Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa
File: 3230372e3234382e302e302f32322d3234203d3e203634313339.roa (raw, json)
Hash identifier: ysBb0U5WWNZYG4c01BlARq+XX2MKx0dhgXTP9YxgWfw=
Subject key identifier: 85:1C:7D:72:EF:DA:22:D7:EC:96:46:81:9D:E6:D2:08:F4:3E:0D:2F
Certificate issuer: /CN=367EAE467C8B549D5E6615661A70C865954F55EE
Certificate serial: 4579CD8E01D7DE4CD99273CCCDE8212F88B562DA
Authority key identifier: 36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa
Signing time: Tue 05 Mar 2024 18:08:55 +0000
ROA not before: Tue 05 Mar 2024 18:03:55 +0000
ROA not after: Tue 04 Mar 2025 18:08:55 +0000
asID: 64139
IP address blocks: 207.248.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:79:cd:8e:01:d7:de:4c:d9:92:73:cc:cd:e8:21:2f:88:b5:62:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367EAE467C8B549D5E6615661A70C865954F55EE
Validity
Not Before: Mar 5 18:03:55 2024 GMT
Not After : Mar 4 18:08:55 2025 GMT
Subject: CN=851C7D72EFDA22D7EC9646819DE6D208F43E0D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:96:96:bd:99:c1:82:d2:c9:57:69:51:2d:
69:aa:31:4f:d5:31:03:17:69:46:10:a1:c1:7f:56:
18:89:dc:1c:94:7a:24:89:39:7b:7b:26:2c:28:47:
5f:40:4d:8c:4f:01:31:6b:54:38:73:6c:35:31:78:
64:b9:58:e5:6a:77:cc:e4:61:69:9b:0e:4f:52:df:
c8:e3:28:f8:ab:fe:e8:0b:3a:5e:41:ca:0e:ab:dd:
04:8a:c7:03:4a:43:07:bc:da:45:f5:9e:eb:ca:17:
1b:1a:8f:bc:e3:8f:2c:70:82:cc:42:1b:82:ac:1d:
f8:a5:e6:0f:5b:6e:c7:1e:b1:e0:7e:4a:b4:97:0d:
4a:d5:97:00:4b:54:2c:77:ee:72:fa:6e:25:8a:bb:
62:0d:90:19:df:a9:5d:cc:d8:ed:e0:cc:ca:69:f8:
37:5b:66:18:67:bf:2b:f0:7b:45:17:5c:b4:ca:09:
a6:fc:d0:b1:11:d4:66:62:3d:48:62:19:21:92:4b:
38:cc:8f:12:35:31:be:ee:b7:9d:84:f8:d8:45:cc:
c8:74:c9:18:af:01:35:6a:da:a2:82:97:61:9f:51:
08:fa:fe:89:67:42:ae:6c:21:24:f2:b9:22:45:24:
5d:5c:a5:52:f7:ca:0f:02:b9:51:cb:af:79:64:c9:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:7D:72:EF:DA:22:D7:EC:96:46:81:9D:E6:D2:08:F4:3E:0D:2F
X509v3 Authority Key Identifier:
keyid:36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.0.0/22
Signature Algorithm: sha256WithRSAEncryption
72:55:c5:c1:92:cb:00:9c:94:2f:87:b8:66:05:ff:a3:26:f9:
05:2a:c7:43:b1:4c:50:d9:72:23:fc:a4:63:7a:01:68:4f:6c:
e4:fd:e5:04:df:ec:49:c7:29:ed:86:e3:e7:f5:28:b3:fe:d2:
d7:4c:2b:c3:7d:fb:5f:1c:fd:d5:ba:00:0a:04:6d:bf:53:ba:
12:41:54:b6:83:fc:1c:c0:80:08:d3:f0:c3:62:f8:3a:b5:e5:
7e:f3:e6:c7:89:86:9b:71:cb:3e:13:34:25:f3:47:60:74:8d:
e0:58:dd:b3:51:50:16:55:a9:11:57:62:ed:2d:04:1f:83:ae:
7d:ed:b6:98:3c:0b:f7:c1:e1:56:71:cc:cc:8e:00:99:2b:d1:
5c:a4:2b:57:51:e3:e8:b0:17:cd:fd:5f:0e:f7:ab:3d:d3:9c:
cb:07:b5:cb:9c:9b:59:f5:e0:3e:c6:66:f5:2b:05:26:20:e2:
d6:1f:97:fa:77:fe:1e:6c:9f:1b:04:a5:6c:47:94:35:75:b3:
8f:8f:eb:7f:3a:3d:60:3d:37:fb:2f:30:69:01:0b:34:b5:e9:
ba:2d:be:70:05:c3:58:70:7a:78:30:04:bd:87:76:f2:f9:3c:
4f:c0:46:45:01:c6:8b:e6:f9:b3:69:42:67:b8:a0:1d:67:97:
3c:5c:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:57:07 2025 by rpki-client