Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa
File: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (raw, json)
Hash identifier: jT1E1QQ2DLRUAXUiMSpmHQQCj1+7qTNhhKnmVO0M050=
Subject key identifier: 85:9C:B8:63:BE:CA:9D:61:3E:E1:CC:C4:AE:33:2C:27:E1:DB:87:CB
Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Certificate serial: 285130BA0DB58F4759913D759253CC5EBBC22DFD
Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa
Signing time: Tue 04 Feb 2025 18:12:14 +0000
ROA not before: Tue 04 Feb 2025 18:07:14 +0000
ROA not after: Tue 03 Feb 2026 18:12:14 +0000
asID: 266907
IP address blocks: 45.224.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:51:30:ba:0d:b5:8f:47:59:91:3d:75:92:53:cc:5e:bb:c2:2d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Validity
Not Before: Feb 4 18:07:14 2025 GMT
Not After : Feb 3 18:12:14 2026 GMT
Subject: CN=859CB863BECA9D613EE1CCC4AE332C27E1DB87CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:a1:22:e2:57:40:ac:e8:29:d3:b0:ad:25:
a6:77:72:c8:62:1c:e1:dd:70:b7:3c:08:48:96:ff:
a2:e6:ee:c0:61:36:ed:1c:35:0c:d2:07:ed:5f:66:
b0:8b:1a:eb:58:ee:0a:d9:36:8e:49:19:09:8f:82:
3d:2e:b4:49:4f:54:4e:de:4f:37:a4:be:aa:42:93:
6a:fd:06:aa:58:41:88:e3:51:39:be:76:ab:b8:5f:
72:4c:de:bd:0f:df:5b:59:f1:86:58:4d:f9:66:a5:
bf:d3:95:cb:7a:42:f4:3e:7a:90:ba:b1:00:61:29:
ff:9a:1f:ef:d6:c3:63:bc:38:2d:a3:e1:b1:9f:99:
b3:2f:2c:b5:11:fd:53:60:e6:ef:28:05:7a:ab:c7:
1b:b6:21:9a:54:39:e8:53:80:eb:2a:be:0a:74:8d:
61:d3:81:bc:ac:07:1b:28:0e:7b:06:e9:94:3f:08:
56:9f:af:48:b6:c6:fe:86:97:c5:39:20:49:ac:21:
6e:93:b1:03:95:fa:62:40:c4:ad:2f:80:c9:55:02:
30:d8:31:9c:65:64:8c:d1:c7:81:39:8b:a9:b0:d3:
57:83:3d:71:e5:f7:d5:54:5a:36:33:be:f3:d1:01:
91:b8:01:e8:d7:2a:7c:a2:2d:74:86:b6:69:0c:13:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:B8:63:BE:CA:9D:61:3E:E1:CC:C4:AE:33:2C:27:E1:DB:87:CB
X509v3 Authority Key Identifier:
keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f1:80:c8:9a:a7:61:cc:a5:aa:c7:56:a0:5c:87:1b:7c:31:
d1:8c:34:5f:06:cd:d7:13:59:cd:78:44:02:7e:79:88:4c:d1:
2c:b5:52:97:c1:a1:af:82:12:db:7a:64:17:55:be:2d:3b:be:
52:fc:55:07:ab:c9:c6:95:8d:fe:4b:3c:a5:90:e3:13:01:a3:
46:47:17:a5:cb:6f:2b:7f:c0:33:a6:76:10:2c:04:cb:ed:84:
6e:f0:40:0b:3f:65:13:29:5b:b2:42:51:ef:86:3b:72:17:b6:
d6:f6:df:31:a2:9b:f5:e9:cd:58:21:5a:18:e9:c1:69:0e:49:
92:a4:54:a3:47:68:c8:8b:58:c3:71:19:27:e6:98:cf:1f:43:
6e:42:7b:4a:aa:3e:e5:09:6c:18:1e:06:f1:2a:61:70:17:61:
ad:a4:e3:30:39:18:1c:bc:96:2d:a9:80:e3:07:7b:95:2d:0d:
2e:9f:0d:59:ec:2f:b5:dd:72:f4:1a:eb:f5:7b:c6:84:d6:5f:
c3:b0:06:13:c2:90:97:6b:b4:1a:50:49:52:48:c3:e7:31:16:
9f:02:c4:24:d8:92:f8:16:11:46:af:2c:de:1d:ba:ef:64:3f:
1d:92:7e:8e:ef:33:97:a2:59:54:ca:7d:4d:01:8c:57:e9:e2:
0b:fc:44:31
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKFEwug21j0dZkT11klPMXrvCLf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1
MUNFMDQwMDAeFw0yNTAyMDQxODA3MTRaFw0yNjAyMDMxODEyMTRaMDMxMTAvBgNV
BAMTKDg1OUNCODYzQkVDQTlENjEzRUUxQ0NDNEFFMzMyQzI3RTFEQjg3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GaEi4ldArOgp07CtJaZ3cshi
HOHdcLc8CEiW/6Lm7sBhNu0cNQzSB+1fZrCLGutY7grZNo5JGQmPgj0utElPVE7e
TzekvqpCk2r9BqpYQYjjUTm+dqu4X3JM3r0P31tZ8YZYTflmpb/Tlct6QvQ+epC6
sQBhKf+aH+/Ww2O8OC2j4bGfmbMvLLUR/VNg5u8oBXqrxxu2IZpUOehTgOsqvgp0
jWHTgbysBxsoDnsG6ZQ/CFafr0i2xv6Gl8U5IEmsIW6TsQOV+mJAxK0vgMlVAjDY
MZxlZIzRx4E5i6mw01eDPXHl99VUWjYzvvPRAZG4AejXKnyiLXSGtmkMEzA7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhZy4Y77KnWE+4czErjMsJ+Hbh8swHwYDVR0j
BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5
ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw
QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF
MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz
M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wLzM0MzUyZTMyMzIzNDJlMzIzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzkzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeDK
MA0GCSqGSIb3DQEBCwUAA4IBAQAO8YDImqdhzKWqx1agXIcbfDHRjDRfBs3XE1nN
eEQCfnmITNEstVKXwaGvghLbemQXVb4tO75S/FUHq8nGlY3+SzylkOMTAaNGRxel
y28rf8AzpnYQLATL7YRu8EALP2UTKVuyQlHvhjtyF7bW9t8xopv16c1YIVoY6cFp
DkmSpFSjR2jIi1jDcRkn5pjPH0NuQntKqj7lCWwYHgbxKmFwF2GtpOMwORgcvJYt
qYDjB3uVLQ0unw1Z7C+13XL0Guv1e8aE1l/DsAYTwpCXa7QaUElSSMPnMRafAsQk
2JL4FhFGryzeHbrvZD8dkn6O7zOXollUyn1NAYxX6eIL/EQx
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:24 2025 by rpki-client