Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138312e302f32342d3234203d3e20323734303134.roa
File: 3138312e3233332e3138312e302f32342d3234203d3e20323734303134.roa (raw, json)
Hash identifier: uh1OH8tD/FEwQ9492KJpPu4g8SuUYSGFhy/oTJrbl30=
Subject key identifier: 71:18:34:6A:6B:7A:87:93:0D:57:58:DC:C6:DF:A1:E0:A5:2C:90:97
Certificate issuer: /CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
Certificate serial: 67DDB7B2E96E68CA4927D27E21EF984FFA687BCD
Authority key identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138312e302f32342d3234203d3e20323734303134.roa
Signing time: Fri 14 Feb 2025 13:15:00 +0000
ROA not before: Fri 14 Feb 2025 13:10:00 +0000
ROA not after: Fri 13 Feb 2026 13:15:00 +0000
asID: 274014
IP address blocks: 181.233.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:dd:b7:b2:e9:6e:68:ca:49:27:d2:7e:21:ef:98:4f:fa:68:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
Validity
Not Before: Feb 14 13:10:00 2025 GMT
Not After : Feb 13 13:15:00 2026 GMT
Subject: CN=7118346A6B7A87930D5758DCC6DFA1E0A52C9097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:d3:78:1c:a5:36:90:b6:8c:b5:bd:21:4c:
1d:c8:4f:3d:e0:b9:9c:0a:9b:f7:c0:39:df:74:5d:
1e:37:8c:40:3a:02:4e:e0:ef:e3:99:a0:ea:35:ac:
2c:67:20:03:fb:c8:ac:7b:92:ee:70:84:c5:f8:4c:
47:9a:85:72:6e:aa:fa:48:d7:d4:c5:36:aa:c5:29:
8c:ba:41:3c:0c:9c:86:80:4a:40:d0:c8:2f:69:11:
a3:c7:4f:23:83:62:41:fb:10:52:29:6b:ca:d7:e3:
9b:04:7d:e1:e6:e7:17:cb:30:e7:f4:29:9c:f0:7d:
1b:1a:fb:fb:01:2f:a4:1e:7e:0d:0f:81:b9:83:0c:
0b:d5:bd:0c:87:8e:c2:5a:44:71:af:c4:ec:a0:f3:
b8:e5:0f:59:b7:c7:80:25:84:99:5c:c5:21:42:d6:
fe:42:3c:1b:43:54:a2:bd:a0:d5:67:5a:ef:4b:ee:
e8:95:7b:1a:29:3f:c1:c3:75:a8:82:4f:7a:b2:90:
a8:5f:af:a0:af:5a:4e:45:6c:d4:b7:50:25:58:91:
03:9b:69:34:ce:9f:6a:f1:21:4d:5c:56:ec:08:04:
fa:70:db:d8:5d:06:9f:60:bc:87:ce:a7:eb:77:f5:
d0:34:13:94:93:ff:79:0e:c5:4b:b4:01:fc:ca:df:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:18:34:6A:6B:7A:87:93:0D:57:58:DC:C6:DF:A1:E0:A5:2C:90:97
X509v3 Authority Key Identifier:
keyid:FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138312e302f32342d3234203d3e20323734303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.181.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:2a:c5:56:cb:b5:7d:59:e4:54:37:da:aa:5d:07:6f:dd:
01:b5:b1:88:f2:93:16:fb:1f:fd:e5:ad:63:6f:8e:ef:06:59:
18:76:02:6a:d5:77:92:34:16:d8:cd:e4:fe:92:b6:f7:0c:4d:
9f:95:92:c8:93:76:f5:07:90:2f:d2:8a:47:2a:6c:12:50:43:
b9:86:0f:d7:11:1c:1d:48:5b:a6:66:05:88:c4:5e:cd:b6:24:
4e:f3:6b:27:da:33:4a:96:a9:36:35:5c:5c:f4:9e:17:94:73:
42:72:df:10:70:2e:8c:06:df:a3:34:df:9b:b7:cb:25:18:66:
91:b3:42:27:55:aa:f6:65:d3:66:ff:a8:2e:89:4c:a7:74:e2:
18:2b:ab:52:28:11:f7:13:81:29:bd:5a:38:e2:bc:1f:fb:8c:
b9:96:6d:11:d9:5a:c8:f1:56:8e:fc:31:68:1d:bc:22:2b:c4:
62:5e:85:14:cf:d1:3b:4a:c9:d7:f2:de:37:09:04:17:ec:41:
83:36:5f:a2:68:53:a2:e9:9e:e8:e4:1d:c6:9c:92:d9:e7:7c:
eb:a2:62:cf:53:59:c6:8c:24:d3:bc:2a:76:d2:a2:6a:c4:85:
c4:8b:31:32:79:8b:a0:db:de:26:8a:49:8f:4d:94:4c:f8:df:
b8:af:97:6f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ923suluaMpJJ9J+Ie+YT/poe80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRBNUEzNTJGNEI4QTE1RkRBMEFDOUVEMkIzMjg5QzMy
MjJDQkFDRjAeFw0yNTAyMTQxMzEwMDBaFw0yNjAyMTMxMzE1MDBaMDMxMTAvBgNV
BAMTKDcxMTgzNDZBNkI3QTg3OTMwRDU3NThEQ0M2REZBMUUwQTUyQzkwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vdN4HKU2kLaMtb0hTB3ITz3g
uZwKm/fAOd90XR43jEA6Ak7g7+OZoOo1rCxnIAP7yKx7ku5whMX4TEeahXJuqvpI
19TFNqrFKYy6QTwMnIaASkDQyC9pEaPHTyODYkH7EFIpa8rX45sEfeHm5xfLMOf0
KZzwfRsa+/sBL6Qefg0PgbmDDAvVvQyHjsJaRHGvxOyg87jlD1m3x4AlhJlcxSFC
1v5CPBtDVKK9oNVnWu9L7uiVexopP8HDdaiCT3qykKhfr6CvWk5FbNS3UCVYkQOb
aTTOn2rxIU1cVuwIBPpw29hdBp9gvIfOp+t39dA0E5ST/3kOxUu0AfzK3xORAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcRg0amt6h5MNV1jcxt+h4KUskJcwHwYDVR0j
BBgwFoAU/aWjUvS4oV/aCsntKzKJwyIsus8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMkYzQzUyMEIxNkYzNkEzQ0Q2NTAzM0Q2NzA1QkRFRjI3
MTEyODBCRUYzRjJBMDNBMjM4RERFRjJENTY3RkQ0LzAvRkRBNUEzNTJGNEI4QTE1
RkRBMEFDOUVEMkIzMjg5QzMyMjJDQkFDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GREE1QTM1MkY0QjhBMTVGREEw
QUM5RUQyQjMyODlDMzIyMkNCQUNGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDJGM0M1MjBCMTZGMzZBM0NENjUwMzNENjcwNUJERUYyNzExMjgwQkVG
M0YyQTAzQTIzOERERUYyRDU2N0ZENC8wLzMxMzgzMTJlMzIzMzMzMmUzMTM4MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzQzMDMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
6bUwDQYJKoZIhvcNAQELBQADggEBABlPKsVWy7V9WeRUN9qqXQdv3QG1sYjykxb7
H/3lrWNvju8GWRh2AmrVd5I0FtjN5P6StvcMTZ+VksiTdvUHkC/SikcqbBJQQ7mG
D9cRHB1IW6ZmBYjEXs22JE7zayfaM0qWqTY1XFz0nheUc0Jy3xBwLowG36M035u3
yyUYZpGzQidVqvZl02b/qC6JTKd04hgrq1IoEfcTgSm9WjjivB/7jLmWbRHZWsjx
Vo78MWgdvCIrxGJehRTP0TtKydfy3jcJBBfsQYM2X6JoU6LpnujkHcacktnnfOui
Ys9TWcaMJNO8KnbSomrEhcSLMTJ5i6Db3iaKSY9NlEz437ivl28=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:47 2025 by rpki-client