Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
File: 34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa (raw, json)
Hash identifier: V6spAzEZWZ6mk+u5kDfkPLpWvizVTil0Ius9gcdeQQY=
Subject key identifier: D1:E3:7F:08:EB:F0:6D:3C:5C:9F:78:FD:57:B0:11:35:EC:E6:85:65
Certificate issuer: /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Certificate serial: 1C5BF15FB70F647277C9A80FDD844A33329F90D9
Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
Signing time: Tue 30 Apr 2024 12:45:00 +0000
ROA not before: Tue 30 Apr 2024 12:40:00 +0000
ROA not after: Tue 29 Apr 2025 12:45:00 +0000
asID: 266807
IP address blocks: 45.238.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5b:f1:5f:b7:0f:64:72:77:c9:a8:0f:dd:84:4a:33:32:9f:90:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Validity
Not Before: Apr 30 12:40:00 2024 GMT
Not After : Apr 29 12:45:00 2025 GMT
Subject: CN=D1E37F08EBF06D3C5C9F78FD57B01135ECE68565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:03:98:32:8e:38:16:4e:e7:6e:5b:e6:15:
6f:7c:98:77:f8:7d:d6:7f:b7:6b:e1:86:1f:54:4a:
61:4e:81:f2:00:a5:5f:65:85:f1:7d:26:77:9b:7b:
af:57:06:12:54:17:51:36:d8:1f:8b:30:55:1d:61:
e0:7d:c8:d5:38:eb:1f:ce:6b:4d:e1:9f:3d:48:e9:
bc:47:e0:f7:27:61:6a:9e:57:4c:ef:02:7f:77:02:
0f:e2:6c:cb:09:52:06:dc:d2:aa:91:dc:9a:93:80:
88:8c:4c:e8:fc:4c:9e:fa:cb:6c:9d:90:b5:03:ed:
08:46:de:f4:54:24:49:53:e5:c4:ea:85:48:ee:ef:
27:57:fc:9d:3f:be:f3:5f:54:0d:86:28:e7:ae:b0:
52:7a:76:12:b4:dc:8a:04:3b:92:f8:d8:90:97:5d:
15:2d:30:35:51:7e:4d:6a:d4:0d:07:38:37:f2:2b:
3b:65:f8:29:fe:01:bc:7a:8a:02:06:6d:e7:b2:cd:
d7:3f:dd:10:78:9d:f2:9a:bf:6e:53:f0:37:14:35:
27:00:8e:b9:4d:ae:04:e6:20:6a:ac:6f:14:bc:72:
5d:78:fb:e4:bb:8c:0a:f8:d5:9a:bc:95:79:c7:7a:
09:03:3c:26:58:ff:08:1e:59:45:be:85:6c:90:24:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:7F:08:EB:F0:6D:3C:5C:9F:78:FD:57:B0:11:35:EC:E6:85:65
X509v3 Authority Key Identifier:
keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.192.0/22
Signature Algorithm: sha256WithRSAEncryption
40:f9:62:9a:28:59:cb:00:00:90:3e:96:91:64:8c:c3:8f:b2:
75:5e:5b:42:81:f6:f8:38:b7:69:f7:97:44:41:96:50:d7:0e:
fd:1e:41:a2:47:6c:ee:15:5f:21:47:73:57:4b:9f:ff:fd:f8:
18:21:01:e1:cc:28:be:98:9b:ef:e0:b3:f2:cc:5f:28:ff:59:
bd:bb:d3:bf:f3:8c:ca:f0:ec:46:fc:80:ed:cb:f4:ff:ff:b0:
df:48:a3:d4:d6:fb:af:88:92:39:eb:1a:f7:5a:96:43:e8:0e:
fd:3f:96:1e:25:78:f3:64:42:fa:f4:31:c0:ab:24:50:db:2c:
aa:81:2c:56:3b:53:e6:d0:50:6e:78:66:e7:9f:9c:c4:21:75:
96:e1:ef:11:28:bb:e0:0a:c2:31:de:c9:33:2a:70:23:bb:42:
19:91:7c:a9:19:fc:e2:40:82:63:13:ed:5e:c2:d4:36:c6:16:
c2:e9:11:26:93:f8:d7:9d:8f:ef:e1:7b:6e:49:88:b8:c2:5b:
fb:5e:15:29:66:52:ca:51:d7:73:50:90:4b:38:2b:61:66:12:
78:ed:0e:0e:6c:f4:2c:5c:7f:b6:61:84:e2:c7:17:2f:04:cd:
bc:cf:50:b7:09:da:1a:08:d8:68:0f:ae:5a:c0:c7:a1:5a:37:
35:17:dc:e6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHFvxX7cPZHJ3yagP3YRKMzKfkNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBENjZCQzk1ODlCOTA2QjZBNTJBMzFENzE4N0ZFNjY4
NjExOERGQTAeFw0yNDA0MzAxMjQwMDBaFw0yNTA0MjkxMjQ1MDBaMDMxMTAvBgNV
BAMTKEQxRTM3RjA4RUJGMDZEM0M1QzlGNzhGRDU3QjAxMTM1RUNFNjg1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MAOYMo44Fk7nblvmFW98mHf4
fdZ/t2vhhh9USmFOgfIApV9lhfF9Jnebe69XBhJUF1E22B+LMFUdYeB9yNU46x/O
a03hnz1I6bxH4PcnYWqeV0zvAn93Ag/ibMsJUgbc0qqR3JqTgIiMTOj8TJ76y2yd
kLUD7QhG3vRUJElT5cTqhUju7ydX/J0/vvNfVA2GKOeusFJ6dhK03IoEO5L42JCX
XRUtMDVRfk1q1A0HODfyKztl+Cn+Abx6igIGbeeyzdc/3RB4nfKav25T8DcUNScA
jrlNrgTmIGqsbxS8cl14++S7jAr41Zq8lXnHegkDPCZY/wgeWUW+hWyQJE7zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0eN/COvwbTxcn3j9V7ARNezmhWUwHwYDVR0j
BBgwFoAUANZryVibkGtqUqMdcYf+ZoYRjfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDdDMTJFOENGQjEzMzIyODE2OUQ2RjBBNDg0RURBMEQ4
MTk2NzBCRTdFQjI0QjgwQTMzNDc3M0E0NjdDRTRELzAvMDBENjZCQzk1ODlCOTA2
QjZBNTJBMzFENzE4N0ZFNjY4NjExOERGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEQ2NkJDOTU4OUI5MDZCNkE1
MkEzMUQ3MTg3RkU2Njg2MTE4REZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQ3QzEyRThDRkIxMzMyMjgxNjlENkYwQTQ4NEVEQTBEODE5NjcwQkU3
RUIyNEI4MEEzMzQ3NzNBNDY3Q0U0RC8wLzM0MzUyZTMyMzMzODJlMzEzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLe7A
MA0GCSqGSIb3DQEBCwUAA4IBAQBA+WKaKFnLAACQPpaRZIzDj7J1XltCgfb4OLdp
95dEQZZQ1w79HkGiR2zuFV8hR3NXS5///fgYIQHhzCi+mJvv4LPyzF8o/1m9u9O/
84zK8OxG/IDty/T//7DfSKPU1vuviJI56xr3WpZD6A79P5YeJXjzZEL69DHAqyRQ
2yyqgSxWO1Pm0FBueGbnn5zEIXWW4e8RKLvgCsIx3skzKnAju0IZkXypGfziQIJj
E+1ewtQ2xhbC6REmk/jXnY/v4XtuSYi4wlv7XhUpZlLKUddzUJBLOCthZhJ47Q4O
bPQsXH+2YYTixxcvBM28z1C3CdoaCNhoD65awMehWjc1F9zm
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:08 2025 by rpki-client