Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
File: 3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier: zSMeoXUwUp8SH8zxQiR/WiV2xb+io2FhCBxQgSUrjOQ=
Subject key identifier: A3:23:F8:C0:71:C7:80:63:4F:5A:E5:03:C9:34:42:4E:BA:C0:8A:BE
Certificate issuer: /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial: 56E0C65BB632BC12A1F3AC2B1CC8AA6B410F4BE1
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
Signing time: Tue 05 Mar 2024 18:15:33 +0000
ROA not before: Tue 05 Mar 2024 18:10:33 +0000
ROA not after: Tue 04 Mar 2025 18:15:33 +0000
asID: 262253
IP address blocks: 167.250.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e0:c6:5b:b6:32:bc:12:a1:f3:ac:2b:1c:c8:aa:6b:41:0f:4b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Validity
Not Before: Mar 5 18:10:33 2024 GMT
Not After : Mar 4 18:15:33 2025 GMT
Subject: CN=A323F8C071C780634F5AE503C934424EBAC08ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:12:b7:90:00:c3:79:25:23:a4:85:35:85:
2c:5d:8b:3f:52:08:80:e2:81:fc:98:3d:fa:12:24:
34:5d:18:64:4b:36:d8:43:a0:b5:c6:80:7b:06:a9:
15:46:ec:01:27:19:41:4a:24:a8:e5:11:c8:04:87:
69:6b:c9:78:d4:57:e6:36:b0:8d:1e:95:54:2f:d0:
b9:52:df:d2:f8:c5:66:6e:8f:06:79:bd:38:ed:5e:
97:45:90:01:53:c8:dd:90:2c:3d:7e:43:87:45:aa:
5a:51:73:7a:ea:90:d5:c1:eb:ea:17:3f:85:d5:be:
e4:a3:4f:40:3e:cf:d7:11:3f:82:fe:22:d5:cd:95:
be:83:db:67:20:4f:da:96:54:09:98:99:f8:c4:08:
ef:e6:c7:f4:3b:38:cf:a6:b8:07:99:a6:f6:35:7d:
c7:a6:6e:48:17:15:eb:81:44:ff:58:ec:d2:11:03:
04:c6:07:98:76:07:20:d8:a9:c5:0a:89:81:df:93:
4f:78:9e:47:d6:db:c5:66:e4:03:12:9e:c6:da:e7:
f8:a5:9f:34:4c:41:dd:55:77:02:e6:5f:15:62:d0:
7e:ee:e3:25:ea:b3:8b:d2:6c:5b:43:39:9f:93:f1:
58:9c:a9:cd:49:b8:19:69:43:68:fd:1b:eb:d7:43:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:F8:C0:71:C7:80:63:4F:5A:E5:03:C9:34:42:4E:BA:C0:8A:BE
X509v3 Authority Key Identifier:
keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.204.0/24
Signature Algorithm: sha256WithRSAEncryption
13:48:95:e4:4e:0b:64:09:be:14:3f:54:40:97:de:f6:90:f0:
61:02:99:7d:d1:ce:c1:02:9d:1d:8e:7f:cd:11:02:b3:3d:19:
6b:a6:80:e1:17:e1:d2:4f:5b:cd:d8:e7:13:ac:66:18:a5:3e:
dc:46:f7:85:02:c3:87:56:36:c8:7a:d1:70:af:b0:f2:63:56:
88:99:c4:28:31:67:d2:63:73:b5:74:83:00:42:b1:a7:96:02:
dc:6a:74:9a:53:79:28:68:9a:21:ea:26:ac:2f:44:ba:e7:34:
d6:29:b8:e6:b4:ad:43:e9:18:0f:da:82:af:8c:c6:77:2c:b5:
7c:a9:02:a7:cc:14:5a:e3:7c:d1:d8:7a:de:a3:45:77:a2:a8:
d7:13:70:cd:de:0d:51:1c:db:77:67:ae:99:57:b8:d5:dd:df:
97:dc:18:b1:3e:8e:28:4a:ab:e5:d1:2d:0b:45:4e:6e:ec:d9:
4c:d4:a7:04:2f:3e:c1:d0:13:68:96:56:40:8a:6a:a6:17:db:
67:58:d6:81:45:92:8b:42:0e:40:5e:f9:6e:cc:99:f7:63:e9:
91:82:07:b4:b6:aa:c5:87:dd:f1:21:29:2e:60:13:65:7d:8c:
49:94:a2:24:db:a4:c6:d2:27:bd:64:5c:72:79:9d:c9:26:b4:
01:b5:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:58:59 2025 by rpki-client