Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
File: 3137302e38312e3139382e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier: 7P2eFko3nHFg8Vl1VoqF8VOgo6CjPcPdc1IHyE6N4RQ=
Subject key identifier: 92:42:F9:2D:F5:DC:4B:4D:B1:79:42:5D:9A:D0:72:02:62:B7:44:9F
Certificate issuer: /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial: 6CEBEE0AF265DF3EA69CD9A295C9F10638A0E188
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
Signing time: Tue 05 Mar 2024 17:45:12 +0000
ROA not before: Tue 05 Mar 2024 17:40:12 +0000
ROA not after: Tue 04 Mar 2025 17:45:12 +0000
asID: 6461
IP address blocks: 170.81.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:eb:ee:0a:f2:65:df:3e:a6:9c:d9:a2:95:c9:f1:06:38:a0:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
Validity
Not Before: Mar 5 17:40:12 2024 GMT
Not After : Mar 4 17:45:12 2025 GMT
Subject: CN=9242F92DF5DC4B4DB179425D9AD0720262B7449F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:63:c8:2c:73:2d:3d:95:33:f5:82:7f:c4:
76:90:03:72:3e:b9:01:96:38:3a:4e:88:9e:30:e6:
9a:df:8f:d6:37:df:0d:60:dd:d3:57:05:f2:81:2c:
ee:28:c6:1d:12:d0:37:57:b6:c0:0b:2e:77:cd:26:
2d:ca:bf:23:aa:92:61:48:5b:a9:5d:f7:ae:3d:b2:
95:e0:7d:bb:51:35:44:65:ed:30:5f:03:0f:9d:3d:
38:94:3e:22:94:37:a1:6a:98:a5:82:5e:42:6b:b1:
2f:cb:5e:c7:a5:b9:6b:e9:37:77:a8:6b:14:99:c5:
52:e4:51:ed:b5:c4:94:7c:c6:db:2a:1a:e1:e2:55:
c9:3e:b7:19:34:ed:05:78:bb:12:f8:4f:42:b3:1c:
d8:42:7f:bc:83:b1:4d:39:28:3a:7e:0d:c9:21:e3:
de:4f:64:17:a1:b1:bb:78:4c:d9:b4:81:f0:8f:e8:
b6:fe:a6:2c:76:1f:18:1e:fc:68:63:98:43:2a:c6:
af:08:b5:f7:16:38:ba:80:db:b6:c8:dd:61:6a:dc:
54:6c:be:95:4b:0a:e2:0b:c9:18:5b:69:48:9d:d4:
33:79:0a:1a:84:8e:d4:10:4d:0e:ac:3a:28:46:fd:
6f:d2:43:d7:b0:cf:14:4d:a0:37:26:6c:80:06:73:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:F9:2D:F5:DC:4B:4D:B1:79:42:5D:9A:D0:72:02:62:B7:44:9F
X509v3 Authority Key Identifier:
keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.198.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ca:89:06:fb:a3:fc:0c:34:37:43:3b:1c:c5:c0:68:54:50:
4e:18:2f:6b:e5:c7:28:e8:d1:9f:5e:94:53:8b:7d:dc:86:4c:
2e:25:67:86:97:11:6b:e4:e4:ca:54:4c:10:97:6a:54:49:c4:
36:58:74:c5:e4:dd:74:b5:4f:f9:44:07:01:af:2d:a3:b2:b1:
00:b9:19:a2:2c:f7:43:14:3b:4c:c6:04:46:86:4f:5d:8b:c1:
2b:58:86:94:9b:79:99:ce:4f:13:c5:5d:e7:54:2e:02:d2:0c:
0b:7e:e1:05:15:b8:d2:a0:0a:5d:8f:45:cd:b2:ae:05:cb:1c:
72:e7:76:ec:b2:a5:ff:ea:d2:5d:86:57:d4:95:92:5f:5a:3d:
3d:00:be:eb:fe:ad:42:16:ac:5f:d6:c8:a6:da:c8:cd:67:4e:
01:f4:86:9b:d9:57:d9:0d:c5:06:cb:87:7f:d6:a3:94:e1:9b:
4f:02:a6:50:15:98:d9:04:ad:ad:2f:97:d1:8d:cf:a5:61:98:
63:4f:35:3c:b5:aa:f8:3e:f5:f2:14:ec:ac:11:52:9b:c4:f9:
cf:ae:3f:9c:87:06:d7:16:04:4d:88:25:69:eb:0a:f6:14:c1:
63:1c:a8:43:08:38:de:3b:26:ef:88:9b:55:d8:b5:a6:8d:ad:
67:75:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:47 2025 by rpki-client