXykQU13WuJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUa3BQmdLGGIdYcQmDMMvyWiF0eRswHwYDVR0j
BBgwFoAU7Iabr7WjiC+3y21/Iv02aFlhxbcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTJFMkQyNTBGNUJBQUJFRjI2NEU5RTBBNTJGRjcxRThD
OUFDQkRDODc4MzVBNUJGQkM1QUZFRTY4OUM3MUVBLzAvRUM4NjlCQUZCNUEzODgy
RkI3Q0I2RDdGMjJGRDM2Njg1OTYxQzVCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzg2OUJBRkI1QTM4ODJGQjdD
QjZEN0YyMkZEMzY2ODU5NjFDNUI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzUyRTJEMjUwRjVCQUFCRUYyNjRFOUUwQTUyRkY3MUU4QzlBQ0JEQzg3
ODM1QTVCRkJDNUFGRUU2ODlDNzFFQS8wLzMxMzMzMTJlMzczMjJlMzIzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINI8TAN
BgkqhkiG9w0BAQsFAAOCAQEABmDUGXfyLSZ1KmhbMN9QSuAI2sEQ+A4dvHVsNMee
nw5fssXC6TikHB+xWEOq1asnMM3nZM5Ztuzk3clS1HmNILoyEOIcr53ukW4Vt7wO
hTCZuOFb8kD+Y/uql2uVj0nRQIhIQ/JFX3EnC0ljsw3PevEc7fvGlMAtxTAcFO+4
5ixLftEeIpdr/D84CVTgqtExVhe6zFOaIEDJN6dtULp5BV2gU4foLYPgbp2OtMtw
D77+LTaffYUmTLqZ/iRDdtXnr1sgXY3PvXcubIumGTop8SprXZm6B2oTEUZ7gTDX
YyOuKkymsYJAib566fmAlu793V5kf524qdviA2eFQ4i1VQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:48 2025 by rpki-client