Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: EXDvCk22pZY3/xHFO27d03POtv/Ks8bO3rQmUfnaAEU=
Subject key identifier: 04:24:71:5A:98:F4:19:0B:DB:F1:22:7D:5E:0A:C6:5B:4F:58:93:CA
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 2884B9FEE847D0BBB4C381640E80F5C6671952D1
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:36 +0000
ROA not before: Tue 04 Feb 2025 18:37:36 +0000
ROA not after: Tue 03 Feb 2026 18:42:36 +0000
asID: 21575
IP address blocks: 148.102.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:84:b9:fe:e8:47:d0:bb:b4:c3:81:64:0e:80:f5:c6:67:19:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:36 2025 GMT
Not After : Feb 3 18:42:36 2026 GMT
Subject: CN=0424715A98F4190BDBF1227D5E0AC65B4F5893CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:8b:03:a0:72:a4:0c:e3:4b:4e:aa:91:08:
2c:04:e0:44:e8:4b:18:3d:3d:cc:4f:76:44:54:d7:
ec:39:e7:19:30:70:30:6b:a2:d6:54:6a:9d:23:ad:
4a:c9:95:0e:c1:7e:0c:e8:53:62:c3:b2:d4:e8:63:
80:a9:7c:52:86:4b:96:c8:f8:b6:93:a7:f5:f4:3e:
97:20:ec:dd:12:b9:20:4a:7d:96:c1:1d:be:df:8e:
e7:4a:41:63:6a:40:1e:61:10:1b:56:69:64:08:08:
d8:51:b6:f5:42:e3:2b:f3:e2:9b:71:bf:a8:40:83:
bd:a0:d2:f5:34:2b:5d:da:5e:f0:04:71:bc:aa:05:
28:62:de:3d:70:58:f6:b6:7c:c1:3d:48:7c:af:cd:
36:4a:d0:4e:8b:be:74:f5:cf:eb:80:7d:dd:ad:db:
a6:51:04:e0:38:37:67:85:39:2e:96:64:67:e8:e8:
c7:f6:25:2e:56:f4:6b:b8:f9:ae:32:fe:c3:c7:bb:
7f:7a:25:90:13:5b:a7:62:6b:be:4b:d9:f6:a6:ad:
a4:4e:12:4c:a6:41:0c:64:c5:ea:61:50:d2:de:ca:
b3:51:4d:ce:2c:e7:7d:d9:26:53:e1:1c:3d:ab:9e:
54:63:9f:ad:de:61:d1:7c:ee:a4:74:a0:1d:d0:07:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:71:5A:98:F4:19:0B:DB:F1:22:7D:5E:0A:C6:5B:4F:58:93:CA
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:39:d6:13:1e:62:00:5f:14:db:9d:9d:73:e0:cf:14:b7:71:
80:28:20:0a:eb:22:b1:45:5a:8c:4d:8d:6c:19:c2:37:06:b9:
31:c5:d4:1b:9e:45:08:cf:b9:89:ea:2c:e4:29:78:61:21:1b:
0b:d0:f4:c7:ba:7e:ae:52:6a:0e:b5:d3:e6:88:84:45:65:bd:
da:a0:80:fd:3b:3f:b8:6b:74:31:df:e5:23:d4:b3:ee:b5:b7:
84:c1:7a:62:88:57:98:f5:b7:5b:72:1f:44:5f:a8:8d:fe:38:
71:ed:ff:d2:c3:48:e5:8b:8c:b5:2d:35:3d:32:0c:1b:47:16:
14:98:f2:7c:c6:c7:76:32:7d:7a:1f:19:c1:51:be:06:10:0b:
e4:df:5d:08:06:0b:6e:e0:d5:ec:d2:7d:38:49:9e:a3:1d:ec:
d6:47:6f:9b:88:21:0d:58:e3:b5:8f:cf:f2:6b:0c:a8:e3:b5:
b1:a9:16:4c:0b:86:68:78:10:fd:a7:96:ca:d7:22:e7:0b:00:
27:51:42:5d:83:0f:57:5f:27:b7:5d:f8:e8:29:ac:0a:21:36:
07:1b:37:7e:c3:0e:3f:f8:db:de:ad:17:ab:2e:db:2d:35:a9:
fd:22:dd:e1:47:44:ce:9b:50:eb:ab:fc:34:47:61:51:a8:eb:
63:0b:47:0b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKIS5/uhH0Lu0w4FkDoD1xmcZUtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC
M0E2NzhFNTAeFw0yNTAyMDQxODM3MzZaFw0yNjAyMDMxODQyMzZaMDMxMTAvBgNV
BAMTKDA0MjQ3MTVBOThGNDE5MEJEQkYxMjI3RDVFMEFDNjVCNEY1ODkzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D4sDoHKkDONLTqqRCCwE4ETo
Sxg9PcxPdkRU1+w55xkwcDBrotZUap0jrUrJlQ7BfgzoU2LDstToY4CpfFKGS5bI
+LaTp/X0Ppcg7N0SuSBKfZbBHb7fjudKQWNqQB5hEBtWaWQICNhRtvVC4yvz4ptx
v6hAg72g0vU0K13aXvAEcbyqBShi3j1wWPa2fME9SHyvzTZK0E6LvnT1z+uAfd2t
26ZRBOA4N2eFOS6WZGfo6Mf2JS5W9Gu4+a4y/sPHu396JZATW6dia75L2famraRO
EkymQQxkxephUNLeyrNRTc4s533ZJlPhHD2rnlRjn63eYdF87qR0oB3QB8ejAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBCRxWpj0GQvb8SJ9XgrGW09Yk8owHwYDVR0j
BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0
QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw
NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1
NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2
MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzQzODJlMzEzMDMyMmUzMTMwMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlGZo
MA0GCSqGSIb3DQEBCwUAA4IBAQCfOdYTHmIAXxTbnZ1z4M8Ut3GAKCAK6yKxRVqM
TY1sGcI3BrkxxdQbnkUIz7mJ6izkKXhhIRsL0PTHun6uUmoOtdPmiIRFZb3aoID9
Oz+4a3Qx3+Uj1LPutbeEwXpiiFeY9bdbch9EX6iN/jhx7f/Sw0jli4y1LTU9Mgwb
RxYUmPJ8xsd2Mn16HxnBUb4GEAvk310IBgtu4NXs0n04SZ6jHezWR2+biCENWOO1
j8/yawyo47WxqRZMC4ZoeBD9p5bK1yLnCwAnUUJdgw9XXye3XfjoKawKITYHGzd+
ww4/+NverRerLtstNan9It3hR0TOm1Drq/w0R2FRqOtjC0cL
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:34 2025 by rpki-client