Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
File: 3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa (raw, json)
Hash identifier: /WIf8qMjmlrHYVRB8UUT5xwogHz+Jsh2Jj3fDImR2ao=
Subject key identifier: 5B:4C:00:38:05:B0:4E:E3:0A:35:22:BA:C0:73:E6:0C:08:99:71:C4
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 6E12F4C3199BACD5455330556F261E20E0BC0493
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
Signing time: Tue 05 Mar 2024 18:22:50 +0000
ROA not before: Tue 05 Mar 2024 18:17:50 +0000
ROA not after: Tue 04 Mar 2025 18:22:50 +0000
asID: 263235
IP address blocks: 170.210.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:12:f4:c3:19:9b:ac:d5:45:53:30:55:6f:26:1e:20:e0:bc:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Mar 5 18:17:50 2024 GMT
Not After : Mar 4 18:22:50 2025 GMT
Subject: CN=5B4C003805B04EE30A3522BAC073E60C089971C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:0b:25:1e:9a:3a:23:5a:06:a6:89:34:00:
4b:38:88:81:87:ad:bc:7b:a5:a6:83:6a:a0:bc:42:
52:40:9f:0b:fe:4d:21:40:0a:6d:c0:02:8e:cd:e6:
7a:0d:23:31:2c:3d:f7:d3:c3:de:0c:d2:57:69:0c:
4c:44:ec:fe:b0:d1:e7:e6:35:b3:4c:ad:3d:92:b2:
aa:47:c6:46:81:c9:7c:01:0b:bb:9a:33:55:56:9d:
f7:88:b3:92:c6:d1:8c:d6:6b:59:18:77:19:fc:5f:
45:f1:c6:5a:f2:74:b8:c1:67:ce:03:83:16:8d:65:
13:4e:cd:f1:fc:92:2f:50:b4:e5:dc:20:7d:c3:1b:
e4:2d:27:06:bb:90:c5:23:fe:86:89:97:51:58:d4:
b4:9a:e7:74:4e:dc:6a:4f:26:e1:10:4e:20:3a:79:
fd:11:2f:d3:f5:87:e4:a7:23:30:83:52:66:bd:ba:
2a:c8:94:34:8e:bf:bb:ec:f5:ad:02:dc:69:ca:27:
8f:2a:a5:10:1b:4b:53:77:4c:72:b5:5c:17:c0:9c:
07:dc:56:b2:79:08:d1:1c:03:dd:fc:3b:39:8f:66:
05:32:dd:3a:f6:3d:ac:bd:1c:60:43:33:f0:da:58:
05:d2:11:b1:f9:11:f2:77:62:32:18:e3:94:f3:46:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:00:38:05:B0:4E:E3:0A:35:22:BA:C0:73:E6:0C:08:99:71:C4
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.192.0/21
Signature Algorithm: sha256WithRSAEncryption
98:ba:0d:81:97:e3:45:27:e0:3e:ed:29:a0:f6:43:9b:56:de:
16:85:b0:6c:91:4b:eb:d5:7b:64:fd:e3:c4:3d:aa:0b:2d:0d:
fa:5f:b8:8f:db:8e:9f:f5:45:68:39:6f:86:65:6f:ff:e0:e0:
19:aa:1e:bb:db:62:78:dc:0c:29:7e:99:be:8e:50:37:52:c8:
ff:47:39:04:2b:cc:82:6e:07:de:3b:9f:9f:57:47:70:07:0e:
02:31:71:25:e6:81:f9:35:cb:7f:65:65:17:45:f7:0c:29:32:
e1:22:53:cd:34:b6:c6:db:73:8b:da:03:c9:c8:b3:21:0b:31:
b5:ed:2b:35:37:c6:95:e4:9f:e2:a7:4c:a8:ad:e5:c1:fb:25:
90:d4:24:dd:93:81:54:8c:9c:7b:3f:29:51:71:9f:f6:85:ef:
76:38:90:73:d0:17:71:da:8c:f8:fd:a9:90:d7:90:d8:6e:47:
c7:6c:18:e6:cf:6f:5c:99:f8:69:59:fc:da:d1:f3:53:24:d2:
93:5c:ef:69:d5:f9:49:31:04:63:27:69:97:ac:73:2b:04:1f:
4a:2f:16:82:4f:4a:0a:3e:fc:8e:f5:51:26:1c:a3:2f:28:e1:
63:de:01:44:9e:73:a3:cb:98:1e:73:bf:22:2c:f4:d6:d3:41:
5c:f4:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:05:00 2025 by rpki-client