Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa
File: 3134382e3234352e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier: tWHLnkuS/T9FfzGIQ5Rk9+pRqAt+YEd1gTT8pPmbUa8=
Subject key identifier: 65:F5:37:17:C0:68:35:03:1F:79:1E:B2:57:9C:61:45:7F:E7:8C:8D
Certificate issuer: /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial: 4C859BBE2977968D6343B70BBCA143DDF62EF1BF
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa
Signing time: Tue 04 Feb 2025 18:18:48 +0000
ROA not before: Tue 04 Feb 2025 18:13:48 +0000
ROA not after: Tue 03 Feb 2026 18:18:48 +0000
asID: 6503
IP address blocks: 148.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:85:9b:be:29:77:96:8d:63:43:b7:0b:bc:a1:43:dd:f6:2e:f1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
Validity
Not Before: Feb 4 18:13:48 2025 GMT
Not After : Feb 3 18:18:48 2026 GMT
Subject: CN=65F53717C06835031F791EB2579C61457FE78C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:2c:38:72:1e:d1:70:ca:29:36:e0:e5:f5:
72:b2:8b:0e:1f:20:fc:a5:77:57:78:25:98:83:21:
e1:2e:ef:29:13:12:45:6f:45:88:f1:57:16:19:30:
41:d2:e0:6d:5e:c5:6c:ef:77:ba:96:9d:33:8d:54:
c4:23:e9:d8:41:01:a7:f1:84:4f:30:13:21:32:2c:
62:6c:38:bd:52:37:3a:84:09:a0:68:92:e6:ef:4a:
33:71:dc:38:aa:86:88:25:b3:13:ba:d1:53:4a:6f:
2b:b8:3a:42:a4:78:8a:c5:86:7f:d5:bf:41:b4:2f:
4f:d3:d5:7b:5f:2b:cb:08:d9:60:51:0b:34:63:3d:
6c:ea:95:96:25:e3:ff:c7:e0:18:cf:8d:b5:7d:fe:
93:de:05:86:72:c4:8b:79:e9:36:bc:e0:9c:d8:e4:
d2:53:3d:be:f8:ff:e5:9d:8d:85:85:a7:3b:c1:fa:
dc:e9:9a:81:3e:60:3c:85:43:cc:09:6d:60:25:52:
42:a1:15:b4:19:ce:10:b3:a1:a3:f2:9c:88:92:07:
04:e8:6c:7c:9c:22:65:94:1c:bb:67:e7:6a:70:86:
ce:f8:a6:f6:d3:c8:3a:72:82:4b:45:f9:3b:e6:5e:
bc:f5:b2:ff:a8:92:0c:a5:f1:3d:d6:38:14:bb:f5:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:37:17:C0:68:35:03:1F:79:1E:B2:57:9C:61:45:7F:E7:8C:8D
X509v3 Authority Key Identifier:
keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:e7:5b:b2:cc:50:ca:b4:2d:61:38:79:fe:e5:a6:c5:66:ea:
57:ec:7d:64:f5:8e:fb:a2:4e:ed:7a:8e:93:f7:7d:08:b6:52:
57:ff:24:e0:8d:f9:13:18:a7:69:77:43:86:2b:e4:de:d8:51:
03:76:a2:0c:f2:63:54:3d:9f:32:26:5b:1b:e6:d0:b2:23:c7:
0e:63:9c:b7:e1:ee:e5:17:ad:b1:8a:d3:35:99:dc:2d:77:25:
1c:68:4b:bd:da:cb:d0:f3:3c:85:11:32:bd:20:88:84:31:0b:
06:53:61:cc:13:9c:bc:3d:b2:68:32:37:e0:f4:fa:99:3d:91:
30:29:a4:9e:9b:11:1a:a8:6d:cc:96:6c:70:96:69:99:52:da:
b8:35:3d:fb:aa:5c:04:71:5e:ea:d1:40:39:fa:c4:ac:e4:a0:
6b:b2:3a:30:b5:46:fa:94:ce:41:a0:3e:3a:55:44:1e:51:46:
27:d8:43:12:c8:45:d2:4a:1d:cf:f6:ce:96:d7:a6:80:bf:da:
67:b8:62:85:c4:eb:25:91:ea:b6:ea:d8:c9:26:5f:90:53:b9:
87:d2:c9:58:ab:51:9c:46:01:73:62:8d:a6:a4:e4:cc:f5:01:
ee:c8:74:a2:fa:39:e9:64:3a:6d:95:11:ff:ae:3d:14:ef:36:
85:d4:7d:ff
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUTIWbvil3lo1jQ7cLvKFD3fYu8b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNDhaFw0yNjAyMDMxODE4NDhaMDMxMTAvBgNV
BAMTKDY1RjUzNzE3QzA2ODM1MDMxRjc5MUVCMjU3OUM2MTQ1N0ZFNzhDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymSw4ch7RcMopNuDl9XKyiw4f
IPyld1d4JZiDIeEu7ykTEkVvRYjxVxYZMEHS4G1exWzvd7qWnTONVMQj6dhBAafx
hE8wEyEyLGJsOL1SNzqECaBokubvSjNx3DiqhoglsxO60VNKbyu4OkKkeIrFhn/V
v0G0L0/T1XtfK8sI2WBRCzRjPWzqlZYl4//H4BjPjbV9/pPeBYZyxIt56Ta84JzY
5NJTPb74/+WdjYWFpzvB+tzpmoE+YDyFQ8wJbWAlUkKhFbQZzhCzoaPynIiSBwTo
bHycImWUHLtn52pwhs74pvbTyDpygktF+TvmXrz1sv+okgyl8T3WOBS79RJjAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUZfU3F8BoNQMfeR6yV5xhRX/njI0wHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlPUwDQYJKoZI
hvcNAQELBQADggEBALXnW7LMUMq0LWE4ef7lpsVm6lfsfWT1jvuiTu16jpP3fQi2
Ulf/JOCN+RMYp2l3Q4Yr5N7YUQN2ogzyY1Q9nzImWxvm0LIjxw5jnLfh7uUXrbGK
0zWZ3C13JRxoS73ay9DzPIURMr0giIQxCwZTYcwTnLw9smgyN+D0+pk9kTAppJ6b
ERqobcyWbHCWaZlS2rg1PfuqXARxXurRQDn6xKzkoGuyOjC1RvqUzkGgPjpVRB5R
RifYQxLIRdJKHc/2zpbXpoC/2me4YoXE6yWR6rbq2MkmX5BTuYfSyVirUZxGAXNi
jaak5Mz1Ae7IdKL6OelkOm2VEf+uPRTvNoXUff8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:47 2025 by rpki-client