Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234312e302f32342d3234203d3e203238353532.roa
File: 3230312e3135392e3234312e302f32342d3234203d3e203238353532.roa (raw, json)
Hash identifier: 9abqjeK35lgZbUM9fTXFsuj8hPKh76B1iD1x5j4fei4=
Subject key identifier: CB:0D:DB:7F:4E:3E:3A:3E:01:8D:7E:EA:69:AC:CD:83:76:9C:CE:FD
Certificate issuer: /CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
Certificate serial: 487B5ED136341F74E802BE8A8F09AEBD044EB2D9
Authority key identifier: BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234312e302f32342d3234203d3e203238353532.roa
Signing time: Tue 04 Feb 2025 14:20:00 +0000
ROA not before: Tue 04 Feb 2025 14:15:00 +0000
ROA not after: Tue 03 Feb 2026 14:20:00 +0000
asID: 28552
IP address blocks: 201.159.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7b:5e:d1:36:34:1f:74:e8:02:be:8a:8f:09:ae:bd:04:4e:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
Validity
Not Before: Feb 4 14:15:00 2025 GMT
Not After : Feb 3 14:20:00 2026 GMT
Subject: CN=CB0DDB7F4E3E3A3E018D7EEA69ACCD83769CCEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b9:9f:8b:d1:7b:25:8c:01:fc:2c:d4:61:33:
42:de:8a:32:a7:51:44:16:4e:57:80:20:fc:13:d2:
81:c1:fa:34:9b:19:cb:60:63:5c:20:fd:8b:02:8d:
59:07:3b:70:63:f3:fd:aa:39:6a:87:a4:45:1b:05:
9f:f3:21:26:a8:a1:6f:69:63:bb:f4:5b:3b:83:ff:
b7:45:eb:b3:a3:7b:8e:3d:56:75:ea:f1:c3:be:d2:
54:24:78:6f:8a:7b:6f:40:47:76:64:98:ff:89:75:
c4:2f:14:75:2a:c9:4d:ec:d3:46:0b:03:d4:41:32:
0e:57:bb:92:cb:da:8d:34:dd:03:a9:c2:4b:a5:22:
db:c5:fd:a9:5b:e6:f6:02:a0:99:cb:6d:de:4b:af:
29:7a:8b:bc:0d:e4:5d:e5:4e:79:40:41:58:a1:dd:
46:b2:37:09:45:17:cb:16:1e:8d:95:57:2a:7f:0f:
67:20:01:ac:3d:5b:99:c4:9a:86:26:d8:aa:ed:da:
91:9d:95:d8:37:11:44:b5:c4:23:13:38:a9:4f:ad:
61:d8:d5:28:4b:28:2d:a1:de:63:f2:2d:5b:31:dd:
f8:d6:a3:1f:69:89:03:ad:da:6c:de:d4:a5:4a:06:
7f:27:52:0c:af:35:c5:56:d1:c7:a5:ea:41:7a:35:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:DB:7F:4E:3E:3A:3E:01:8D:7E:EA:69:AC:CD:83:76:9C:CE:FD
X509v3 Authority Key Identifier:
keyid:BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234312e302f32342d3234203d3e203238353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.241.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b3:3a:d6:c3:32:b2:69:be:2f:57:f3:19:7c:a6:c8:24:df:
39:25:84:56:c8:2c:01:ef:a0:7c:f3:40:6f:5d:38:ed:13:c1:
ac:5a:9e:df:c6:6a:5c:00:bb:86:35:07:d4:7d:f4:68:61:73:
c8:08:60:e9:9e:db:32:12:9e:7c:4d:0f:7c:47:17:82:d6:f2:
89:9b:4e:ef:d8:7f:fd:ce:fe:5f:55:08:21:fa:86:25:1f:90:
e1:86:65:ee:0b:e7:3b:9c:8d:56:c1:d9:71:26:43:cc:e4:d6:
2e:46:8c:98:d6:05:db:19:6e:4a:0e:05:a0:3b:97:5c:5f:8b:
b6:2a:c5:34:0e:a2:b7:5b:4d:48:7b:c2:a9:42:4b:9e:9b:c8:
2a:d6:0e:e1:a1:6d:9d:9c:cb:21:5f:f9:75:56:92:ae:cd:71:
da:6f:58:7b:d3:3f:ff:2d:f4:50:90:60:cf:96:8c:1e:1f:96:
ba:a9:62:b6:3d:f9:a8:e1:a2:99:6e:52:dd:af:03:8a:4c:2e:
62:7d:a1:ff:7c:4c:4f:0f:14:29:09:7c:64:8a:27:74:bf:fa:
a2:f9:3f:60:08:06:c4:05:6c:91:e0:b3:d6:d4:c5:75:d3:29:
20:54:a6:fb:b3:9e:6f:52:bd:c4:4f:11:18:5d:61:de:e0:df:
b1:b2:ac:40
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSHte0TY0H3ToAr6KjwmuvQROstkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ0M0IzQTc2NTgzNDI2OTg0RkZDNTFCOTA3RjNGRDI5
RTJGM0JCMDAeFw0yNTAyMDQxNDE1MDBaFw0yNjAyMDMxNDIwMDBaMDMxMTAvBgNV
BAMTKENCMEREQjdGNEUzRTNBM0UwMThEN0VFQTY5QUNDRDgzNzY5Q0NFRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuuZ+L0XsljAH8LNRhM0LeijKn
UUQWTleAIPwT0oHB+jSbGctgY1wg/YsCjVkHO3Bj8/2qOWqHpEUbBZ/zISaooW9p
Y7v0WzuD/7dF67Oje449VnXq8cO+0lQkeG+Ke29AR3ZkmP+JdcQvFHUqyU3s00YL
A9RBMg5Xu5LL2o003QOpwkulItvF/alb5vYCoJnLbd5Lryl6i7wN5F3lTnlAQVih
3UayNwlFF8sWHo2VVyp/D2cgAaw9W5nEmoYm2Krt2pGdldg3EUS1xCMTOKlPrWHY
1ShLKC2h3mPyLVsx3fjWox9piQOt2mze1KVKBn8nUgyvNcVW0cel6kF6NV4tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyw3bf04+Oj4BjX7qaazNg3aczv0wHwYDVR0j
BBgwFoAUvUOzp2WDQmmE/8UbkH8/0p4vO7AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjczMTgyQjg4QkY2MTFDMjE5QjhBQUFBQUJGQTA3MEQ1
RDIyOUQ5NEI1QzM5NTlENjVFMEQyN0FDMDJDMDQzLzAvQkQ0M0IzQTc2NTgzNDI2
OTg0RkZDNTFCOTA3RjNGRDI5RTJGM0JCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDQzQjNBNzY1ODM0MjY5ODRG
RkM1MUI5MDdGM0ZEMjlFMkYzQkIwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY3MzE4MkI4OEJGNjExQzIxOUI4QUFBQUFCRkEwNzBENUQyMjlEOTRC
NUMzOTU5RDY1RTBEMjdBQzAyQzA0My8wLzMyMzAzMTJlMzEzNTM5MmUzMjM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyZ/x
MA0GCSqGSIb3DQEBCwUAA4IBAQBjszrWwzKyab4vV/MZfKbIJN85JYRWyCwB76B8
80BvXTjtE8GsWp7fxmpcALuGNQfUffRoYXPICGDpntsyEp58TQ98RxeC1vKJm07v
2H/9zv5fVQgh+oYlH5DhhmXuC+c7nI1WwdlxJkPM5NYuRoyY1gXbGW5KDgWgO5dc
X4u2KsU0DqK3W01Ie8KpQkuem8gq1g7hoW2dnMshX/l1VpKuzXHab1h70z//LfRQ
kGDPloweH5a6qWK2Pfmo4aKZblLdrwOKTC5ifaH/fExPDxQpCXxkiid0v/qi+T9g
CAbEBWyR4LPW1MV10ykgVKb7s55vUr3ETxEYXWHe4N+xsqxA
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:43 2025 by rpki-client