Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa
File: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier: Ta29OXbn5+Zyv26bzf/oseibW4jTNMpSAkzB34Dw/3s=
Subject key identifier: 28:7D:AB:F0:14:EB:FC:93:78:E4:2F:38:C2:6A:69:82:9B:05:1B:CB
Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial: 6113F9B9F5F46DD6C670DAE6B5EF0DA71C123E55
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa
Signing time: Tue 05 Mar 2024 17:55:35 +0000
ROA not before: Tue 05 Mar 2024 17:50:35 +0000
ROA not after: Tue 04 Mar 2025 17:55:35 +0000
asID: 263244
IP address blocks: 170.247.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:13:f9:b9:f5:f4:6d:d6:c6:70:da:e6:b5:ef:0d:a7:1c:12:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Validity
Not Before: Mar 5 17:50:35 2024 GMT
Not After : Mar 4 17:55:35 2025 GMT
Subject: CN=287DABF014EBFC9378E42F38C26A69829B051BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:42:fd:d5:b0:0d:00:fc:68:58:0b:e5:e7:
43:4c:68:d1:26:d0:39:63:db:d9:37:88:a6:8e:2a:
35:53:d0:63:88:7b:ab:28:83:3d:e6:4d:70:c2:e8:
09:70:87:00:88:6c:ab:83:e2:70:b8:fe:ba:a0:4d:
88:e4:7e:7d:99:f8:1f:90:af:c3:74:f6:27:ae:42:
17:4e:3b:97:fd:22:12:3b:99:71:fa:02:48:94:3c:
93:d4:9a:3a:2e:ac:17:4e:6d:ca:9c:74:dd:6d:69:
68:f8:b2:65:97:5e:d2:ae:fb:99:9f:b6:95:b4:52:
c0:21:e0:4a:ed:c9:4e:8c:e0:ce:76:a3:b7:6f:d2:
cf:92:90:7c:98:3a:0e:75:77:77:3e:a7:73:be:fd:
be:ff:00:df:09:3a:04:b9:c5:f4:77:5d:e0:b7:be:
33:6b:76:3c:23:d9:92:dc:0c:e5:62:36:94:ff:92:
32:ba:24:4d:0a:f6:3d:c4:bb:7f:71:eb:ac:be:6a:
99:3e:75:9c:5d:f4:c2:cf:b7:3c:61:6b:7b:46:d8:
32:ad:1a:bb:f7:dc:97:af:df:3d:0b:cc:4b:25:ee:
62:55:ef:82:05:70:86:a1:24:d8:29:6a:90:82:42:
92:9b:ec:d1:d8:54:4a:6e:35:b5:f4:64:86:88:c8:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:AB:F0:14:EB:FC:93:78:E4:2F:38:C2:6A:69:82:9B:05:1B:CB
X509v3 Authority Key Identifier:
keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8b:72:ea:fc:ff:65:22:c2:1e:6d:90:68:ac:3c:bb:19:7c:
b5:b7:a5:59:f4:34:6a:57:3c:46:9b:7e:0f:d5:40:4a:9e:1a:
9e:28:03:17:38:d1:65:54:d8:48:d0:48:d0:24:d3:f8:e8:67:
35:57:fb:6b:90:20:dc:b9:e4:7c:69:52:89:74:0e:98:66:52:
7a:5a:b3:78:f7:6c:e4:ef:f7:d2:af:e0:fc:b6:c3:c3:3d:dd:
2b:f1:e2:7f:41:2c:a9:3a:5f:82:07:7d:e4:62:c2:ab:e1:1e:
62:56:fb:ea:73:26:05:ee:0f:5d:7a:b7:86:c4:80:11:46:81:
bb:87:4f:f4:fc:8a:a9:52:8b:8b:8a:f2:51:33:5a:78:68:90:
d9:89:05:60:40:27:c4:5d:01:df:4c:6d:80:3f:12:ac:0b:b0:
0d:a3:0f:0b:54:50:08:60:d4:36:f3:a3:95:14:35:64:de:6e:
9e:b5:4e:57:4a:ae:2d:be:d4:fb:74:a7:b8:51:4e:d8:e9:c5:
c4:fd:4b:97:2d:fa:26:8e:07:13:b4:e7:00:87:54:66:d0:f3:
b7:f6:0d:33:19:18:9c:bd:5b:eb:5d:b4:c0:19:69:68:9e:ba:
85:a3:5f:8a:6d:b7:35:37:ff:17:a6:1c:a1:fa:4a:81:9e:bd:
45:f7:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:17:53 2025 by rpki-client