Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32322e302f32342d3234203d3e203238333939.roa
File: 3230312e3133312e32322e302f32342d3234203d3e203238333939.roa (raw, json)
Hash identifier: WooyEEIFNPRinxlKlnLKzL923ePXUzkiYnecmET8T4c=
Subject key identifier: 31:CC:D3:BD:37:4C:85:1B:96:78:2F:4A:C9:A1:04:9E:EA:D8:60:C3
Certificate issuer: /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial: 64674353F4D3735C8552086F15C15455573552DD
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32322e302f32342d3234203d3e203238333939.roa
Signing time: Fri 17 Jan 2025 04:20:00 +0000
ROA not before: Fri 17 Jan 2025 04:15:00 +0000
ROA not after: Fri 16 Jan 2026 04:20:00 +0000
asID: 28399
IP address blocks: 201.131.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:67:43:53:f4:d3:73:5c:85:52:08:6f:15:c1:54:55:57:35:52:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Validity
Not Before: Jan 17 04:15:00 2025 GMT
Not After : Jan 16 04:20:00 2026 GMT
Subject: CN=31CCD3BD374C851B96782F4AC9A1049EEAD860C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:6d:25:8e:b4:b8:8f:63:8d:57:b9:fc:be:
9e:a3:17:76:9f:b5:63:24:5f:fd:56:b0:14:49:4b:
47:27:4d:ea:25:40:c7:91:af:49:d4:ea:84:cb:52:
d5:af:7b:3a:41:f6:9b:a1:c6:25:60:ce:75:e7:b7:
f5:97:27:9e:b2:c0:0f:f3:99:2e:07:5a:d0:55:a8:
01:1c:2d:88:52:85:78:e5:08:38:f7:87:8c:d8:d2:
26:87:a8:de:1b:8a:7e:ea:de:02:1b:56:61:3e:dd:
c3:4d:e3:99:74:15:6e:d5:cb:70:d2:4b:ad:55:2b:
71:63:8b:16:2d:fc:6d:de:5f:bc:3e:92:d3:55:16:
af:ae:16:25:a7:df:f2:2b:68:c8:37:1e:42:5d:2c:
9f:2a:9a:38:08:f6:c4:f4:9a:b7:78:6c:d7:e6:14:
73:d6:d5:e4:63:eb:11:63:d3:32:74:5e:af:b1:bf:
28:47:c2:51:77:ed:e8:11:2f:49:e2:4c:f4:fa:89:
f1:10:4f:55:df:33:3d:90:06:ba:e2:23:c4:52:b9:
fe:1f:e9:4e:0f:93:bf:17:de:3a:4c:92:ec:df:13:
22:be:c2:8b:75:9a:43:d2:4d:57:49:47:84:63:3c:
f0:cb:05:47:28:7a:aa:b2:ab:9f:d4:e3:6a:88:76:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CC:D3:BD:37:4C:85:1B:96:78:2F:4A:C9:A1:04:9E:EA:D8:60:C3
X509v3 Authority Key Identifier:
keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32322e302f32342d3234203d3e203238333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.22.0/24
Signature Algorithm: sha256WithRSAEncryption
83:07:e5:47:9d:20:a1:f4:9b:81:3f:4b:46:ee:ae:a0:63:af:
1b:69:79:27:2c:bf:99:6f:ce:af:90:93:54:40:e6:d4:30:48:
39:f4:c0:82:83:ac:b6:6d:bb:a6:30:69:0e:67:b6:64:a6:02:
00:ea:cc:1b:de:ba:ca:ea:b6:c0:fb:c0:5d:1f:4f:6f:7e:b5:
1f:fe:81:e1:31:d7:99:f5:6a:81:f6:db:0b:97:56:95:80:1e:
7a:d7:d6:d1:2b:88:3a:b4:3f:cd:9f:9f:48:d3:be:3c:77:28:
34:a3:fe:50:21:fd:da:7d:c7:f9:8f:77:5d:9a:c5:e4:47:d1:
62:6e:8e:fe:e7:87:2f:47:e1:b3:1c:39:e7:d3:ac:a0:55:38:
51:df:1c:be:ca:dd:9b:bd:91:fa:e9:0e:7a:6b:0a:ea:fc:81:
31:23:4c:22:3f:e2:3b:35:0d:4e:ba:ad:37:ea:df:4b:a5:a3:
49:47:8a:0f:32:00:68:c9:e6:bc:94:09:19:e2:bc:1c:23:b7:
c0:07:6c:37:27:9c:2e:f6:fd:cb:0b:97:d9:03:21:80:23:13:
a4:db:e2:a2:08:9f:ad:d6:e9:af:b7:dc:b1:4f:2c:a1:45:26:
93:c1:de:c2:f3:75:ff:8d:20:c0:6a:ed:2b:7f:91:78:92:ec:
4a:a8:5a:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZGdDU/TTc1yFUghvFcFUVVc1Ut0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5RDE1M0RBQTk5
QTdBOURBQzAeFw0yNTAxMTcwNDE1MDBaFw0yNjAxMTYwNDIwMDBaMDMxMTAvBgNV
BAMTKDMxQ0NEM0JEMzc0Qzg1MUI5Njc4MkY0QUM5QTEwNDlFRUFEODYwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPG0ljrS4j2ONV7n8vp6jF3af
tWMkX/1WsBRJS0cnTeolQMeRr0nU6oTLUtWvezpB9puhxiVgznXnt/WXJ56ywA/z
mS4HWtBVqAEcLYhShXjlCDj3h4zY0iaHqN4bin7q3gIbVmE+3cNN45l0FW7Vy3DS
S61VK3FjixYt/G3eX7w+ktNVFq+uFiWn3/IraMg3HkJdLJ8qmjgI9sT0mrd4bNfm
FHPW1eRj6xFj0zJ0Xq+xvyhHwlF37egRL0niTPT6ifEQT1XfMz2QBrriI8RSuf4f
6U4Pk78X3jpMkuzfEyK+wot1mkPSTVdJR4RjPPDLBUcoeqqyq5/U42qIdjjJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMczTvTdMhRuWeC9KyaEEnurYYMMwHwYDVR0j
BBgwFoAUg05KPVs29QPMeZPZ0VPaqZp6nawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2
REFFNkQ5MEE4RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUw
M0NDNzk5M0Q5RDE1M0RBQTk5QTdBOURBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzRFNEEzRDVCMzZGNTAzQ0M3
OTkzRDlEMTUzREFBOTlBN0E5REFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3NzY1RkNCQTlFNkRBRTZEOTBB
OEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzMyMzAzMTJlMzEzMzMxMmUzMjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMzMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmDFjAN
BgkqhkiG9w0BAQsFAAOCAQEAgwflR50gofSbgT9LRu6uoGOvG2l5Jyy/mW/Or5CT
VEDm1DBIOfTAgoOstm27pjBpDme2ZKYCAOrMG966yuq2wPvAXR9Pb361H/6B4THX
mfVqgfbbC5dWlYAeetfW0SuIOrQ/zZ+fSNO+PHcoNKP+UCH92n3H+Y93XZrF5EfR
Ym6O/ueHL0fhsxw559OsoFU4Ud8cvsrdm72R+ukOemsK6vyBMSNMIj/iOzUNTrqt
N+rfS6WjSUeKDzIAaMnmvJQJGeK8HCO3wAdsNyecLvb9ywuX2QMhgCMTpNviogif
rdbpr7fcsU8soUUmk8HewvN1/40gwGrtK3+ReJLsSqhalQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:26 2025 by rpki-client