Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa
File: 3230312e3135382e34382e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier: s+xJi7INKbWnh3QIi5f99zc5eBzq2KBkNG+UYa2zUGU=
Subject key identifier: 5E:5D:A6:B0:C1:C6:9F:EB:51:05:BC:BC:55:5E:74:61:6D:37:4B:30
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 03BD7DC81491EEBF26D6056CAA30BE96D595C6F3
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa
Signing time: Tue 04 Feb 2025 20:01:21 +0000
ROA not before: Tue 04 Feb 2025 19:56:21 +0000
ROA not after: Tue 03 Feb 2026 20:01:21 +0000
asID: 27884
IP address blocks: 201.158.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bd:7d:c8:14:91:ee:bf:26:d6:05:6c:aa:30:be:96:d5:95:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Feb 4 19:56:21 2025 GMT
Not After : Feb 3 20:01:21 2026 GMT
Subject: CN=5E5DA6B0C1C69FEB5105BCBC555E74616D374B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:1b:f7:96:ae:38:8b:a1:8b:93:5a:09:78:
5f:c7:ba:4f:fe:52:f7:df:c1:b5:2e:8e:d2:11:8f:
27:a7:f6:27:b6:db:e2:29:ce:18:9a:d5:db:ba:3b:
b4:7a:a6:56:fa:36:17:f9:13:6e:38:55:b4:91:7b:
50:b6:6e:b5:71:46:7a:3a:f6:ed:65:a2:d7:ed:48:
a8:39:2b:57:34:09:5a:f1:7c:55:5b:85:18:f3:6f:
35:20:19:5b:5b:da:8d:b0:44:e8:49:d1:9f:ff:82:
6a:32:68:99:1f:2c:34:b3:3d:df:3a:9b:de:cf:44:
a9:19:2e:03:99:10:d8:c2:40:ae:b0:df:be:61:28:
97:35:5a:56:ca:e7:df:fa:3e:79:8b:10:56:40:00:
5a:b3:59:06:2b:6c:32:92:f9:55:37:f2:27:bc:1f:
14:35:88:63:74:8a:ac:6b:09:e0:d3:a2:a0:18:93:
5a:42:44:93:b9:e3:0b:0c:7d:80:c8:15:cf:a1:bd:
63:44:ca:1a:b6:de:45:38:e2:ff:00:2e:bf:5a:70:
e7:0e:ee:31:6b:37:f1:8c:1b:42:b4:81:5e:d8:a6:
1f:b1:4d:3f:f1:9b:00:07:a2:68:21:69:60:76:25:
1a:6f:fd:64:64:e9:00:1c:f8:84:a4:22:b2:57:c1:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:A6:B0:C1:C6:9F:EB:51:05:BC:BC:55:5E:74:61:6D:37:4B:30
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3230312e3135382e34382e302f32322d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.48.0/22
Signature Algorithm: sha256WithRSAEncryption
68:3a:f1:1c:f1:31:09:2e:49:ab:64:93:c3:14:6d:9f:58:e0:
73:b9:d7:f3:b9:e1:96:72:99:cd:f8:f7:28:0f:e6:04:ae:3d:
c6:56:26:50:e3:4a:c7:81:80:06:ff:29:79:0f:0a:2f:be:cb:
e5:e5:c2:c1:0b:03:a4:7d:59:3e:a3:56:e1:8e:2c:9f:a0:73:
59:b1:a2:a3:00:db:3e:41:6d:ce:b1:43:43:a9:cc:3f:a4:13:
38:a0:4e:d1:f5:b8:23:8a:6f:c1:c3:fd:3f:e0:4e:4e:47:2d:
d6:50:c4:cd:04:10:e6:04:6e:b7:b4:07:14:3a:8a:2b:e8:e9:
5d:16:cc:1d:55:f3:c8:a5:61:c1:02:e9:13:c1:30:54:96:02:
80:b0:16:5f:44:21:07:a0:cc:af:4f:a1:6d:03:a3:c1:17:80:
77:d9:d3:71:5e:2f:16:0a:ce:04:e6:8b:dd:48:ab:e8:9a:93:
16:6f:16:c9:fa:4d:51:fd:db:ae:65:7b:3f:a4:4a:ec:fc:13:
f5:f1:5d:a9:10:69:85:08:87:06:bf:34:43:d2:f0:7d:df:63:
86:3e:6d:4c:44:7d:01:8b:6a:20:84:57:e4:df:15:b8:96:a7:
95:68:ce:3f:8c:4e:a5:4e:a7:a2:20:db:b4:28:6f:76:0a:2a:
df:42:4c:01
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA719yBSR7r8m1gVsqjC+ltWVxvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNTAyMDQxOTU2MjFaFw0yNjAyMDMyMDAxMjFaMDMxMTAvBgNV
BAMTKDVFNURBNkIwQzFDNjlGRUI1MTA1QkNCQzU1NUU3NDYxNkQzNzRCMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZxv3lq44i6GLk1oJeF/Huk/+
UvffwbUujtIRjyen9ie22+Ipzhia1du6O7R6plb6Nhf5E244VbSRe1C2brVxRno6
9u1lotftSKg5K1c0CVrxfFVbhRjzbzUgGVtb2o2wROhJ0Z//gmoyaJkfLDSzPd86
m97PRKkZLgOZENjCQK6w375hKJc1WlbK59/6PnmLEFZAAFqzWQYrbDKS+VU38ie8
HxQ1iGN0iqxrCeDToqAYk1pCRJO54wsMfYDIFc+hvWNEyhq23kU44v8ALr9acOcO
7jFrN/GMG0K0gV7Yph+xTT/xmwAHomghaWB2JRpv/WRk6QAc+ISkIrJXwblLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXl2msMHGn+tRBby8VV50YW03SzAwHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMyMzAzMTJlMzEzNTM4MmUzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmeMDAN
BgkqhkiG9w0BAQsFAAOCAQEAaDrxHPExCS5Jq2STwxRtn1jgc7nX87nhlnKZzfj3
KA/mBK49xlYmUONKx4GABv8peQ8KL77L5eXCwQsDpH1ZPqNW4Y4sn6BzWbGiowDb
PkFtzrFDQ6nMP6QTOKBO0fW4I4pvwcP9P+BOTkct1lDEzQQQ5gRut7QHFDqKK+jp
XRbMHVXzyKVhwQLpE8EwVJYCgLAWX0QhB6DMr0+hbQOjwReAd9nTcV4vFgrOBOaL
3Uir6JqTFm8WyfpNUf3brmV7P6RK7PwT9fFdqRBphQiHBr80Q9Lwfd9jhj5tTER9
AYtqIIRX5N8VuJanlWjOP4xOpU6noiDbtChvdgoq30JMAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:23 2025 by rpki-client