Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa
File: 3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa (raw, json)
Hash identifier: zsRwDVhPRjHqgUVTpi6ZOtQYxKLAEn2ymrXxzMbQOcE=
Subject key identifier: 79:16:25:1D:9C:76:AB:2C:83:14:76:D0:57:11:A0:F7:D9:93:91:F8
Certificate issuer: /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial: 28B99FD7158608722E9068696A095E92E0C0DA24
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa
Signing time: Tue 05 Mar 2024 17:42:35 +0000
ROA not before: Tue 05 Mar 2024 17:37:35 +0000
ROA not after: Tue 04 Mar 2025 17:42:35 +0000
asID: 264780
IP address blocks: 170.247.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b9:9f:d7:15:86:08:72:2e:90:68:69:6a:09:5e:92:e0:c0:da:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Validity
Not Before: Mar 5 17:37:35 2024 GMT
Not After : Mar 4 17:42:35 2025 GMT
Subject: CN=7916251D9C76AB2C831476D05711A0F7D99391F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:c2:a9:d6:c5:97:98:9f:11:02:24:12:f3:
19:ba:11:d0:76:34:72:24:69:64:99:29:e0:73:f4:
33:a0:57:d1:0f:0b:57:e3:8c:bb:e2:99:e3:f1:5a:
51:75:2e:46:c2:45:7e:93:e7:64:8b:af:33:ed:d2:
32:cc:10:65:79:5e:0c:ce:01:56:db:3e:39:28:a5:
b8:1b:a3:2e:bb:40:c9:b1:16:fa:b5:8a:0d:6f:7c:
6d:fa:31:ba:b4:fb:2e:7b:05:a6:39:80:8c:38:92:
59:ff:d1:08:8b:d4:28:93:27:29:f9:12:5f:b2:29:
04:9c:07:21:8b:af:ee:bc:d6:de:aa:ee:d1:3e:a1:
6d:b5:ce:db:ab:39:23:64:30:4f:53:39:37:7a:27:
ee:ff:ae:79:02:a6:93:82:ec:51:ef:93:93:5d:f8:
a0:b7:8f:6e:da:70:b1:42:a8:83:1a:57:5d:30:4c:
e0:a0:31:ec:57:ae:75:c0:79:69:37:49:d9:72:e8:
60:30:37:6f:2a:87:c6:17:ad:46:1a:31:05:9d:ed:
03:0e:57:7a:f5:66:fa:0d:0e:3e:ca:ee:06:2f:fe:
04:22:48:4b:73:bb:73:13:d1:14:e8:d0:c5:a4:d5:
61:9d:9f:7b:0b:97:13:5e:72:c0:11:0e:7b:11:4e:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:25:1D:9C:76:AB:2C:83:14:76:D0:57:11:A0:F7:D9:93:91:F8
X509v3 Authority Key Identifier:
keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:78:1c:5d:6f:f2:2c:26:d5:c6:01:7b:64:89:8c:52:40:b4:
ab:e8:87:57:a7:6b:8c:6e:c6:89:cb:6c:36:ed:33:c0:91:7d:
e9:f9:fc:aa:19:96:8d:65:f1:12:d7:a0:b2:c3:7a:95:0f:23:
39:08:7c:da:42:2e:21:a8:10:12:7c:dd:82:32:74:39:a5:1a:
89:64:c5:35:ac:5b:30:64:10:8a:0b:fc:f5:bf:80:ae:42:8c:
95:46:54:73:3c:24:9c:46:02:ad:eb:51:f2:c0:d4:28:7a:6a:
d5:34:92:02:20:06:15:44:53:a3:18:04:2c:7b:cf:b8:a2:77:
87:58:66:89:55:5d:b1:47:5e:df:57:6b:5c:af:a5:7e:d2:f5:
da:50:ee:22:96:58:b4:cf:88:50:6f:cb:f3:ad:a1:1c:a0:6e:
0e:ea:5b:6d:4d:48:dd:c0:2f:aa:a4:ed:24:b8:1f:93:5b:74:
58:99:fb:b6:ec:c1:ea:f5:4e:e4:df:17:86:cd:be:60:13:b4:
da:aa:6e:fd:c2:5f:64:e7:32:c1:b5:cd:95:19:9d:34:95:90:
6f:6e:6c:7c:fb:6b:e3:d7:ae:83:9b:b9:00:56:44:ac:02:0d:
45:19:e7:ec:8d:04:99:c9:c8:cb:6e:cc:bf:1f:ff:08:f7:04:
7b:81:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:12:58 2025 by rpki-client