Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa
File: 34352e3137302e33312e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier: tkjFxXvjogwYE5kuXT5Gc2HgR/Y/4ZO/aq1ouurjh40=
Subject key identifier: 41:BB:5C:64:D0:85:DE:CF:E6:55:41:4F:1F:58:8A:F1:9D:10:BC:BF
Certificate issuer: /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial: 4F865842CEE822F4B7D096A62E0731CEDE260700
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa
Signing time: Thu 28 Nov 2024 22:15:00 +0000
ROA not before: Thu 28 Nov 2024 22:10:00 +0000
ROA not after: Thu 27 Nov 2025 22:15:00 +0000
asID: 267752
IP address blocks: 45.170.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:86:58:42:ce:e8:22:f4:b7:d0:96:a6:2e:07:31:ce:de:26:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Validity
Not Before: Nov 28 22:10:00 2024 GMT
Not After : Nov 27 22:15:00 2025 GMT
Subject: CN=41BB5C64D085DECFE655414F1F588AF19D10BCBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a8:83:e9:ed:6c:f3:09:f3:c2:5e:11:bd:85:
08:a7:f2:3d:66:33:06:7c:20:88:dc:05:8a:6a:7c:
53:d9:e9:7e:fa:68:62:be:ef:9a:be:85:48:56:a5:
e8:47:f7:f2:4d:f1:67:e4:b7:09:65:33:f7:22:8b:
55:42:3f:56:a5:41:d0:75:50:8d:fb:a0:c3:e3:64:
71:97:f0:75:a5:c6:33:0b:f3:ad:56:39:60:47:60:
cc:aa:25:e7:a4:40:f8:ce:9a:78:f1:cd:c0:7b:87:
13:fd:a0:47:38:b0:f7:8b:9c:1f:51:86:ab:01:84:
50:7d:6d:47:e2:bf:c2:42:3e:5e:d1:f5:5b:a1:44:
0d:26:a9:28:b5:3a:38:0b:18:9c:52:33:54:46:1a:
a6:2a:a6:b4:8d:1d:b5:f4:e5:eb:4e:e8:33:17:91:
60:35:d9:30:18:3c:da:c2:de:4f:13:19:82:f6:b2:
ce:f9:8b:b7:f5:06:a5:d7:f9:d8:35:7d:19:9b:d8:
6d:89:f2:c6:04:3f:da:f2:a4:48:ad:fc:07:70:57:
89:d7:da:2b:68:54:e4:f2:e7:0a:ee:43:e5:53:cf:
5f:39:30:47:ec:24:43:95:64:08:fe:33:fb:45:c2:
85:19:41:70:61:8a:9b:d6:f2:7d:26:f6:b3:f9:a6:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:5C:64:D0:85:DE:CF:E6:55:41:4F:1F:58:8A:F1:9D:10:BC:BF
X509v3 Authority Key Identifier:
keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:65:f0:76:78:6b:73:a5:00:34:60:2f:20:b3:f6:61:00:
f7:49:9a:5b:6b:f7:78:72:8d:06:88:23:28:1b:cc:2c:e7:0a:
35:1d:65:07:75:fc:8d:20:66:36:6f:64:f2:65:46:1b:b1:a0:
53:e8:30:95:82:04:9f:04:86:ff:57:23:0c:9c:17:dd:dc:17:
c7:a1:65:ed:67:f6:09:1a:f5:7e:1a:00:8c:dd:8b:aa:19:74:
85:3a:d2:eb:5c:b4:c6:72:fe:cf:ea:45:6c:91:fd:8f:bb:6a:
75:ec:e1:c8:ba:b5:b5:93:66:1c:fd:92:5f:8f:c7:5d:3a:f3:
18:0b:92:05:3e:ef:50:bd:6e:0f:1f:b7:a1:e3:c8:98:cc:25:
74:34:8d:01:f8:98:a5:91:a9:6a:da:42:b5:a6:37:4b:71:40:
07:1b:8a:a9:0e:83:b2:77:d5:ec:be:f8:8c:47:cc:6f:fa:cc:
6a:96:07:e2:ae:c2:f4:5a:f7:00:2f:01:b3:a6:0f:f9:67:27:
af:72:e1:9a:f8:af:0a:d7:f9:dc:d0:68:06:0b:12:bd:65:2a:
84:4d:6b:48:3a:26:e8:e9:7b:b3:d8:86:c3:20:fa:0d:9d:29:
c3:ee:8d:d7:5a:4c:12:b3:20:4d:36:03:18:bf:e1:16:0c:90:
ee:1d:fe:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT4ZYQs7oIvS30JamLgcxzt4mBwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwN0FGQkNDM0ZGQjYyNUVFQTY3NEY5Mzg1MDhGMUJD
MzMwOUUwMDAeFw0yNDExMjgyMjEwMDBaFw0yNTExMjcyMjE1MDBaMDMxMTAvBgNV
BAMTKDQxQkI1QzY0RDA4NURFQ0ZFNjU1NDE0RjFGNTg4QUYxOUQxMEJDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4qIPp7WzzCfPCXhG9hQin8j1m
MwZ8IIjcBYpqfFPZ6X76aGK+75q+hUhWpehH9/JN8WfktwllM/cii1VCP1alQdB1
UI37oMPjZHGX8HWlxjML861WOWBHYMyqJeekQPjOmnjxzcB7hxP9oEc4sPeLnB9R
hqsBhFB9bUfiv8JCPl7R9VuhRA0mqSi1OjgLGJxSM1RGGqYqprSNHbX05etO6DMX
kWA12TAYPNrC3k8TGYL2ss75i7f1BqXX+dg1fRmb2G2J8sYEP9rypEit/AdwV4nX
2itoVOTy5wruQ+VTz185MEfsJEOVZAj+M/tFwoUZQXBhipvW8n0m9rP5pqazAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQbtcZNCF3s/mVUFPH1iK8Z0QvL8wHwYDVR0j
BBgwFoAU/QevvMP/tiXupnT5OFCPG8MwngAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREMwNEUxODU3MDJEM0MwQTVCODc3NjE4NDg3QzBCQzJC
QzJGREU0MTMxQzU3ODA2QTJCQjM0MzlDN0RFNTVFLzAvRkQwN0FGQkNDM0ZGQjYy
NUVFQTY3NEY5Mzg1MDhGMUJDMzMwOUUwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDA3QUZCQ0MzRkZCNjI1RUVB
Njc0RjkzODUwOEYxQkMzMzA5RTAwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDMDRFMTg1NzAyRDNDMEE1Qjg3NzYxODQ4N0MwQkMyQkMyRkRFNDEz
MUM1NzgwNkEyQkIzNDM5QzdERTU1RS8wLzM0MzUyZTMxMzczMDJlMzMzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzUzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2qHzAN
BgkqhkiG9w0BAQsFAAOCAQEAPtdl8HZ4a3OlADRgLyCz9mEA90maW2v3eHKNBogj
KBvMLOcKNR1lB3X8jSBmNm9k8mVGG7GgU+gwlYIEnwSG/1cjDJwX3dwXx6Fl7Wf2
CRr1fhoAjN2Lqhl0hTrS61y0xnL+z+pFbJH9j7tqdezhyLq1tZNmHP2SX4/HXTrz
GAuSBT7vUL1uDx+3oePImMwldDSNAfiYpZGpatpCtaY3S3FABxuKqQ6DsnfV7L74
jEfMb/rMapYH4q7C9Fr3AC8Bs6YP+Wcnr3LhmvivCtf53NBoBgsSvWUqhE1rSDom
6Ol7s9iGwyD6DZ0pw+6N11pMErMgTTYDGL/hFgyQ7h3+rw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:18 2025 by rpki-client