Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/34352e3232352e37302e302f32332d3234203d3e20323635383637.roa
File: 34352e3232352e37302e302f32332d3234203d3e20323635383637.roa (raw, json)
Hash identifier: 6vOlzVOLte6if/FMyL+5E1wSjnnlw6qw+ZADbHV3Ry0=
Subject key identifier: 47:3F:23:49:8D:04:0E:30:D6:1A:9C:23:5A:E7:E7:B8:BC:ED:62:36
Certificate issuer: /CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
Certificate serial: 7F080E67FE79E373815D7140A2E44826574F6AB0
Authority key identifier: 1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/34352e3232352e37302e302f32332d3234203d3e20323635383637.roa
Signing time: Tue 04 Feb 2025 18:17:42 +0000
ROA not before: Tue 04 Feb 2025 18:12:42 +0000
ROA not after: Tue 03 Feb 2026 18:17:42 +0000
asID: 265867
IP address blocks: 45.225.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:08:0e:67:fe:79:e3:73:81:5d:71:40:a2:e4:48:26:57:4f:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
Validity
Not Before: Feb 4 18:12:42 2025 GMT
Not After : Feb 3 18:17:42 2026 GMT
Subject: CN=473F23498D040E30D61A9C235AE7E7B8BCED6236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:39:73:9f:d7:3b:f3:e4:20:de:8a:da:38:
76:e5:2d:d4:d3:f4:7d:96:a5:4a:d4:3d:cd:bf:6c:
f2:1d:8d:32:b6:b7:93:46:35:8a:16:88:c2:3a:95:
be:55:28:60:04:9d:de:52:1c:00:16:71:21:b0:f9:
6b:ff:d2:26:f9:5d:34:15:45:c0:d0:68:68:8f:9b:
cf:28:e0:6d:fe:22:c1:e7:a9:d4:4a:ce:62:c6:1b:
ba:68:d0:ea:e9:73:8f:e7:f4:7a:00:4c:ac:d9:19:
e0:df:fe:7f:b6:7c:37:4a:55:d0:70:06:b5:80:4b:
0a:2a:d6:a7:08:2e:e4:23:e9:0f:8c:a4:f5:54:42:
6f:8c:21:bb:69:8a:b5:e4:65:e8:05:98:44:a0:26:
fe:b1:87:5e:dc:78:ba:aa:6f:2d:0e:52:17:f6:65:
15:9c:47:cf:60:9a:e6:de:85:6b:8c:62:93:32:7a:
41:88:b0:d5:d0:fa:9f:2f:71:17:4c:0a:26:91:b2:
58:28:e2:0a:f2:eb:b2:ee:a8:cb:9f:06:c0:c6:ba:
8d:2c:64:fd:47:26:d8:ec:0c:94:9d:ae:66:59:76:
ff:0c:78:bd:47:09:a3:75:00:8a:d7:18:ab:f9:b1:
10:ac:6e:f7:4b:d6:0d:d9:12:49:3c:b5:47:4a:f6:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:23:49:8D:04:0E:30:D6:1A:9C:23:5A:E7:E7:B8:BC:ED:62:36
X509v3 Authority Key Identifier:
keyid:1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/34352e3232352e37302e302f32332d3234203d3e20323635383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f1:99:93:70:1d:9f:4c:cc:52:8f:2c:c4:86:1c:30:e5:de:
93:d6:8e:e7:57:51:ad:d0:8c:81:4e:c0:a9:73:ce:8b:b9:e3:
30:f9:b5:5c:e1:81:cd:b1:db:76:f9:a7:a9:1c:3b:30:b1:ab:
2d:c5:bc:66:ca:e7:1e:04:5b:b0:c9:99:9f:62:9f:d5:0d:f6:
de:52:7a:d0:3b:d4:9a:15:1e:58:d0:44:85:19:2a:3b:6c:63:
1e:ad:02:28:ab:3e:03:de:45:20:c9:df:40:19:44:1d:84:0e:
58:53:67:4c:63:73:c8:5d:29:ae:de:b7:40:65:da:fa:79:ca:
a0:11:93:24:a4:20:8f:1f:31:f3:73:99:55:fc:8e:3c:ff:87:
6b:e1:92:dc:be:b6:5f:cc:9c:78:91:3f:8e:33:46:1e:4e:08:
8b:20:aa:cb:29:69:28:b3:38:f5:4b:37:c5:a2:82:53:74:08:
06:54:33:82:d1:71:ee:50:17:48:c5:06:2c:b3:ac:06:48:a3:
2e:4d:47:a6:e8:f5:90:d5:87:b8:a2:fa:55:a0:94:c6:44:7b:
e1:d8:95:28:98:24:99:22:9e:be:3f:44:d7:fa:67:ac:5a:b5:
ce:f1:4b:32:08:f6:72:e7:9d:64:d6:ea:1c:58:25:c0:eb:af:
dc:7d:af:9e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfwgOZ/5543OBXXFAouRIJldParAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI5MDg2NkJFQTc1ODM1MkU4M0M4N0UwN0MxREVCRjIy
QUJGMDBBQTAeFw0yNTAyMDQxODEyNDJaFw0yNjAyMDMxODE3NDJaMDMxMTAvBgNV
BAMTKDQ3M0YyMzQ5OEQwNDBFMzBENjFBOUMyMzVBRTdFN0I4QkNFRDYyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7Dlzn9c78+Qg3oraOHblLdTT
9H2WpUrUPc2/bPIdjTK2t5NGNYoWiMI6lb5VKGAEnd5SHAAWcSGw+Wv/0ib5XTQV
RcDQaGiPm88o4G3+IsHnqdRKzmLGG7po0Orpc4/n9HoATKzZGeDf/n+2fDdKVdBw
BrWASwoq1qcILuQj6Q+MpPVUQm+MIbtpirXkZegFmESgJv6xh17ceLqqby0OUhf2
ZRWcR89gmubehWuMYpMyekGIsNXQ+p8vcRdMCiaRslgo4gry67LuqMufBsDGuo0s
ZP1HJtjsDJSdrmZZdv8MeL1HCaN1AIrXGKv5sRCsbvdL1g3ZEkk8tUdK9thzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURz8jSY0EDjDWGpwjWufnuLztYjYwHwYDVR0j
BBgwFoAUG5CGa+p1g1LoPIfgfB3r8iq/AKowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTc5M0IwMTAwQzVCMEVDN0ZDREYzNkExRDhFRDgzNkUz
OTU2RDg0NDYyNTY4RjA4RjQ1RjI5QkM1QjI1ODBGLzAvMUI5MDg2NkJFQTc1ODM1
MkU4M0M4N0UwN0MxREVCRjIyQUJGMDBBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjkwODY2QkVBNzU4MzUyRTgz
Qzg3RTA3QzFERUJGMjJBQkYwMEFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjk3OTNCMDEwMEM1QjBFQzdGQ0RGMzZBMUQ4RUQ4MzZFMzk1NkQ4NDQ2
MjU2OEYwOEY0NUYyOUJDNUIyNTgwRi8wLzM0MzUyZTMyMzIzNTJlMzczMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3hRjAN
BgkqhkiG9w0BAQsFAAOCAQEAEPGZk3Adn0zMUo8sxIYcMOXek9aO51dRrdCMgU7A
qXPOi7njMPm1XOGBzbHbdvmnqRw7MLGrLcW8ZsrnHgRbsMmZn2Kf1Q323lJ60DvU
mhUeWNBEhRkqO2xjHq0CKKs+A95FIMnfQBlEHYQOWFNnTGNzyF0prt63QGXa+nnK
oBGTJKQgjx8x83OZVfyOPP+Ha+GS3L62X8yceJE/jjNGHk4IiyCqyylpKLM49Us3
xaKCU3QIBlQzgtFx7lAXSMUGLLOsBkijLk1Hpuj1kNWHuKL6VaCUxkR74diVKJgk
mSKevj9E1/pnrFq1zvFLMgj2cuedZNbqHFglwOuv3H2vng==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:34 2025 by rpki-client