Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
File: 3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier: 96oUB7aSfISUCaprQimU4je1TitcxVCTeQRSUvovhas=
Subject key identifier: A1:80:6D:3F:91:DC:AE:70:CB:B6:5C:95:E8:1B:79:E6:F8:91:E6:72
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 740F2509B06E82004EE506C5E23B1E91103F1135
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
Signing time: Mon 20 May 2024 13:15:00 +0000
ROA not before: Mon 20 May 2024 13:10:00 +0000
ROA not after: Mon 19 May 2025 13:15:00 +0000
asID: 12127
IP address blocks: 168.243.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:0f:25:09:b0:6e:82:00:4e:e5:06:c5:e2:3b:1e:91:10:3f:11:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: May 20 13:10:00 2024 GMT
Not After : May 19 13:15:00 2025 GMT
Subject: CN=A1806D3F91DCAE70CBB65C95E81B79E6F891E672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:c6:c2:d1:ad:82:5d:1b:e8:17:fe:a8:de:
ca:5c:c4:eb:a5:03:a3:79:f4:83:26:ac:5a:65:f6:
2f:6d:cc:82:65:c1:cf:d6:f8:af:dd:06:ed:92:d3:
d0:cd:98:df:36:3c:5a:17:22:34:67:49:d2:c8:8b:
dd:be:5b:7c:46:91:cb:c8:bd:23:28:17:66:db:9a:
8a:3a:5e:c1:6d:8c:ef:c1:45:0b:fe:ab:c3:d9:62:
1b:bc:10:26:9c:99:1a:07:eb:09:79:9a:09:19:2b:
4f:27:71:48:ec:22:a9:d1:99:79:26:a8:9f:19:38:
c9:70:c9:1b:c4:cd:ea:30:79:e9:4b:34:56:a6:0d:
80:4c:31:cb:df:ba:a3:49:fb:b0:18:15:2c:63:d5:
af:8f:b2:65:1a:b5:cb:72:0c:ca:75:42:08:f5:bb:
f9:16:bc:a9:31:e0:1d:70:94:7c:9b:9b:5a:90:fb:
d5:40:c9:be:b9:21:3c:96:22:e9:6f:26:a0:a7:02:
ce:ab:8f:20:c9:4b:ab:a2:b0:68:bc:c8:a4:43:3b:
13:e8:69:43:1c:48:1e:cc:8f:b9:83:27:17:0e:ad:
71:ff:37:c6:c3:ba:93:4d:ba:96:e1:6e:bb:23:db:
15:07:69:bf:c0:fe:1c:30:65:36:1a:a6:66:6e:3a:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:6D:3F:91:DC:AE:70:CB:B6:5C:95:E8:1B:79:E6:F8:91:E6:72
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.223.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2c:d1:0e:d9:d4:0b:d6:a4:1e:f5:c7:ad:45:65:bb:7e:71:
9d:f2:b6:62:25:56:c3:e6:ca:83:c0:72:30:0b:a1:ae:6f:c5:
8b:bc:3a:36:0f:a9:76:eb:e2:05:4b:07:3f:31:7f:29:c8:a5:
b9:01:4c:6d:7e:a5:df:67:c3:70:44:99:1a:48:87:2b:3f:82:
45:d6:cb:c2:d8:94:2a:61:4b:50:27:77:50:b0:1c:f3:c6:8b:
ba:5e:80:8b:ac:d2:64:e6:82:ea:47:fe:40:fc:93:9f:33:bb:
a1:c6:ae:e2:e3:ce:30:a5:1b:93:93:ac:90:27:f4:6b:07:71:
83:9c:1c:ef:4d:76:8c:1a:8d:0f:70:38:ec:a1:c4:03:b7:ab:
05:f4:b3:69:e0:03:5d:5e:7e:d5:2f:3f:07:2b:69:de:01:47:
1a:1d:c4:c7:09:4d:6b:e6:14:5b:41:6e:d1:9b:30:3e:07:09:
46:01:fe:99:6c:1b:c9:43:c6:ac:01:da:9d:db:d3:4c:a7:88:
bf:a0:1c:00:cc:85:2f:ac:70:b5:cb:0c:2a:61:35:70:bd:53:
9f:46:e8:af:54:0d:dd:f2:6c:56:a0:87:50:e7:3c:05:ec:4c:
56:d2:c6:12:e4:c0:3d:6c:23:98:be:fc:cc:b5:30:79:06:c1:
00:fd:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:09:51 2025 by rpki-client