Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
File: 34352e3138332e34322e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier: jxm96wESn+yJY2Yb3eVoWp11kMgYiOjQaXrmAH/JMhg=
Subject key identifier: D6:72:32:40:67:F4:AB:4C:2F:9D:80:B6:9C:A0:82:88:A6:E2:66:C4
Certificate issuer: /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial: 6AE9BB3895BD17946F750243EA670E841A9FE1DB
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
Signing time: Tue 04 Feb 2025 19:59:56 +0000
ROA not before: Tue 04 Feb 2025 19:54:56 +0000
ROA not after: Tue 03 Feb 2026 19:59:56 +0000
asID: 3549
IP address blocks: 45.183.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e9:bb:38:95:bd:17:94:6f:75:02:43:ea:67:0e:84:1a:9f:e1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
Validity
Not Before: Feb 4 19:54:56 2025 GMT
Not After : Feb 3 19:59:56 2026 GMT
Subject: CN=D672324067F4AB4C2F9D80B69CA08288A6E266C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:c6:89:e1:57:34:8e:6c:33:d3:bc:2f:17:
f6:83:78:98:5d:05:8c:76:2c:6e:bf:d9:5b:d0:a7:
c1:0c:03:e2:05:48:12:87:e9:71:00:48:b2:58:44:
69:53:15:a5:12:6c:a9:43:bd:52:81:f9:9d:47:1f:
43:80:9a:0a:78:e9:53:54:a1:2f:96:b1:46:8d:f4:
07:9a:69:42:5e:ba:91:f1:1b:00:2a:5b:75:4f:67:
ba:f4:56:cf:d1:68:ca:b2:c9:c0:5a:e1:35:ee:50:
02:0b:1c:63:c3:e7:ea:6b:bf:8b:87:d5:bb:0f:e0:
fd:f7:76:84:92:64:a1:14:7e:e8:14:74:a7:ea:c7:
88:9a:ce:47:59:e5:8a:41:4c:af:9e:da:0b:eb:e2:
cb:dc:cd:d0:87:a0:c1:42:12:3a:13:f3:fd:68:8f:
6d:d7:7c:3e:d5:a1:53:39:31:29:93:79:49:0e:98:
e3:37:8c:9e:f1:f4:8f:ca:8a:f2:cc:ab:18:7d:4a:
07:62:19:42:33:b3:09:60:6a:d0:c4:99:ab:4a:c4:
fa:d1:cc:cf:ed:09:a1:38:fb:21:fb:cd:3a:6a:66:
2e:67:0e:5b:33:c0:c9:e6:01:68:86:aa:11:9b:2b:
e0:11:d1:54:05:6f:9b:e9:f0:f1:bf:5d:7c:49:47:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:32:40:67:F4:AB:4C:2F:9D:80:B6:9C:A0:82:88:A6:E2:66:C4
X509v3 Authority Key Identifier:
keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.183.42.0/23
Signature Algorithm: sha256WithRSAEncryption
90:db:d5:27:4c:9e:52:e6:d3:11:a4:a9:14:38:61:e0:3e:6e:
bb:ac:c0:12:09:0b:5e:34:ca:97:60:7a:a3:3c:11:de:82:e4:
54:49:71:c8:02:d5:78:f4:4a:be:6b:00:a3:48:29:2a:7a:e0:
a7:d0:44:af:81:ac:da:0c:ea:b4:a3:2b:8d:cd:52:c3:41:52:
1b:ed:9d:03:cd:5c:4e:f3:9d:1d:4f:91:c4:5d:83:c1:3f:e7:
88:b5:0e:09:a2:5c:e9:1b:65:25:04:58:1c:de:7f:2c:33:21:
0b:87:95:94:9b:63:be:f7:e4:df:a0:d3:90:44:44:1b:04:e6:
fe:55:8f:b5:58:fb:ee:34:47:31:54:41:90:01:4b:f9:fe:c5:
c8:7b:10:32:b5:f2:4c:c3:dc:ed:36:33:3e:f8:ca:c6:9e:11:
60:94:94:ce:fa:13:1d:b7:2c:44:64:83:df:99:41:e4:27:39:
c0:33:b5:35:d8:78:66:63:ce:3e:e3:b5:9b:8b:06:d8:2d:da:
cc:db:91:f7:5a:b1:25:46:e3:5f:ee:98:d6:55:e8:ce:77:c4:
62:72:b5:63:e8:28:d8:8f:8f:07:50:26:df:ee:9c:8d:a6:09:
b9:30:98:4b:9e:77:2c:d9:1f:4d:a9:d3:89:67:cf:10:b9:9d:
90:97:11:c8
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUaum7OJW9F5RvdQJD6mcOhBqf4dswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxMDE3NTQwNDM0MUUzOUIzN0Y4MjREODU1ODUwNjU4
MzhERjBCNTAeFw0yNTAyMDQxOTU0NTZaFw0yNjAyMDMxOTU5NTZaMDMxMTAvBgNV
BAMTKEQ2NzIzMjQwNjdGNEFCNEMyRjlEODBCNjlDQTA4Mjg4QTZFMjY2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNC8aJ4Vc0jmwz07wvF/aDeJhd
BYx2LG6/2VvQp8EMA+IFSBKH6XEASLJYRGlTFaUSbKlDvVKB+Z1HH0OAmgp46VNU
oS+WsUaN9AeaaUJeupHxGwAqW3VPZ7r0Vs/RaMqyycBa4TXuUAILHGPD5+prv4uH
1bsP4P33doSSZKEUfugUdKfqx4iazkdZ5YpBTK+e2gvr4svczdCHoMFCEjoT8/1o
j23XfD7VoVM5MSmTeUkOmOM3jJ7x9I/KivLMqxh9SgdiGUIzswlgatDEmatKxPrR
zM/tCaE4+yH7zTpqZi5nDlszwMnmAWiGqhGbK+AR0VQFb5vp8PG/XXxJRwhHAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU1nIyQGf0q0wvnYC2nKCCiKbiZsQwHwYDVR0j
BBgwFoAUghAXVAQ0Hjmzf4JNhVhQZYON8LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjk2NUE0RjA4MDZERDZDREQwRUM0MEYwNDkxQUYxRjU5
QzZFRjM5Njk3NzQyNkVCRkQxNDJFNTBCRjM3MkVFLzAvODIxMDE3NTQwNDM0MUUz
OUIzN0Y4MjREODU1ODUwNjU4MzhERjBCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjEwMTc1NDA0MzQxRTM5QjM3
RjgyNEQ4NTU4NTA2NTgzOERGMEI1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI5NjVBNEYwODA2REQ2Q0REMEVDNDBGMDQ5MUFGMUY1OUM2RUYzOTY5
Nzc0MjZFQkZEMTQyRTUwQkYzNzJFRS8wLzM0MzUyZTMxMzgzMzJlMzQzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbcqMA0GCSqG
SIb3DQEBCwUAA4IBAQCQ29UnTJ5S5tMRpKkUOGHgPm67rMASCQteNMqXYHqjPBHe
guRUSXHIAtV49Eq+awCjSCkqeuCn0ESvgazaDOq0oyuNzVLDQVIb7Z0DzVxO850d
T5HEXYPBP+eItQ4JolzpG2UlBFgc3n8sMyELh5WUm2O+9+TfoNOQREQbBOb+VY+1
WPvuNEcxVEGQAUv5/sXIexAytfJMw9ztNjM++MrGnhFglJTO+hMdtyxEZIPfmUHk
JznAM7U12HhmY84+47WbiwbYLdrM25H3WrElRuNf7pjWVejOd8RicrVj6CjYj48H
UCbf7pyNpgm5MJhLnncs2R9NqdOJZ88QuZ2QlxHI
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:13 2025 by rpki-client