Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa
File: 3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa (raw, json)
Hash identifier: TC09yhiiJH5sj0J9zFJiYqAe5H8/uFQutkzN04Kag5I=
Subject key identifier: 4A:A0:E3:0F:9A:57:67:D2:9C:E8:65:DE:F0:42:3E:35:21:FC:69:8E
Certificate issuer: /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial: 7104417CB0C4AB410382EAA43799A5E2C40C5687
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa
Signing time: Tue 05 Mar 2024 17:47:55 +0000
ROA not before: Tue 05 Mar 2024 17:42:55 +0000
ROA not after: Tue 04 Mar 2025 17:47:55 +0000
asID: 394474
IP address blocks: 170.254.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:04:41:7c:b0:c4:ab:41:03:82:ea:a4:37:99:a5:e2:c4:0c:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Validity
Not Before: Mar 5 17:42:55 2024 GMT
Not After : Mar 4 17:47:55 2025 GMT
Subject: CN=4AA0E30F9A5767D29CE865DEF0423E3521FC698E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:eb:3a:92:96:da:0d:cf:bc:43:b0:b4:a8:
59:f3:c2:44:13:8b:78:69:b3:2d:6c:7f:4a:dc:f4:
24:a8:13:d4:84:38:61:e0:09:2f:66:14:ab:76:7c:
7d:b6:d6:3b:d8:3b:20:1a:6e:ea:c0:28:a7:57:60:
08:64:77:14:bf:34:ad:65:c7:d9:19:b9:3b:38:dc:
5d:4b:58:e4:ab:15:3a:0f:82:e7:ff:6a:a6:50:d9:
38:7c:ec:cc:75:dc:d5:50:5e:7a:62:2a:73:88:d3:
96:e1:79:d7:73:ca:36:95:cc:60:98:a7:fe:43:3b:
4b:4e:1f:7f:4e:af:58:ec:61:e1:6b:4c:ba:db:44:
fe:82:3b:e9:ad:5f:63:bc:bc:18:fc:d7:80:ae:ba:
3d:e1:34:88:41:7b:b0:e3:98:e9:5c:d2:00:5a:f8:
f2:96:ab:9c:85:ce:18:6a:95:a9:3e:e7:97:ef:7c:
1a:48:a0:11:e3:4f:a3:74:71:0f:5f:3b:ba:32:d2:
d8:8d:05:e6:87:1c:0b:96:aa:25:91:eb:83:de:a8:
39:63:14:58:03:34:a2:45:41:47:1e:da:cb:b1:5d:
f1:a0:cb:f7:06:e6:29:af:41:30:07:06:05:68:15:
a6:37:53:48:d6:3c:23:c6:52:a4:42:37:d0:8c:ee:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:E3:0F:9A:57:67:D2:9C:E8:65:DE:F0:42:3E:35:21:FC:69:8E
X509v3 Authority Key Identifier:
keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c3:36:cd:eb:4d:d5:6f:8a:e5:fa:2a:be:eb:49:31:0a:95:
d1:29:77:2f:57:d5:1b:6c:d7:90:83:30:b5:63:b3:18:6b:f7:
c4:21:ed:c8:7e:5e:3c:2c:6e:99:b3:e1:40:af:a7:34:85:c3:
9c:4a:a3:1a:3e:20:70:cb:76:2a:45:cf:fc:cc:a1:04:59:04:
f7:e3:13:72:f4:58:2a:17:ef:3f:f1:64:96:f4:53:66:0e:58:
17:d0:a8:ed:a0:6e:9b:eb:53:2f:33:c2:09:1f:82:4a:cf:d3:
9c:10:4a:c0:0d:e8:ab:aa:99:48:ff:41:82:e2:45:df:3a:85:
c1:78:3c:b6:db:62:73:55:4c:08:40:5e:dd:5e:74:48:0d:e5:
b8:41:ad:71:9b:31:11:c7:56:97:f1:8b:49:dc:69:c1:59:df:
3b:73:f3:4c:23:c2:72:d7:71:92:6b:53:75:69:30:3f:f2:27:
c5:bb:af:05:b7:ef:6f:d5:d0:1b:72:99:74:0d:cc:c1:15:2e:
23:70:ca:ee:36:9b:ce:81:c9:fc:71:bb:75:4d:00:d4:c6:61:
65:6f:12:31:8b:c7:93:d6:e4:31:40:b9:20:c4:61:89:be:c0:
88:f8:5e:10:02:3c:36:89:b5:a1:98:ec:8c:62:eb:05:a7:a2:
b6:4f:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:29 2025 by rpki-client