Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
File: 3133322e3135372e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier: sUyN3XQbhWQqVplmqJSP9WhCZ5cPB3nEA9uLNS84vTk=
Subject key identifier: CE:82:D2:37:A7:80:91:1F:CB:3A:43:00:0F:BA:ED:A8:DF:F3:3E:87
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 0549EA1AC6A2312990CB53C21FE334A73D5137F6
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
Signing time: Tue 05 Mar 2024 17:56:42 +0000
ROA not before: Tue 05 Mar 2024 17:51:42 +0000
ROA not after: Tue 04 Mar 2025 17:56:42 +0000
asID: 19905
IP address blocks: 132.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:49:ea:1a:c6:a2:31:29:90:cb:53:c2:1f:e3:34:a7:3d:51:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Mar 5 17:51:42 2024 GMT
Not After : Mar 4 17:56:42 2025 GMT
Subject: CN=CE82D237A780911FCB3A43000FBAEDA8DFF33E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:09:a2:ac:4e:20:51:ba:66:26:39:71:68:
09:f0:c5:5a:f6:9e:e8:8d:32:d3:13:94:61:17:fe:
51:6d:b7:d4:cd:27:51:61:ab:fe:a2:77:8b:00:8b:
21:46:2e:11:80:2f:14:9f:6b:e0:da:3e:14:7d:9c:
ce:1b:b5:4a:c9:1f:18:90:f8:b2:65:9f:13:d1:ff:
1a:3d:23:bd:67:7c:b4:72:47:86:3e:60:7a:33:51:
ce:a2:19:32:c2:fa:df:ff:92:a7:6a:80:0c:a8:2b:
3b:e4:63:b4:27:8c:78:e7:db:83:db:19:45:f6:f0:
31:35:4a:78:96:0f:0f:0e:6b:e1:9e:41:91:d7:c4:
45:2a:85:23:bd:ce:7d:e1:8e:36:98:dc:d3:78:3a:
1f:a3:14:8b:30:ed:5c:53:77:43:fd:f2:e6:f6:37:
67:a5:04:cc:a7:c8:9c:43:98:46:74:91:f4:e3:28:
c8:e3:88:62:80:35:eb:32:d3:81:7b:bf:dd:26:6f:
8a:db:aa:90:59:b2:93:d5:10:27:60:36:89:93:66:
0d:b3:03:ee:c4:9e:01:d1:95:8e:ff:ec:c5:34:8f:
e8:3c:b6:25:54:50:09:12:8d:ec:eb:40:b5:a8:3f:
0b:ab:78:e7:e9:a8:cc:95:56:42:ba:32:e3:10:d3:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:D2:37:A7:80:91:1F:CB:3A:43:00:0F:BA:ED:A8:DF:F3:3E:87
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:46:a9:90:34:f7:03:1c:6d:0e:1d:c2:2a:a1:bb:23:20:ff:
2e:21:99:e3:85:2e:6a:38:62:83:63:4a:64:96:2d:1c:7d:d4:
1b:1f:b3:a7:35:67:2f:ac:28:17:a8:c0:f2:a6:77:a3:7a:e6:
bc:49:02:a5:ab:07:3b:03:f3:8f:aa:40:c7:42:44:3a:ef:68:
28:2b:a4:88:0d:76:4d:76:55:b0:46:1c:9a:71:ed:72:54:a6:
b6:51:be:08:04:ab:85:e6:87:e0:43:41:11:1e:78:a3:89:6c:
f2:80:cd:37:59:ae:8e:6c:5c:ba:74:28:37:a5:60:09:0d:6a:
c4:2f:f2:44:31:16:16:77:e6:0e:91:05:6b:c5:08:18:5f:a7:
89:0c:47:f9:51:37:01:af:68:5b:5c:10:ff:2a:09:10:67:0d:
f2:04:6b:0d:ee:0e:84:a0:7d:b0:b9:40:4f:be:02:ce:70:cd:
81:2c:11:4d:0f:0a:f0:ff:eb:ee:21:2b:dd:75:f8:1a:43:9d:
09:2c:c1:ab:01:e9:f4:64:14:30:fc:d0:90:af:c0:1e:03:94:
c2:59:41:3c:4a:25:d8:db:1e:e3:58:27:c6:34:7e:15:b9:82:
c5:2c:c0:e9:b9:a3:c1:67:c5:ff:4e:81:b7:e1:40:d6:05:bc:
78:11:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:31 2025 by rpki-client