Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28018.roa
File: AS28018.roa (raw, json)
Hash identifier: Fo4hg8BtFEKCJkgsCX8ktjdK7OdxAGk9z/mKi1n3aA8=
Subject key identifier: 0A:8D:66:E8:93:EC:10:AC:F3:B0:40:7D:2B:D9:20:41:FA:61:72:B5
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 2C509ADA0D1C00D606A39361630471F01AB3F835
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28018.roa
Signing time: Tue 04 Feb 2025 18:02:45 +0000
ROA not before: Tue 04 Feb 2025 17:57:45 +0000
ROA not after: Tue 03 Feb 2026 18:02:45 +0000
asID: 28018
IP address blocks: 201.218.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:50:9a:da:0d:1c:00:d6:06:a3:93:61:63:04:71:f0:1a:b3:f8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:45 2025 GMT
Not After : Feb 3 18:02:45 2026 GMT
Subject: CN=0A8D66E893EC10ACF3B0407D2BD92041FA6172B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:64:dd:87:e3:1c:19:34:3b:d3:24:21:2c:
eb:1b:5b:ab:1b:4a:d6:4e:53:e3:f1:cb:d3:35:8c:
7d:13:6e:fb:4a:a8:5e:4d:a7:7d:b8:b5:77:bc:31:
99:28:01:fd:0d:23:06:27:dc:4d:25:62:e0:d5:e2:
92:da:f9:52:60:ba:89:b6:fb:ed:dc:01:63:e0:e1:
27:65:c0:49:e8:3b:c4:68:5a:b0:ce:11:99:db:67:
0a:4b:f5:e5:58:5d:85:cc:ef:08:65:a5:3f:3b:9d:
53:37:dc:4f:4c:88:f3:b1:48:fb:08:b0:ac:73:01:
a2:91:f6:9b:c4:c6:4c:59:88:39:2e:05:e0:72:e6:
0c:8a:5c:63:d8:80:e8:2f:34:95:06:2b:96:27:3d:
fb:8d:98:5a:5f:8e:50:38:93:05:e4:95:2c:44:87:
6e:21:35:33:57:30:9c:02:01:5a:24:e6:d8:32:b1:
42:5e:1d:8a:1a:77:51:49:80:99:99:1e:bd:9a:3a:
11:2b:b4:f5:0e:f4:4b:b2:76:41:6c:6f:89:05:f0:
05:3d:92:1c:9b:f3:e7:5b:5f:dc:b1:c4:e6:b4:87:
e0:d3:d0:20:0f:52:69:fb:77:3f:1d:1c:6e:cf:a1:
69:b7:11:cb:0d:59:40:f5:01:39:0a:27:e5:70:39:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:66:E8:93:EC:10:AC:F3:B0:40:7D:2B:D9:20:41:FA:61:72:B5
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:48:43:99:a2:ed:57:bd:da:80:d9:eb:52:c0:ff:95:0c:38:
61:0f:40:d3:7f:67:9e:90:70:a4:50:75:19:2c:28:81:4b:dc:
99:f6:e4:7b:7a:09:68:34:00:ec:c0:2b:69:c7:5d:8f:9e:e0:
58:77:7a:be:65:e1:64:4d:25:c6:80:52:ff:8a:03:85:e5:f1:
10:7b:ca:70:4b:a8:5f:f2:b3:ec:f7:3e:fd:01:b0:55:2b:3b:
fc:d0:d6:a4:ef:54:83:a9:9b:78:cf:fb:c1:c1:a6:a7:76:eb:
0d:f3:63:66:ca:0b:f0:da:67:ff:89:c0:d6:2e:c0:11:9b:2f:
65:71:a9:03:d6:0b:84:0b:cb:4f:4b:19:38:38:7d:e5:ab:02:
78:d4:54:14:c5:bb:e5:00:b8:8d:fa:5b:c5:5b:91:f1:df:69:
9b:ea:90:9d:a4:7f:ab:12:a8:42:78:65:a4:8a:36:90:0b:7b:
02:b2:62:2e:8d:5f:d2:2c:55:0e:4d:ce:53:e4:12:b7:fa:eb:
49:e9:db:b1:9e:b6:bf:10:fd:2e:bc:2e:f7:95:eb:6f:e1:cb:
ad:8a:5f:cf:8c:b1:11:4a:3a:82:18:af:03:af:e5:4a:e9:86:
49:d3:1a:c9:95:ee:c3:88:b1:df:3c:ac:8a:b9:f6:09:de:d8:
a3:cf:90:b9
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIULFCa2g0cANYGo5NhYwRx8Bqz+DUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDVaFw0yNjAyMDMxODAyNDVaMDMxMTAvBgNV
BAMTKDBBOEQ2NkU4OTNFQzEwQUNGM0IwNDA3RDJCRDkyMDQxRkE2MTcyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIGTdh+McGTQ70yQhLOsbW6sb
StZOU+Pxy9M1jH0TbvtKqF5Np324tXe8MZkoAf0NIwYn3E0lYuDV4pLa+VJguom2
++3cAWPg4SdlwEnoO8RoWrDOEZnbZwpL9eVYXYXM7whlpT87nVM33E9MiPOxSPsI
sKxzAaKR9pvExkxZiDkuBeBy5gyKXGPYgOgvNJUGK5YnPfuNmFpfjlA4kwXklSxE
h24hNTNXMJwCAVok5tgysUJeHYoad1FJgJmZHr2aOhErtPUO9EuydkFsb4kF8AU9
khyb8+dbX9yxxOa0h+DT0CAPUmn7dz8dHG7PoWm3EcsNWUD1ATkKJ+VwOaEVAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUCo1m6JPsEKzzsEB9K9kgQfphcrUwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG
RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyODAxOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMna4DAN
BgkqhkiG9w0BAQsFAAOCAQEAXUhDmaLtV73agNnrUsD/lQw4YQ9A039nnpBwpFB1
GSwogUvcmfbke3oJaDQA7MAracddj57gWHd6vmXhZE0lxoBS/4oDheXxEHvKcEuo
X/Kz7Pc+/QGwVSs7/NDWpO9Ug6mbeM/7wcGmp3brDfNjZsoL8Npn/4nA1i7AEZsv
ZXGpA9YLhAvLT0sZODh95asCeNRUFMW75QC4jfpbxVuR8d9pm+qQnaR/qxKoQnhl
pIo2kAt7ArJiLo1f0ixVDk3OU+QSt/rrSenbsZ62vxD9Lrwu95Xrb+HLrYpfz4yx
EUo6ghivA6/lSumGSdMayZXuw4ix3zysirn2Cd7Yo8+QuQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:47 2025 by rpki-client