Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34302e302f32322d3234203d3e20323732393932.roa
File: 3133312e3232312e34302e302f32322d3234203d3e20323732393932.roa (raw, json)
Hash identifier: ZEn3DXcLjXHsClm/Oj57A7yrx4Pzhtr0g7Q1eNTKRSU=
Subject key identifier: 67:8A:CA:EA:FC:DC:79:11:EE:0A:FF:E5:43:5B:DE:03:56:F2:8E:BE
Certificate issuer: /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial: 2BECD3BE66440C7AF332352B7C95547E8C7AF1CE
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34302e302f32322d3234203d3e20323732393932.roa
Signing time: Tue 04 Feb 2025 18:50:12 +0000
ROA not before: Tue 04 Feb 2025 18:45:12 +0000
ROA not after: Tue 03 Feb 2026 18:50:12 +0000
asID: 272992
IP address blocks: 131.221.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ec:d3:be:66:44:0c:7a:f3:32:35:2b:7c:95:54:7e:8c:7a:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Validity
Not Before: Feb 4 18:45:12 2025 GMT
Not After : Feb 3 18:50:12 2026 GMT
Subject: CN=678ACAEAFCDC7911EE0AFFE5435BDE0356F28EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:62:51:80:89:3a:7f:ca:d1:90:a1:20:83:
99:1e:ae:c8:f4:5b:c5:22:e6:01:4c:a4:5e:ac:ad:
70:13:50:79:1f:4d:ca:c2:44:c0:e7:d7:c2:f9:36:
9a:60:43:8d:93:21:2d:b1:94:5e:01:32:87:b5:f8:
e6:46:07:3c:51:65:3e:f7:d8:3a:61:47:6d:3f:fa:
dd:1c:0a:79:d5:4b:11:1a:4c:43:ed:e2:a6:d0:86:
f0:8b:fa:3a:3c:05:8c:7a:8b:aa:84:e5:57:f7:4e:
64:aa:72:24:24:dc:54:98:e3:f7:b3:56:3d:a1:6d:
0d:93:29:b4:cc:71:37:e4:0c:8e:1d:2b:61:89:23:
7f:f6:82:70:3c:f5:4b:e6:f2:4a:b3:bc:d1:e4:a2:
15:03:bd:c1:07:13:9a:d8:cb:f5:31:a9:64:16:a9:
a2:41:d6:91:47:04:0c:f8:e6:48:b0:c1:f2:a8:f1:
8a:ba:8d:aa:f9:d5:56:10:f2:2e:0b:27:46:2e:68:
0b:75:ea:18:60:b7:13:a7:bb:41:81:05:ff:dd:18:
f2:92:c7:3b:96:20:17:46:88:ee:2a:fb:31:f6:9e:
2b:fe:19:27:2b:34:5f:7a:31:8b:1e:f5:74:47:b6:
45:f1:a2:de:01:19:2f:d3:e3:5f:d2:47:11:7f:e2:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:CA:EA:FC:DC:79:11:EE:0A:FF:E5:43:5B:DE:03:56:F2:8E:BE
X509v3 Authority Key Identifier:
keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34302e302f32322d3234203d3e20323732393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.40.0/22
Signature Algorithm: sha256WithRSAEncryption
17:9b:20:51:18:48:49:ee:3b:a8:04:5b:fd:13:8e:16:26:39:
2c:36:54:c1:f8:35:10:25:c9:80:8d:90:dc:f8:a8:dd:49:14:
b0:2b:9f:e2:65:36:d9:e5:0a:bc:f7:04:85:e8:a7:64:b5:8d:
64:c7:33:d7:ba:04:92:45:24:af:52:bf:ba:0c:fc:ac:c5:29:
09:00:98:a7:66:19:f8:96:32:3b:d7:42:f3:ab:93:e5:1c:ef:
f7:49:a7:fa:8a:31:4f:47:0c:de:ff:e2:49:1b:fe:c1:7e:54:
4a:9b:37:51:8b:a0:11:b2:9c:df:ad:26:bd:77:c9:d2:c7:f6:
7a:00:b1:cd:fc:31:17:44:2f:3b:a0:88:c5:e2:a1:2d:85:de:
72:f0:39:d4:4e:63:83:6f:f2:88:f7:0f:84:73:a4:55:d3:50:
49:90:ed:0f:85:df:18:32:66:b1:97:b9:72:56:2d:5e:57:7e:
91:86:e7:df:33:52:9e:d6:ee:4d:31:1e:7a:e0:55:0b:60:9c:
a5:b1:3a:57:13:09:64:e2:0b:2b:bb:c4:f2:a6:23:a0:cf:92:
d9:94:bc:fa:b4:1f:ed:ce:90:c8:88:a9:bb:20:b5:87:f6:f0:
ea:54:a0:bc:84:8a:84:d1:93:d3:02:c9:40:33:d9:44:39:af:
72:51:52:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUK+zTvmZEDHrzMjUrfJVUfox68c4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk5NUY2M0UzODc2MDNDODQyNzI3NjFDNkY0RDVDMDhB
MEVDMDE2MTAeFw0yNTAyMDQxODQ1MTJaFw0yNjAyMDMxODUwMTJaMDMxMTAvBgNV
BAMTKDY3OEFDQUVBRkNEQzc5MTFFRTBBRkZFNTQzNUJERTAzNTZGMjhFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbWJRgIk6f8rRkKEgg5kersj0
W8Ui5gFMpF6srXATUHkfTcrCRMDn18L5NppgQ42TIS2xlF4BMoe1+OZGBzxRZT73
2DphR20/+t0cCnnVSxEaTEPt4qbQhvCL+jo8BYx6i6qE5Vf3TmSqciQk3FSY4/ez
Vj2hbQ2TKbTMcTfkDI4dK2GJI3/2gnA89Uvm8kqzvNHkohUDvcEHE5rYy/UxqWQW
qaJB1pFHBAz45kiwwfKo8Yq6jar51VYQ8i4LJ0YuaAt16hhgtxOnu0GBBf/dGPKS
xzuWIBdGiO4q+zH2niv+GScrNF96MYse9XRHtkXxot4BGS/T41/SRxF/4iABAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZ4rK6vzceRHuCv/lQ1veA1byjr4wHwYDVR0j
BBgwFoAUiZX2Pjh2A8hCcnYcb01cCKDsAWEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDdDRkRDQkYwRUNERTFBOTQ5MDM0QkZDMDJGODE3QTdC
NjMxNkNDRDk2OUQyNDY1QjVBREQ1RUVDODM2RDI5LzAvODk5NUY2M0UzODc2MDND
ODQyNzI3NjFDNkY0RDVDMDhBMEVDMDE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTk1RjYzRTM4NzYwM0M4NDI3
Mjc2MUM2RjRENUMwOEEwRUMwMTYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ3Q0ZEQ0JGMEVDREUxQTk0OTAzNEJGQzAyRjgxN0E3QjYzMTZDQ0Q5
NjlEMjQ2NUI1QURENUVFQzgzNkQyOS8wLzMxMzMzMTJlMzIzMjMxMmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg90o
MA0GCSqGSIb3DQEBCwUAA4IBAQAXmyBRGEhJ7juoBFv9E44WJjksNlTB+DUQJcmA
jZDc+KjdSRSwK5/iZTbZ5Qq89wSF6KdktY1kxzPXugSSRSSvUr+6DPysxSkJAJin
Zhn4ljI710Lzq5PlHO/3Saf6ijFPRwze/+JJG/7BflRKmzdRi6ARspzfrSa9d8nS
x/Z6ALHN/DEXRC87oIjF4qEthd5y8DnUTmODb/KI9w+Ec6RV01BJkO0Phd8YMmax
l7lyVi1eV36RhuffM1Ke1u5NMR564FULYJylsTpXEwlk4gsru8TypiOgz5LZlLz6
tB/tzpDIiKm7ILWH9vDqVKC8hIqE0ZPTAslAM9lEOa9yUVL4
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:42 2025 by rpki-client