Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
File: 3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier: 3Ta2XuaMw6SgnwP6Td6U16cGQxfTPeyf7tBj9ki/4/0=
Subject key identifier: 23:77:F6:9E:27:3A:FA:B9:50:AF:FF:93:47:80:93:1A:DC:F7:80:E1
Certificate issuer: /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial: 10EAFB90F09D8BA2ADC8ADEFB14A642B0312D1AC
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
Signing time: Tue 04 Feb 2025 18:40:15 +0000
ROA not before: Tue 04 Feb 2025 18:35:15 +0000
ROA not after: Tue 03 Feb 2026 18:40:15 +0000
asID: 263829
IP address blocks: 168.181.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ea:fb:90:f0:9d:8b:a2:ad:c8:ad:ef:b1:4a:64:2b:03:12:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
Validity
Not Before: Feb 4 18:35:15 2025 GMT
Not After : Feb 3 18:40:15 2026 GMT
Subject: CN=2377F69E273AFAB950AFFF934780931ADCF780E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:61:a6:6c:01:46:e8:24:08:8e:64:d1:3e:
36:d3:1d:6c:7e:77:10:5f:6b:d2:e5:0e:e8:dc:19:
bc:63:0d:d9:e6:97:42:f8:30:f0:08:92:f2:ae:99:
41:ba:e3:07:e1:f1:64:43:2c:4d:68:11:2b:a5:37:
3d:96:4f:c8:d0:91:71:08:81:63:e4:c6:e4:da:7e:
5b:9f:a7:b1:4b:03:6f:6b:09:37:cc:c9:25:bd:14:
9b:84:f0:26:26:88:59:47:88:96:5e:de:97:29:02:
54:48:bf:e3:68:bd:e4:bf:6e:bd:09:11:5e:8d:32:
c8:f6:28:65:14:95:0a:a4:44:fd:4c:21:96:8d:ee:
4b:db:54:34:c5:c4:82:6e:d0:5f:57:3d:08:64:91:
f4:f6:23:36:6e:b2:42:cc:7a:73:8b:f4:43:03:dd:
e7:2f:88:53:11:59:9a:1f:a4:7b:7b:e0:f0:6e:d9:
3f:68:13:34:d6:fb:ed:ec:a6:33:8d:dc:d6:90:69:
06:c3:74:b6:cc:a1:79:d2:62:a9:5c:b3:e7:67:89:
f9:83:7b:fd:83:d4:06:33:1a:89:50:be:21:8b:66:
53:d9:b6:d9:6f:04:3e:51:0b:cf:f6:7a:18:bf:31:
af:dd:48:63:76:d5:3a:30:71:c5:eb:4c:39:6b:eb:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:F6:9E:27:3A:FA:B9:50:AF:FF:93:47:80:93:1A:DC:F7:80:E1
X509v3 Authority Key Identifier:
keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.228.0/22
Signature Algorithm: sha256WithRSAEncryption
80:9d:63:d1:6f:de:9f:d6:52:80:cc:fd:0c:e4:ba:50:01:19:
d1:97:54:b9:65:e9:07:08:2d:45:de:c6:ef:fb:b0:bd:72:50:
80:03:bd:81:42:86:e6:c5:bf:63:c9:82:06:5d:c4:a1:4f:ff:
e8:fe:a9:8e:76:e7:6e:f1:92:ef:6d:ab:7d:c6:a4:58:a3:18:
88:7a:7d:4c:e4:08:52:08:7a:b9:f4:78:40:26:44:9c:05:14:
6d:97:33:fd:a5:df:3c:5a:22:3a:5b:4c:7b:ff:5d:08:a5:2a:
74:35:a6:60:a0:ab:fb:bb:44:0b:d7:5f:f9:41:ac:21:56:a9:
2d:f0:13:c0:b2:01:8a:3f:70:4a:9a:66:c0:dd:32:2b:2b:20:
a4:8d:1d:dc:c5:5d:db:1f:2e:20:03:18:84:1f:bb:f6:09:c6:
8c:f3:11:97:af:89:aa:ac:0f:f0:f1:76:3f:d8:87:21:07:46:
42:65:00:1f:29:d5:55:d9:13:93:5b:b6:2c:28:9a:82:59:71:
f6:29:0f:04:55:ed:1e:d8:5c:6d:55:0f:2b:e2:82:08:bd:67:
3b:d8:71:c7:4f:70:53:10:20:c8:7c:1c:ba:bc:4d:26:00:03:
0d:2b:7d:e3:03:32:d4:8c:a7:fc:38:47:ba:fd:a9:fb:3d:d3:
83:65:94:fa
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEOr7kPCdi6KtyK3vsUpkKwMS0awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzRjUzM0M4MzU0NTQ5QzU2NzRCNDMxMTNEQTIwN0JE
N0VGMUEzMTAeFw0yNTAyMDQxODM1MTVaFw0yNjAyMDMxODQwMTVaMDMxMTAvBgNV
BAMTKDIzNzdGNjlFMjczQUZBQjk1MEFGRkY5MzQ3ODA5MzFBRENGNzgwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RWGmbAFG6CQIjmTRPjbTHWx+
dxBfa9LlDujcGbxjDdnml0L4MPAIkvKumUG64wfh8WRDLE1oESulNz2WT8jQkXEI
gWPkxuTaflufp7FLA29rCTfMySW9FJuE8CYmiFlHiJZe3pcpAlRIv+NoveS/br0J
EV6NMsj2KGUUlQqkRP1MIZaN7kvbVDTFxIJu0F9XPQhkkfT2IzZuskLMenOL9EMD
3ecviFMRWZofpHt74PBu2T9oEzTW++3spjON3NaQaQbDdLbMoXnSYqlcs+dnifmD
e/2D1AYzGolQviGLZlPZttlvBD5RC8/2ehi/Ma/dSGN21TowccXrTDlr69BRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUI3f2nic6+rlQr/+TR4CTGtz3gOEwHwYDVR0j
BBgwFoAUUz9TPINUVJxWdLQxE9oge9fvGjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQzYwQzlEQTBCMDcyRkFBQjE5QkM1MUM1REUzM0E4RTcx
MzgzNTIwMDA5OTQ3OTQ1NjRFMzI4RDk1OUNGMTdELzAvNTMzRjUzM0M4MzU0NTQ5
QzU2NzRCNDMxMTNEQTIwN0JEN0VGMUEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzNGNTMzQzgzNTQ1NDlDNTY3
NEI0MzExM0RBMjA3QkQ3RUYxQTMxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkM2MEM5REEwQjA3MkZBQUIxOUJDNTFDNURFMzNBOEU3MTM4MzUyMDAw
OTk0Nzk0NTY0RTMyOEQ5NTlDRjE3RC8wLzMxMzYzODJlMzEzODMxMmUzMjMyMzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzODMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
teQwDQYJKoZIhvcNAQELBQADggEBAICdY9Fv3p/WUoDM/QzkulABGdGXVLll6QcI
LUXexu/7sL1yUIADvYFChubFv2PJggZdxKFP/+j+qY52527xku9tq33GpFijGIh6
fUzkCFIIern0eEAmRJwFFG2XM/2l3zxaIjpbTHv/XQilKnQ1pmCgq/u7RAvXX/lB
rCFWqS3wE8CyAYo/cEqaZsDdMisrIKSNHdzFXdsfLiADGIQfu/YJxozzEZeviaqs
D/Dxdj/YhyEHRkJlAB8p1VXZE5NbtiwomoJZcfYpDwRV7R7YXG1VDyviggi9ZzvY
ccdPcFMQIMh8HLq8TSYAAw0rfeMDMtSMp/w4R7r9qfs904NllPo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:38 2025 by rpki-client