Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32322d3232203d3e20323639393237.roa
File: 3230372e3139312e3137322e302f32322d3232203d3e20323639393237.roa (raw, json)
Hash identifier: 1UkyXfiS/hoWnv8euFFsPcf4xbhaXtWkrEadTy12qwE=
Subject key identifier: 84:7C:69:5F:70:FA:7A:D9:F4:6D:C1:80:BF:51:35:7C:07:4B:D5:6E
Certificate issuer: /CN=11608D0E6066566C8B39881F7F4F27D38D7F38FE
Certificate serial: 222E10603342CEF2420C468AF73874E98C4AC9F0
Authority key identifier: 11:60:8D:0E:60:66:56:6C:8B:39:88:1F:7F:4F:27:D3:8D:7F:38:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32322d3232203d3e20323639393237.roa
Signing time: Mon 02 Dec 2024 21:10:00 +0000
ROA not before: Mon 02 Dec 2024 21:05:00 +0000
ROA not after: Mon 01 Dec 2025 21:10:00 +0000
asID: 269927
IP address blocks: 207.191.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2e:10:60:33:42:ce:f2:42:0c:46:8a:f7:38:74:e9:8c:4a:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11608D0E6066566C8B39881F7F4F27D38D7F38FE
Validity
Not Before: Dec 2 21:05:00 2024 GMT
Not After : Dec 1 21:10:00 2025 GMT
Subject: CN=847C695F70FA7AD9F46DC180BF51357C074BD56E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:b4:51:09:b0:24:28:0d:a0:03:f5:b5:36:
3d:05:c4:4c:25:90:19:e2:85:4b:70:7c:dd:7c:99:
27:7f:d8:95:6f:93:a5:c4:39:02:8e:3f:26:55:87:
40:60:ba:58:40:74:7c:e0:cd:d7:a8:22:87:98:a7:
9b:e8:33:2f:a4:86:5c:5b:76:19:91:70:48:41:18:
69:75:ad:ff:c9:07:21:fc:8e:bd:a9:4b:34:6d:ae:
23:93:66:c7:66:69:af:dd:52:90:6c:ee:d1:fd:f4:
34:ec:8c:1e:79:19:59:b0:ea:60:8e:de:3c:b7:a0:
01:a5:ab:93:0b:8b:ad:bf:97:1b:42:92:f0:b9:f5:
88:cd:d2:4f:7b:cd:33:91:e2:79:dc:8f:c4:05:07:
33:d6:e7:e4:ec:0d:71:1b:da:64:2a:5a:24:18:9a:
a5:1c:dd:4d:b0:bd:e7:b4:bf:f4:6a:c3:23:c2:d1:
bd:56:e4:86:b7:7f:00:f9:57:80:07:43:85:e8:29:
83:50:e0:f7:5c:93:dc:39:1d:25:2c:29:f8:de:5a:
ff:25:3e:64:67:f6:9b:c2:50:3c:72:8b:e5:f0:18:
da:0a:66:fb:25:07:ad:66:3d:4f:c6:24:b0:b0:e1:
01:d6:28:84:df:a1:9d:7a:00:8a:e3:ac:78:d7:dd:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:69:5F:70:FA:7A:D9:F4:6D:C1:80:BF:51:35:7C:07:4B:D5:6E
X509v3 Authority Key Identifier:
keyid:11:60:8D:0E:60:66:56:6C:8B:39:88:1F:7F:4F:27:D3:8D:7F:38:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32322d3232203d3e20323639393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.191.172.0/22
Signature Algorithm: sha256WithRSAEncryption
01:97:24:00:e9:ce:0b:ca:af:c0:61:1b:f7:50:15:d0:66:a9:
78:3d:db:56:73:51:0f:63:a1:41:9e:10:46:01:b0:8c:69:d0:
d7:56:15:c7:3f:f2:d3:1f:55:10:e1:39:51:21:ac:6f:dc:7d:
e9:78:01:9e:db:8e:84:90:88:ed:c3:0d:df:c1:12:7b:d1:ba:
c2:12:f8:4b:4b:0a:79:6f:f7:20:9f:23:42:fd:ea:f2:29:f2:
fd:b0:1a:80:5c:6a:ea:31:a4:1a:e0:9f:f6:09:73:7d:64:12:
11:b6:17:31:29:46:55:4c:3c:eb:35:68:3a:32:93:f0:3a:07:
31:43:89:b0:14:f4:57:e1:2e:c7:26:08:fe:c3:2f:78:7f:c1:
cc:5b:12:8d:ee:b2:70:99:00:f1:53:79:65:55:da:e8:dd:02:
e4:6d:f1:47:51:4f:4c:6f:2b:ef:65:bc:d8:d3:a5:bd:a0:38:
5f:3c:ba:23:f0:13:bc:b9:3a:aa:96:7a:9f:e3:ff:1b:65:c5:
25:2d:b8:55:6e:27:f4:43:d0:40:f8:43:f1:50:fc:a5:d2:a0:
de:19:7c:39:3b:bb:b4:55:ce:5d:f0:f0:3b:6f:50:54:09:99:
fa:6e:d3:51:00:7a:e2:ae:da:53:91:32:23:a5:72:17:e7:83:
d3:2b:3d:5a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIi4QYDNCzvJCDEaK9zh06YxKyfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE2MDhEMEU2MDY2NTY2QzhCMzk4ODFGN0Y0RjI3RDM4
RDdGMzhGRTAeFw0yNDEyMDIyMTA1MDBaFw0yNTEyMDEyMTEwMDBaMDMxMTAvBgNV
BAMTKDg0N0M2OTVGNzBGQTdBRDlGNDZEQzE4MEJGNTEzNTdDMDc0QkQ1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8bRRCbAkKA2gA/W1Nj0FxEwl
kBnihUtwfN18mSd/2JVvk6XEOQKOPyZVh0BgulhAdHzgzdeoIoeYp5voMy+khlxb
dhmRcEhBGGl1rf/JByH8jr2pSzRtriOTZsdmaa/dUpBs7tH99DTsjB55GVmw6mCO
3jy3oAGlq5MLi62/lxtCkvC59YjN0k97zTOR4nncj8QFBzPW5+TsDXEb2mQqWiQY
mqUc3U2wvee0v/RqwyPC0b1W5Ia3fwD5V4AHQ4XoKYNQ4Pdck9w5HSUsKfjeWv8l
PmRn9pvCUDxyi+XwGNoKZvslB61mPU/GJLCw4QHWKITfoZ16AIrjrHjX3Z0xAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUhHxpX3D6etn0bcGAv1E1fAdL1W4wHwYDVR0j
BBgwFoAUEWCNDmBmVmyLOYgff08n041/OP4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREExQjI1MUE1QUM2NUNFM0ZGNDQyNEExREU0NEQzMTlB
MUVCOTMwM0I1NDlDNzUxNEU4MDgyOTJFODY5RkQ3LzAvMTE2MDhEMEU2MDY2NTY2
QzhCMzk4ODFGN0Y0RjI3RDM4RDdGMzhGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTYwOEQwRTYwNjY1NjZDOEIz
OTg4MUY3RjRGMjdEMzhEN0YzOEZFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURBMUIyNTFBNUFDNjVDRTNGRjQ0MjRBMURFNDREMzE5QTFFQjkzMDNC
NTQ5Qzc1MTRFODA4MjkyRTg2OUZENy8wLzMyMzAzNzJlMzEzOTMxMmUzMTM3MzIy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzkzOTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALP
v6wwDQYJKoZIhvcNAQELBQADggEBAAGXJADpzgvKr8BhG/dQFdBmqXg921ZzUQ9j
oUGeEEYBsIxp0NdWFcc/8tMfVRDhOVEhrG/cfel4AZ7bjoSQiO3DDd/BEnvRusIS
+EtLCnlv9yCfI0L96vIp8v2wGoBcauoxpBrgn/YJc31kEhG2FzEpRlVMPOs1aDoy
k/A6BzFDibAU9FfhLscmCP7DL3h/wcxbEo3usnCZAPFTeWVV2ujdAuRt8UdRT0xv
K+9lvNjTpb2gOF88uiPwE7y5OqqWep/j/xtlxSUtuFVuJ/RD0ED4Q/FQ/KXSoN4Z
fDk7u7RVzl3w8DtvUFQJmfpu01EAeuKu2lORMiOlchfng9MrPVo=
-----END CERTIFICATE-----
Generated at Fri May 9 23:45:13 2025 by rpki-client