Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa
File: 3230312e3133312e32332e302f32342d3234203d3e203238333939.roa (raw, json)
Hash identifier: EJwyMOco54Fs+gp11dH+mEXIARmadWIQp9qxh4Q2EWQ=
Subject key identifier: BA:1B:60:AE:1F:66:50:BE:D2:B9:56:54:39:0B:ED:C8:83:93:48:D7
Certificate issuer: /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial: 4AD1272C0957A11F10502FBA9FC3FDA86BC77AD9
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa
Signing time: Fri 17 Jan 2025 04:25:00 +0000
ROA not before: Fri 17 Jan 2025 04:20:00 +0000
ROA not after: Fri 16 Jan 2026 04:25:00 +0000
asID: 28399
IP address blocks: 201.131.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d1:27:2c:09:57:a1:1f:10:50:2f:ba:9f:c3:fd:a8:6b:c7:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Validity
Not Before: Jan 17 04:20:00 2025 GMT
Not After : Jan 16 04:25:00 2026 GMT
Subject: CN=BA1B60AE1F6650BED2B95654390BEDC8839348D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:12:b5:60:c5:f9:69:1b:78:53:ca:9d:0d:
10:4d:af:80:c5:0f:68:47:57:7f:76:b5:7a:61:ba:
78:4d:71:cd:0b:e5:e1:7e:6a:5d:99:bc:70:33:10:
ae:94:29:fc:9e:52:42:20:4f:33:c1:b7:74:39:60:
62:14:51:18:72:80:d0:a7:19:19:f0:7d:96:9b:96:
c8:3c:e9:69:4f:46:10:b6:5d:01:81:15:fd:a2:70:
25:08:0a:b8:a6:62:54:d6:cb:c0:7e:c5:b8:55:5b:
a0:67:76:3b:10:a3:b9:b5:01:32:54:1b:2e:29:45:
54:58:1a:1f:24:65:35:53:16:a6:e8:82:9c:c9:a0:
1b:24:cb:2d:ff:81:e1:2c:3c:11:32:ad:07:62:38:
68:38:6e:7c:b2:85:cd:63:30:ee:b7:d6:7c:a3:4c:
f2:ef:7d:8e:be:1b:8e:61:e1:6e:9c:5c:33:4e:ea:
73:40:0d:35:f5:11:65:00:4b:fe:27:0c:21:7b:b6:
77:19:f6:ce:85:89:30:87:e8:29:9f:40:77:a4:7c:
c5:4b:0f:a6:7a:01:ae:05:a9:c4:9d:42:2b:f7:0a:
10:89:29:52:e6:d7:26:54:84:1d:48:24:fb:2c:7c:
7b:e8:0f:d1:42:93:84:5c:c8:1b:52:d9:80:b8:d6:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:60:AE:1F:66:50:BE:D2:B9:56:54:39:0B:ED:C8:83:93:48:D7
X509v3 Authority Key Identifier:
keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:90:99:8f:9c:e9:58:4c:c1:08:49:8a:88:d9:d6:82:7c:e5:
d7:93:49:fe:60:68:c9:84:48:ab:11:1f:7f:ae:c6:ce:41:75:
34:c9:00:2a:d5:1e:dc:7b:9d:f4:5d:56:1a:66:fd:85:d6:54:
02:76:22:5a:ff:49:4e:be:58:ad:31:d5:fb:c6:08:50:ec:03:
72:53:2d:33:38:c8:7f:3f:7a:b5:d5:73:b6:c3:d6:6f:8f:a6:
00:63:ac:c0:ee:f9:bf:4a:d2:9e:e2:c0:95:51:62:0e:e7:bc:
d4:ce:e3:1a:7b:e3:e3:4a:4f:1b:02:70:9c:55:28:82:7d:b7:
1b:e5:c4:dc:df:e9:40:84:69:fe:78:d1:e5:13:be:2a:9e:ca:
20:8f:41:50:1c:fd:9a:8d:75:5b:f1:1c:74:36:0f:6c:c9:73:
13:09:81:a1:5c:c0:73:6d:43:04:57:ac:73:c8:4a:e6:c2:b3:
03:dc:a7:b5:6f:eb:9a:64:70:0f:5f:4e:ba:f7:b0:e9:52:44:
74:e5:62:e1:e0:79:92:7d:33:c5:6d:f4:db:9a:4d:6c:10:99:
06:d4:61:6c:72:01:81:0e:e3:1e:05:f3:04:cd:17:20:b7:d5:
63:4b:4a:60:b6:fb:fa:82:a8:03:7e:48:95:98:33:5b:ca:f2:
68:51:b4:eb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUStEnLAlXoR8QUC+6n8P9qGvHetkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5RDE1M0RBQTk5
QTdBOURBQzAeFw0yNTAxMTcwNDIwMDBaFw0yNjAxMTYwNDI1MDBaMDMxMTAvBgNV
BAMTKEJBMUI2MEFFMUY2NjUwQkVEMkI5NTY1NDM5MEJFREM4ODM5MzQ4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMhK1YMX5aRt4U8qdDRBNr4DF
D2hHV392tXphunhNcc0L5eF+al2ZvHAzEK6UKfyeUkIgTzPBt3Q5YGIUURhygNCn
GRnwfZablsg86WlPRhC2XQGBFf2icCUICrimYlTWy8B+xbhVW6BndjsQo7m1ATJU
Gy4pRVRYGh8kZTVTFqbogpzJoBskyy3/geEsPBEyrQdiOGg4bnyyhc1jMO631nyj
TPLvfY6+G45h4W6cXDNO6nNADTX1EWUAS/4nDCF7tncZ9s6FiTCH6CmfQHekfMVL
D6Z6Aa4FqcSdQiv3ChCJKVLm1yZUhB1IJPssfHvoD9FCk4RcyBtS2YC41vf1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuhtgrh9mUL7SuVZUOQvtyIOTSNcwHwYDVR0j
BBgwFoAUg05KPVs29QPMeZPZ0VPaqZp6nawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2
REFFNkQ5MEE4RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUw
M0NDNzk5M0Q5RDE1M0RBQTk5QTdBOURBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzRFNEEzRDVCMzZGNTAzQ0M3
OTkzRDlEMTUzREFBOTlBN0E5REFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3NzY1RkNCQTlFNkRBRTZEOTBB
OEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzMyMzAzMTJlMzEzMzMxMmUzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMzMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmDFzAN
BgkqhkiG9w0BAQsFAAOCAQEAPpCZj5zpWEzBCEmKiNnWgnzl15NJ/mBoyYRIqxEf
f67GzkF1NMkAKtUe3Hud9F1WGmb9hdZUAnYiWv9JTr5YrTHV+8YIUOwDclMtMzjI
fz96tdVztsPWb4+mAGOswO75v0rSnuLAlVFiDue81M7jGnvj40pPGwJwnFUogn23
G+XE3N/pQIRp/njR5RO+Kp7KII9BUBz9mo11W/EcdDYPbMlzEwmBoVzAc21DBFes
c8hK5sKzA9yntW/rmmRwD19Ouvew6VJEdOVi4eB5kn0zxW3025pNbBCZBtRhbHIB
gQ7jHgXzBM0XILfVY0tKYLb7+oKoA35IlZgzW8ryaFG06w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:56 2025 by rpki-client