Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
File: 3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier: 6qE7ea/qph6CEiBG02hKPrqAKUS5FtAe/eaf8vt995k=
Subject key identifier: EB:0D:33:01:F0:27:2A:37:90:9D:7F:EB:D0:CF:29:E8:02:33:47:35
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 3262555D37EA6B382D9951DD8548DB8A04FA8680
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
Signing time: Tue 05 Mar 2024 17:56:50 +0000
ROA not before: Tue 05 Mar 2024 17:51:50 +0000
ROA not after: Tue 04 Mar 2025 17:56:50 +0000
asID: 19905
IP address blocks: 207.248.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:62:55:5d:37:ea:6b:38:2d:99:51:dd:85:48:db:8a:04:fa:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Mar 5 17:51:50 2024 GMT
Not After : Mar 4 17:56:50 2025 GMT
Subject: CN=EB0D3301F0272A37909D7FEBD0CF29E802334735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:34:11:da:09:6c:61:6b:5e:b3:f6:c3:a8:
8b:7b:32:c8:a9:20:de:7b:87:41:ef:8f:7c:fb:83:
c2:99:2c:a5:ba:8f:65:1c:dc:be:1d:b1:73:b0:40:
69:e9:0c:b6:00:65:c9:78:4a:c9:97:d5:bc:96:a7:
84:eb:8b:67:43:90:e4:c9:60:ef:0b:32:cb:b8:89:
16:4c:2b:61:30:03:4b:46:88:bd:45:46:bb:5a:e3:
bc:49:ec:4d:7d:9d:e5:cd:c4:5c:15:01:4f:d4:5d:
18:98:29:a9:88:e3:b0:d3:fd:9b:7e:f5:27:8f:2b:
4e:ca:e0:01:4e:14:db:f6:51:77:e4:0a:d7:cc:3e:
c2:c6:b3:3c:b1:ce:bb:77:4c:01:0a:75:7a:39:99:
34:70:27:26:68:5f:e1:8d:a9:e5:11:2b:3b:68:9f:
bf:04:b7:16:e2:32:2d:ec:dd:e7:6e:8e:78:96:78:
4e:89:9a:e3:fa:a3:be:6d:17:f2:25:84:e6:a5:8b:
af:c9:68:11:42:36:4e:77:f3:50:9f:b2:5f:99:de:
ca:07:26:f3:80:cb:ba:a8:7d:7c:7d:3b:93:b8:69:
3e:c9:82:5e:79:15:aa:78:d8:ec:00:4b:4e:4b:fa:
f6:a9:61:15:f7:50:ce:6a:7b:e9:2f:26:fc:36:fe:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:33:01:F0:27:2A:37:90:9D:7F:EB:D0:CF:29:E8:02:33:47:35
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1f:0c:ab:ee:e2:10:95:34:b0:d0:ed:28:27:e7:9b:b7:38:
ca:ab:6b:a4:75:be:1d:1b:87:82:5b:fc:7e:7c:b5:ae:f7:d7:
7c:a0:73:b9:ca:b6:2a:0e:03:f5:fa:f8:43:8f:fd:82:44:42:
e9:12:99:0d:6b:17:79:24:d7:14:1d:ba:f1:26:5a:c8:77:9d:
50:39:36:bb:fc:ca:18:34:13:37:2c:cb:c8:e8:25:f5:4d:07:
ef:85:c8:94:b5:c1:5e:63:7c:3a:55:a2:b5:11:82:06:68:e4:
57:e4:2a:f2:50:a6:28:a0:99:90:95:6d:f8:65:00:d7:c1:24:
81:b6:9f:c8:d1:f7:53:d2:3f:9d:89:a0:a7:9a:2d:52:7a:24:
58:e9:f8:18:69:10:ac:c0:dd:9b:d8:e1:e9:b9:60:61:35:ff:
cc:5f:2c:23:16:6f:c3:e4:41:97:92:91:41:8c:28:e6:ed:fc:
95:7a:d0:92:58:0a:4f:be:c6:77:bc:dd:e9:b3:4c:90:a2:32:
54:c8:cf:3d:bf:36:52:f1:9f:5e:14:4f:84:94:11:91:32:1b:
8f:29:81:0c:ec:c1:4d:c8:32:f2:6d:e7:d3:4f:d0:69:51:cd:
34:45:1f:84:06:0a:67:3e:91:a9:eb:9d:49:e0:99:f0:06:c3:
6a:ac:88:92
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMmJVXTfqazgtmVHdhUjbigT6hoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNDAzMDUxNzUxNTBaFw0yNTAzMDQxNzU2NTBaMDMxMTAvBgNV
BAMTKEVCMEQzMzAxRjAyNzJBMzc5MDlEN0ZFQkQwQ0YyOUU4MDIzMzQ3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKTQR2glsYWtes/bDqIt7Msip
IN57h0Hvj3z7g8KZLKW6j2Uc3L4dsXOwQGnpDLYAZcl4SsmX1byWp4Tri2dDkOTJ
YO8LMsu4iRZMK2EwA0tGiL1FRrta47xJ7E19neXNxFwVAU/UXRiYKamI47DT/Zt+
9SePK07K4AFOFNv2UXfkCtfMPsLGszyxzrt3TAEKdXo5mTRwJyZoX+GNqeURKzto
n78EtxbiMi3s3edujniWeE6JmuP6o75tF/IlhOali6/JaBFCNk5381Cfsl+Z3soH
JvOAy7qofXx9O5O4aT7Jgl55Fap42OwAS05L+vapYRX3UM5qe+kvJvw2/pdXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6w0zAfAnKjeQnX/r0M8p6AIzRzUwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/h5
MA0GCSqGSIb3DQEBCwUAA4IBAQA/Hwyr7uIQlTSw0O0oJ+ebtzjKq2ukdb4dG4eC
W/x+fLWu99d8oHO5yrYqDgP1+vhDj/2CRELpEpkNaxd5JNcUHbrxJlrId51QOTa7
/MoYNBM3LMvI6CX1TQfvhciUtcFeY3w6VaK1EYIGaORX5CryUKYooJmQlW34ZQDX
wSSBtp/I0fdT0j+diaCnmi1SeiRY6fgYaRCswN2b2OHpuWBhNf/MXywjFm/D5EGX
kpFBjCjm7fyVetCSWApPvsZ3vN3ps0yQojJUyM89vzZS8Z9eFE+ElBGRMhuPKYEM
7MFNyDLybefTT9BpUc00RR+EBgpnPpGp651J4JnwBsNqrIiS
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:31:16 2025 by rpki-client