Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa
File: 3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa (raw, json)
Hash identifier: vKDFV+p09r8uVTaevCzey+BWVeozkVMZkmAiITwGKoo=
Subject key identifier: 74:74:AF:CD:28:CE:DA:DE:F0:F0:A3:15:F9:CC:C5:85:07:D7:80:82
Certificate issuer: /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial: 3F232469C69C906CC6E9E29B4A27D0FFA1986249
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa
Signing time: Tue 05 Mar 2024 18:10:55 +0000
ROA not before: Tue 05 Mar 2024 18:05:55 +0000
ROA not after: Tue 04 Mar 2025 18:10:55 +0000
asID: 265659
IP address blocks: 170.247.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:23:24:69:c6:9c:90:6c:c6:e9:e2:9b:4a:27:d0:ff:a1:98:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
Validity
Not Before: Mar 5 18:05:55 2024 GMT
Not After : Mar 4 18:10:55 2025 GMT
Subject: CN=7474AFCD28CEDADEF0F0A315F9CCC58507D78082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:96:bb:64:df:03:3d:f5:36:fd:55:8f:ad:
21:89:b3:b1:e7:8a:7c:e5:3c:f8:dc:75:a3:06:23:
81:97:c1:1b:e5:aa:60:10:06:2c:6e:9d:f7:86:da:
15:d2:d6:10:29:68:c8:77:eb:1e:68:49:6c:fe:f3:
5e:31:af:e5:e3:c5:77:02:6a:e1:fe:43:d2:42:bd:
ba:19:c0:42:74:31:35:dc:95:91:84:9f:4b:c1:03:
3a:37:5f:9d:b3:2d:9e:75:4b:c5:71:29:b9:22:65:
ab:7d:2d:f4:24:ba:0c:ff:c7:00:67:71:b9:45:32:
4f:09:bd:d5:7f:56:6b:7f:30:cb:99:de:30:8e:73:
81:90:db:4e:10:db:b8:e6:44:57:75:81:c1:b0:8c:
2f:7d:6e:9f:a1:ab:32:d8:e8:8a:1f:c3:57:d4:fe:
3a:03:dd:c0:80:ee:a6:78:85:d1:11:3a:b0:2d:1e:
82:3c:39:96:55:bf:6f:7e:e6:03:da:a6:bf:45:a1:
32:a5:29:f5:8d:86:b3:c2:ce:ec:cf:b5:7d:52:9c:
1d:4c:81:14:b0:b3:8b:b1:77:b4:b4:b4:a0:a3:a6:
dd:c4:d4:9f:06:05:25:63:60:d4:bf:ba:6c:64:7d:
e3:86:1f:bd:6f:df:08:78:a3:26:14:8d:5d:3b:59:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:AF:CD:28:CE:DA:DE:F0:F0:A3:15:F9:CC:C5:85:07:D7:80:82
X509v3 Authority Key Identifier:
keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.97.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ce:90:92:1e:9b:c8:5e:40:93:53:14:ec:f2:8c:81:69:70:
ea:d4:fe:ce:2a:44:5e:e5:fb:2a:32:6c:83:37:8b:35:f2:2a:
ce:b7:38:3d:d8:b6:53:61:e8:e5:c3:be:8f:41:b9:91:e3:38:
0c:07:96:b7:41:b1:ea:3f:f6:34:e1:46:25:12:f3:64:60:36:
44:58:c2:21:7c:0a:70:82:cb:f5:8b:4e:1c:2c:5e:d4:5e:a0:
76:f1:c4:a6:9d:43:a3:76:66:d6:be:87:44:e7:b5:90:78:10:
29:98:f4:04:8d:d4:48:63:3b:db:c8:f2:1d:09:f6:57:3a:32:
03:74:09:86:c5:39:d8:b1:77:f8:2a:9d:dd:e9:c1:63:a2:cc:
07:89:4a:8e:70:33:9f:b1:cf:27:c7:f9:b0:71:fe:02:fd:91:
5d:5e:50:90:8d:48:1c:e8:2f:c6:18:ab:f8:69:cd:6a:30:79:
3d:c7:3c:e9:55:00:bf:42:60:48:bc:bc:d3:11:50:71:11:16:
6b:15:2f:16:22:49:61:cf:1a:da:46:90:5c:fe:3e:7a:1f:2a:
b1:9b:2e:41:7a:38:e4:15:45:3a:df:e6:aa:e4:37:61:f4:50:
97:7d:77:50:2e:90:ec:f7:d8:e8:91:06:3e:2e:52:ca:56:1d:
b4:cf:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:04:56 2025 by rpki-client