Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
File: 3135382e39372e39362e302f31392d3232203d3e2033363430.roa (raw, json)
Hash identifier: XbHB95kGffdkcCszAN131cEkIGYn4jrdjwR0DDOwC98=
Subject key identifier: B0:53:AE:77:AF:47:29:A6:19:6F:D5:8B:6F:75:7A:AB:E7:76:03:14
Certificate issuer: /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial: 1C1245C7219E125CBE089675DD62DFD591BD0EB0
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
Signing time: Tue 04 Feb 2025 20:03:14 +0000
ROA not before: Tue 04 Feb 2025 19:58:14 +0000
ROA not after: Tue 03 Feb 2026 20:03:14 +0000
asID: 3640
IP address blocks: 158.97.96.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:12:45:c7:21:9e:12:5c:be:08:96:75:dd:62:df:d5:91:bd:0e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Validity
Not Before: Feb 4 19:58:14 2025 GMT
Not After : Feb 3 20:03:14 2026 GMT
Subject: CN=B053AE77AF4729A6196FD58B6F757AABE7760314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:e9:26:f2:e3:57:4c:ab:3e:9d:0b:d8:e8:
b7:17:86:d5:fe:21:56:e1:3c:c5:de:38:48:60:0a:
09:69:b9:cb:1e:73:96:64:31:be:4a:81:e8:c5:1c:
a3:d5:e7:c3:c5:12:32:0c:6b:70:0c:06:91:cd:ea:
33:26:d1:bf:8b:89:4d:95:d8:cd:58:d3:d8:7b:9f:
f4:29:93:63:cc:eb:3a:96:c1:d7:ec:8e:b9:cb:0a:
fb:16:23:e2:cf:57:01:47:78:b9:1e:fc:0a:75:b4:
ef:23:06:b8:14:43:2f:89:f8:3a:ff:92:cd:9c:64:
4d:61:8b:2b:b9:be:02:4a:cf:a2:dd:ef:21:2b:35:
80:6d:de:8e:58:3d:37:59:56:78:3b:36:de:df:e7:
dd:6b:85:f4:16:e3:14:a8:6f:c3:4d:07:f4:8b:15:
b8:7e:a4:a2:93:17:04:97:5f:1f:4f:5f:42:21:e2:
32:ad:30:bd:63:05:b3:dc:33:18:73:80:98:ae:90:
79:10:69:fe:b0:27:82:84:c1:2f:2b:ef:dc:cc:02:
4b:6a:fa:dc:33:e4:ff:b0:8d:fc:6e:9d:fc:16:e4:
24:f4:dd:d0:a6:fe:d5:23:22:40:4f:87:e5:b9:41:
86:47:62:ea:ca:20:91:56:3d:e0:c6:95:6d:f7:51:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:AE:77:AF:47:29:A6:19:6F:D5:8B:6F:75:7A:AB:E7:76:03:14
X509v3 Authority Key Identifier:
keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.97.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:f0:3a:9f:d5:13:46:4c:84:ca:e8:a3:b1:1b:a5:32:07:fe:
f8:e5:6a:5e:7e:74:d7:76:4c:d3:d3:45:16:43:4f:cc:f2:46:
fc:e2:1a:6b:9e:17:be:a0:f5:ef:5a:57:c6:96:d8:c9:9e:5d:
3d:e8:40:70:1a:a2:22:24:88:1e:89:3a:60:75:47:26:32:25:
fd:f5:35:46:d2:0d:12:8c:08:b3:d2:9b:4d:f8:1a:8b:d7:97:
70:14:ff:d4:8b:a5:1e:bd:ec:c1:a1:c9:43:37:82:04:3e:00:
85:e3:0f:6a:ed:2c:70:b1:f2:18:39:4d:43:1c:8f:2c:44:74:
23:7d:4d:a5:66:d5:22:5d:f1:3e:6d:d3:0e:f4:06:60:f0:34:
9e:be:aa:03:59:4c:0f:a1:d4:be:44:9c:72:11:e7:ba:b7:6b:
45:92:65:a6:6c:8e:12:52:fb:b3:7e:fb:4f:90:26:16:41:e8:
e6:1b:0f:b1:f4:e1:38:e6:fe:49:5b:24:4f:0b:97:70:10:b9:
e5:f1:be:30:d0:6c:34:d2:d1:98:de:ad:d1:22:65:48:5e:c6:
f5:4d:60:d3:1f:79:2b:cf:7d:99:7f:77:b5:78:33:f7:5d:a6:
a2:de:b0:85:6d:b5:82:52:74:64:fa:bb:86:8d:e9:66:6a:79:
35:c3:af:01
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUHBJFxyGeEly+CJZ13WLf1ZG9DrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzRjFCNkNDRDhFQzRDMDVENkQ5QzI5OERDRTgyMUEy
RDQ0NDQxOTAeFw0yNTAyMDQxOTU4MTRaFw0yNjAyMDMyMDAzMTRaMDMxMTAvBgNV
BAMTKEIwNTNBRTc3QUY0NzI5QTYxOTZGRDU4QjZGNzU3QUFCRTc3NjAzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Mukm8uNXTKs+nQvY6LcXhtX+
IVbhPMXeOEhgCglpucsec5ZkMb5KgejFHKPV58PFEjIMa3AMBpHN6jMm0b+LiU2V
2M1Y09h7n/Qpk2PM6zqWwdfsjrnLCvsWI+LPVwFHeLke/Ap1tO8jBrgUQy+J+Dr/
ks2cZE1hiyu5vgJKz6Ld7yErNYBt3o5YPTdZVng7Nt7f591rhfQW4xSob8NNB/SL
Fbh+pKKTFwSXXx9PX0Ih4jKtML1jBbPcMxhzgJiukHkQaf6wJ4KEwS8r79zMAktq
+twz5P+wjfxunfwW5CT03dCm/tUjIkBPh+W5QYZHYurKIJFWPeDGlW33UWr/AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUsFOud69HKaYZb9WLb3V6q+d2AxQwHwYDVR0j
BBgwFoAUpD8bbM2OxMBdbZwpjc6CGi1ERBkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDU0NzhDOUM1MTUzODVFOTRGODJFM0FCMzg1NDNBNzhC
QzQ3Q0RFQzZFNTA1QTI5MUZCQkQ2MDI0REIyMzM1LzAvQTQzRjFCNkNDRDhFQzRD
MDVENkQ5QzI5OERDRTgyMUEyRDQ0NDQxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNGMUI2Q0NEOEVDNEMwNUQ2
RDlDMjk4RENFODIxQTJENDQ0NDE5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA1NDc4QzlDNTE1Mzg1RTk0RjgyRTNBQjM4NTQzQTc4QkM0N0NERUM2
RTUwNUEyOTFGQkJENjAyNERCMjMzNS8wLzMxMzUzODJlMzkzNzJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzIyMDNkM2UyMDMzMzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmFgMA0GCSqG
SIb3DQEBCwUAA4IBAQAa8Dqf1RNGTITK6KOxG6UyB/745WpefnTXdkzT00UWQ0/M
8kb84hprnhe+oPXvWlfGltjJnl096EBwGqIiJIgeiTpgdUcmMiX99TVG0g0SjAiz
0ptN+BqL15dwFP/Ui6UevezBoclDN4IEPgCF4w9q7SxwsfIYOU1DHI8sRHQjfU2l
ZtUiXfE+bdMO9AZg8DSevqoDWUwPodS+RJxyEee6t2tFkmWmbI4SUvuzfvtPkCYW
QejmGw+x9OE45v5JWyRPC5dwELnl8b4w0Gw00tGY3q3RImVIXsb1TWDTH3krz32Z
f3e1eDP3Xaai3rCFbbWCUnRk+ruGjelmank1w68B
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:12 2025 by rpki-client