Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa
File: 34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa (raw, json)
Hash identifier: ta5Jwl3KBCRWkmyok3S41Ju3MnL8g2WYznRvjvhmk1k=
Subject key identifier: A2:99:33:35:09:39:4E:74:83:D4:E5:47:BB:EB:22:37:9B:41:A9:FB
Certificate issuer: /CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
Certificate serial: 4A3CCF3820055E04566ACCF4F654B55E273A8D1E
Authority key identifier: 27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa
Signing time: Tue 04 Feb 2025 17:59:28 +0000
ROA not before: Tue 04 Feb 2025 17:54:28 +0000
ROA not after: Tue 03 Feb 2026 17:59:28 +0000
asID: 270094
IP address blocks: 45.237.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3c:cf:38:20:05:5e:04:56:6a:cc:f4:f6:54:b5:5e:27:3a:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
Validity
Not Before: Feb 4 17:54:28 2025 GMT
Not After : Feb 3 17:59:28 2026 GMT
Subject: CN=A299333509394E7483D4E547BBEB22379B41A9FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:52:f8:a6:dc:1b:df:ea:b4:de:d9:95:fd:
e9:cd:75:83:d3:0e:6d:e4:06:96:ca:d3:39:4e:db:
95:6c:54:c0:43:b3:b4:2c:ba:31:24:6b:79:48:20:
e3:17:a2:09:2d:fd:42:c8:f3:8d:5d:63:cf:a9:f3:
70:bf:9e:d2:cd:51:08:a3:2b:36:dc:ef:50:08:e3:
5b:0c:f2:5b:4a:24:29:94:0b:23:8b:e2:d9:80:ac:
1d:7b:10:2d:0b:1e:45:9b:3f:a4:cc:0a:77:82:73:
46:9f:22:23:09:3e:d0:a7:dd:ae:c0:4e:ca:c8:fa:
5f:bd:68:42:38:92:37:57:02:28:a6:de:dd:2c:1f:
43:28:31:f5:09:cd:cd:b4:c7:d0:60:59:25:e9:78:
91:5b:2e:0e:c5:ab:cc:12:5d:b5:ff:78:50:d9:ac:
c4:c5:fa:e6:fd:c6:72:83:a3:a9:7a:85:83:a9:d1:
1d:ff:8c:f9:f9:c6:45:ac:f6:8c:2d:50:99:3e:4c:
a4:22:de:e9:d6:b8:8b:7e:3d:27:69:6e:e4:e7:f2:
df:4b:d6:8c:66:2c:6d:ca:d8:0b:99:a8:02:e8:a6:
f9:48:e7:ab:53:fa:fa:a1:90:99:17:4d:d6:bc:a8:
0f:e4:49:5a:14:fa:2d:64:4e:26:bc:8a:dc:f2:a6:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:33:35:09:39:4E:74:83:D4:E5:47:BB:EB:22:37:9B:41:A9:FB
X509v3 Authority Key Identifier:
keyid:27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:07:7a:7b:8b:79:5a:aa:39:59:58:c1:b3:72:79:08:5a:0f:
c0:c1:46:2c:66:e0:ef:19:67:bb:9c:78:d1:6d:e9:02:8c:29:
77:9a:80:3a:8b:12:97:1d:58:9d:e6:51:12:41:66:8a:d5:75:
d6:c3:b3:a8:01:db:f0:c6:1b:5e:0d:2a:b7:da:50:d7:2e:11:
5e:ca:97:f7:f7:8e:1b:2d:a0:61:21:26:c6:da:36:6d:52:8f:
2d:d4:39:62:64:a9:29:39:ef:20:46:a0:15:4c:f7:c1:cd:df:
98:b7:c0:61:66:54:2b:31:32:13:c0:56:11:d2:87:2e:66:6f:
68:47:e8:a9:1b:84:51:9f:4b:be:25:78:b7:ce:70:8c:d8:45:
48:33:81:77:90:23:25:af:19:2b:4d:4c:14:46:2b:e6:5b:cc:
67:a6:26:e1:97:69:73:6d:41:74:aa:5e:4b:8b:15:8b:bf:4d:
74:76:e0:b9:52:80:12:54:fc:b7:3d:9f:ec:c8:17:c4:e5:eb:
10:15:be:7b:e4:66:26:1a:32:e5:8a:a6:21:81:67:ce:e5:11:
e0:2a:d2:51:b6:23:dd:4d:96:e6:0a:5b:2d:ac:51:69:78:2c:
b4:c0:05:48:d3:fa:aa:d2:9e:59:20:52:84:92:a3:6f:3c:a0:
27:a7:3b:e2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSjzPOCAFXgRWasz09lS1Xic6jR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3Q0Y5MkQ0M0RGQTcyNTEyMDZCRDAxNUM5QTFCMTQz
QzkwQzhGRDAeFw0yNTAyMDQxNzU0MjhaFw0yNjAyMDMxNzU5MjhaMDMxMTAvBgNV
BAMTKEEyOTkzMzM1MDkzOTRFNzQ4M0Q0RTU0N0JCRUIyMjM3OUI0MUE5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW6VL4ptwb3+q03tmV/enNdYPT
Dm3kBpbK0zlO25VsVMBDs7QsujEka3lIIOMXogkt/ULI841dY8+p83C/ntLNUQij
Kzbc71AI41sM8ltKJCmUCyOL4tmArB17EC0LHkWbP6TMCneCc0afIiMJPtCn3a7A
TsrI+l+9aEI4kjdXAiim3t0sH0MoMfUJzc20x9BgWSXpeJFbLg7Fq8wSXbX/eFDZ
rMTF+ub9xnKDo6l6hYOp0R3/jPn5xkWs9owtUJk+TKQi3unWuIt+PSdpbuTn8t9L
1oxmLG3K2AuZqALopvlI56tT+vqhkJkXTda8qA/kSVoU+i1kTia8itzyppVPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUopkzNQk5TnSD1OVHu+siN5tBqfswHwYDVR0j
BBgwFoAUJ3z5LUPfpyUSBr0BXJobFDyQyP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTdBNDdCNEYyOEEwODBCMDdENTNCNDY5M0U3Mzc5Rjg5
OTk1NDBEMDg0NjRFNkI1OEIzREY0NDJBQTg2RURBLzAvMjc3Q0Y5MkQ0M0RGQTcy
NTEyMDZCRDAxNUM5QTFCMTQzQzkwQzhGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzdDRjkyRDQzREZBNzI1MTIw
NkJEMDE1QzlBMUIxNDNDOTBDOEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTU3QTQ3QjRGMjhBMDgwQjA3RDUzQjQ2OTNFNzM3OUY4OTk5NTQwRDA4
NDY0RTZCNThCM0RGNDQyQUE4NkVEQS8wLzM0MzUyZTMyMzMzNzJlMzEzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe2E
MA0GCSqGSIb3DQEBCwUAA4IBAQCBB3p7i3laqjlZWMGzcnkIWg/AwUYsZuDvGWe7
nHjRbekCjCl3moA6ixKXHVid5lESQWaK1XXWw7OoAdvwxhteDSq32lDXLhFeypf3
944bLaBhISbG2jZtUo8t1DliZKkpOe8gRqAVTPfBzd+Yt8BhZlQrMTITwFYR0ocu
Zm9oR+ipG4RRn0u+JXi3znCM2EVIM4F3kCMlrxkrTUwURivmW8xnpibhl2lzbUF0
ql5LixWLv010duC5UoASVPy3PZ/syBfE5esQFb575GYmGjLliqYhgWfO5RHgKtJR
tiPdTZbmClstrFFpeCy0wAVI0/qq0p5ZIFKEkqNvPKAnpzvi
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:22 2025 by rpki-client