Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa
File: 34352e3233312e33322e302f32322d3234203d3e20323731393632.roa (raw, json)
Hash identifier: EdQqlJRnIr6k73lclx1KVddI2zVwmuKHkBcdlhuMxxY=
Subject key identifier: A8:A6:9F:22:23:4D:AF:A7:27:BC:2C:4B:24:CB:F4:2C:15:78:EF:47
Certificate issuer: /CN=87E091F07582CDB18DC35420D191E643401A6D6F
Certificate serial: 7FB9070A3FCE884983DC5F60FF1488EC5FD89867
Authority key identifier: 87:E0:91:F0:75:82:CD:B1:8D:C3:54:20:D1:91:E6:43:40:1A:6D:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E091F07582CDB18DC35420D191E643401A6D6F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa
Signing time: Tue 04 Feb 2025 18:39:49 +0000
ROA not before: Tue 04 Feb 2025 18:34:49 +0000
ROA not after: Tue 03 Feb 2026 18:39:49 +0000
asID: 271962
IP address blocks: 45.231.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b9:07:0a:3f:ce:88:49:83:dc:5f:60:ff:14:88:ec:5f:d8:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87E091F07582CDB18DC35420D191E643401A6D6F
Validity
Not Before: Feb 4 18:34:49 2025 GMT
Not After : Feb 3 18:39:49 2026 GMT
Subject: CN=A8A69F22234DAFA727BC2C4B24CBF42C1578EF47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:bf:94:fa:55:5f:11:19:88:a5:70:11:31:
0f:42:15:63:8e:a9:70:88:d4:3b:21:b6:1a:62:c8:
a1:4d:5b:2d:31:c1:7c:ee:9d:32:fa:88:c7:45:06:
bf:dc:4b:69:69:46:dc:7c:a0:00:30:a6:f7:7d:6b:
48:08:73:6e:11:b3:6d:4f:e9:1f:91:56:e7:1f:a8:
15:2d:db:5b:f4:f1:d8:2e:34:a5:76:ba:3e:b8:c3:
22:7b:8c:5e:18:7e:8c:b3:e0:78:c1:2e:c3:a1:04:
61:8e:d7:28:c6:0f:2c:22:1f:e1:ee:4b:96:af:7a:
39:d9:c3:83:7d:a3:d7:8c:ff:e6:35:74:a4:41:b5:
49:bc:fc:cb:66:41:1c:d6:de:45:7b:44:a5:ea:35:
30:e2:b4:e6:a3:4f:4c:fc:83:e8:e1:32:63:bd:e1:
5a:77:a6:a3:2c:6b:54:04:c0:fe:00:c3:b6:bf:e4:
a7:1c:4e:ae:12:9c:91:93:93:b7:f9:7d:ab:19:eb:
88:be:7a:85:26:e2:5c:e3:4e:ab:88:b1:a7:8c:12:
f9:4a:1f:e5:21:4b:c7:8d:ea:d3:1c:ec:b5:5a:a1:
b6:39:05:aa:29:c5:23:f3:11:33:2e:40:67:6c:f4:
74:af:34:2c:91:fe:cc:87:14:c1:d1:f5:28:80:d6:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:9F:22:23:4D:AF:A7:27:BC:2C:4B:24:CB:F4:2C:15:78:EF:47
X509v3 Authority Key Identifier:
keyid:87:E0:91:F0:75:82:CD:B1:8D:C3:54:20:D1:91:E6:43:40:1A:6D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/87E091F07582CDB18DC35420D191E643401A6D6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E091F07582CDB18DC35420D191E643401A6D6F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.32.0/22
Signature Algorithm: sha256WithRSAEncryption
15:b0:0e:e9:27:32:91:ea:e0:aa:04:7f:85:e5:08:bf:e5:13:
65:9b:be:8d:e7:83:0d:82:75:9f:9e:1d:a3:b0:4c:40:af:af:
1b:e3:7c:1e:02:c7:a9:cc:26:2e:a2:da:e3:35:9d:5c:15:36:
26:02:10:62:d7:d5:3a:40:57:00:18:58:e3:ca:83:dd:e9:5f:
40:de:17:6a:d0:de:54:40:b7:45:ba:a7:5b:c9:12:fe:22:1b:
47:76:56:72:ea:68:7b:95:3b:e8:2b:6f:74:3d:43:2d:9f:6a:
b2:d1:62:86:e8:17:2c:04:f5:9d:dc:ec:88:9d:c6:82:3b:1e:
a6:2a:d6:d4:85:c7:fa:50:55:21:32:00:88:05:4c:4b:aa:18:
f7:a9:ce:06:85:cb:6b:5b:a4:d6:02:84:0a:bc:37:d8:52:9b:
0f:44:af:43:1d:c5:f5:4b:fe:4a:45:db:a8:bd:23:c5:65:33:
d5:03:40:f3:98:9b:13:a5:a1:21:bd:10:b7:86:fc:a0:43:32:
0b:46:0e:39:d9:fd:bf:b6:8d:61:e8:66:e8:84:77:20:37:f3:
0f:91:12:17:e2:d1:e2:06:a2:82:63:95:e4:bd:e9:ef:83:e7:
ea:d0:3a:0f:79:f0:37:eb:5f:8b:05:e9:bd:8d:71:08:46:26:
37:f1:af:25
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUf7kHCj/OiEmD3F9g/xSI7F/YmGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdFMDkxRjA3NTgyQ0RCMThEQzM1NDIwRDE5MUU2NDM0
MDFBNkQ2RjAeFw0yNTAyMDQxODM0NDlaFw0yNjAyMDMxODM5NDlaMDMxMTAvBgNV
BAMTKEE4QTY5RjIyMjM0REFGQTcyN0JDMkM0QjI0Q0JGNDJDMTU3OEVGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0r7+U+lVfERmIpXARMQ9CFWOO
qXCI1DshthpiyKFNWy0xwXzunTL6iMdFBr/cS2lpRtx8oAAwpvd9a0gIc24Rs21P
6R+RVucfqBUt21v08dguNKV2uj64wyJ7jF4Yfoyz4HjBLsOhBGGO1yjGDywiH+Hu
S5avejnZw4N9o9eM/+Y1dKRBtUm8/MtmQRzW3kV7RKXqNTDitOajT0z8g+jhMmO9
4Vp3pqMsa1QEwP4Aw7a/5KccTq4SnJGTk7f5fasZ64i+eoUm4lzjTquIsaeMEvlK
H+UhS8eN6tMc7LVaobY5BaopxSPzETMuQGds9HSvNCyR/syHFMHR9SiA1vJfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqKafIiNNr6cnvCxLJMv0LBV470cwHwYDVR0j
BBgwFoAUh+CR8HWCzbGNw1Qg0ZHmQ0AabW8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDE2NjI3MURDQUZDNjQ3NTlBNzNFM0NENjYyQUFERkY4
RDNEMzM0RUVGNTUzMDQwRURDNDA1MkM3QUFBMDM1LzAvODdFMDkxRjA3NTgyQ0RC
MThEQzM1NDIwRDE5MUU2NDM0MDFBNkQ2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84N0UwOTFGMDc1ODJDREIxOERD
MzU0MjBEMTkxRTY0MzQwMUE2RDZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQxNjYyNzFEQ0FGQzY0NzU5QTczRTNDRDY2MkFBREZGOEQzRDMzNEVF
RjU1MzA0MEVEQzQwNTJDN0FBQTAzNS8wLzM0MzUyZTMyMzMzMTJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTM5MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3nIDAN
BgkqhkiG9w0BAQsFAAOCAQEAFbAO6ScykergqgR/heUIv+UTZZu+jeeDDYJ1n54d
o7BMQK+vG+N8HgLHqcwmLqLa4zWdXBU2JgIQYtfVOkBXABhY48qD3elfQN4XatDe
VEC3RbqnW8kS/iIbR3ZWcupoe5U76CtvdD1DLZ9qstFihugXLAT1ndzsiJ3Ggjse
pirW1IXH+lBVITIAiAVMS6oY96nOBoXLa1uk1gKECrw32FKbD0SvQx3F9Uv+SkXb
qL0jxWUz1QNA85ibE6WhIb0Qt4b8oEMyC0YOOdn9v7aNYehm6IR3IDfzD5ESF+LR
4gaigmOV5L3p74Pn6tA6D3nwN+tfiwXpvY1xCEYmN/GvJQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:22 2025 by rpki-client