Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
File: 3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa (raw, json)
Hash identifier: BZgFHfhMx4JFH4cqJFD4k4kZVUPfvyUFtH/nZJ1VaQw=
Subject key identifier: 86:84:39:16:6F:B8:CC:64:04:67:44:E5:D4:76:25:B3:22:A4:D0:F0
Certificate issuer: /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial: 1DB19BB03F559BF0780B9CAC3814ADCB00B4ECA1
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
Signing time: Tue 05 Mar 2024 18:22:46 +0000
ROA not before: Tue 05 Mar 2024 18:17:46 +0000
ROA not after: Tue 04 Mar 2025 18:22:46 +0000
asID: 265657
IP address blocks: 170.246.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b1:9b:b0:3f:55:9b:f0:78:0b:9c:ac:38:14:ad:cb:00:b4:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Validity
Not Before: Mar 5 18:17:46 2024 GMT
Not After : Mar 4 18:22:46 2025 GMT
Subject: CN=868439166FB8CC64046744E5D47625B322A4D0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:39:69:38:55:ce:82:9c:7d:2d:5e:81:b5:
bd:91:44:06:ea:bb:54:20:c1:2c:27:55:a3:d4:85:
97:cf:e0:8f:0f:b5:50:92:77:f7:b2:d3:0c:eb:44:
e3:50:d1:5f:85:5f:ea:f0:38:46:cd:f0:63:29:57:
ae:aa:0d:00:0c:5c:e4:c3:3a:b4:eb:e2:76:54:81:
dd:ad:2d:be:31:13:93:65:22:eb:92:45:1e:f1:8f:
98:81:05:1e:06:96:56:10:b7:17:d5:9f:4b:df:49:
07:22:a1:2e:83:39:42:09:87:fa:4f:62:75:e2:aa:
48:6c:ce:52:fb:37:d4:47:e1:d5:c8:c5:8f:e3:48:
9e:ba:c4:8c:14:a4:b7:0f:c4:12:93:c8:b5:cb:17:
e8:45:da:0f:39:5b:b6:3c:eb:4f:61:a7:57:39:fc:
78:f0:e2:79:65:6e:46:e5:fe:07:16:a8:ba:0b:10:
5d:96:2c:c6:c1:29:57:a6:36:fc:72:e6:8a:31:cc:
5b:22:3c:a7:dc:52:b7:61:a3:9b:88:84:bc:ab:5a:
44:73:02:18:d2:0c:cf:19:a6:11:79:aa:4d:5e:06:
9c:de:82:10:c4:1a:07:24:88:4d:30:f4:35:38:8c:
8c:79:07:d5:37:c0:9b:61:3c:85:15:60:2d:43:f0:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:39:16:6F:B8:CC:64:04:67:44:E5:D4:76:25:B3:22:A4:D0:F0
X509v3 Authority Key Identifier:
keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:aa:57:43:6b:ea:da:7e:82:e7:0f:fa:62:b5:f0:50:3b:bf:
22:60:99:6f:10:70:95:28:1c:9e:cd:db:36:23:21:33:71:f9:
10:0b:93:7d:1b:61:3d:4f:84:cc:96:7f:99:50:e1:b5:c8:ad:
ac:6f:63:d8:1e:8e:4e:16:1e:a4:a9:23:44:c1:14:9c:85:1a:
cf:f9:df:e8:2c:93:11:2d:0b:32:2e:c2:d9:da:40:20:01:f0:
21:ce:9e:7b:88:82:f4:92:e1:26:69:2d:0d:3f:2a:05:c2:cb:
0c:19:70:83:f6:b0:d4:75:04:62:6d:2c:40:83:29:71:98:a0:
d5:9c:a6:60:b0:b6:4a:23:ca:f8:75:76:ac:6f:9f:4b:19:f7:
af:a5:d7:5b:b9:9d:52:b4:dd:6f:c4:8c:a4:6b:19:3d:e2:59:
7b:78:c4:1d:94:b8:d8:41:e9:f9:d3:40:7d:3c:1c:20:90:e8:
f0:5d:07:e0:4e:2d:8c:3a:ea:b8:ff:55:55:0f:32:6f:05:3d:
dd:9e:6b:52:0f:9d:27:4d:f7:61:c7:4f:62:cc:1a:1a:b7:c0:
b9:17:d0:62:f1:6f:4d:b0:99:7a:58:94:be:e5:54:8f:f3:4a:
d3:de:27:71:d6:da:5a:ea:00:38:1f:95:97:ea:85:6c:d0:bc:
ea:f4:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:31:07 2025 by rpki-client