Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa
File: 3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa (raw, json)
Hash identifier: 7MclJgVT20fMudi7zgSQuVK+sux7SGb/glTnCnZqKOs=
Subject key identifier: 3C:4B:95:9B:E6:4B:95:99:ED:16:84:82:3C:08:3B:24:34:16:AA:68
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 0BF5A2D1490AA83D0FDAA524E08BC8822C915A20
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa
Signing time: Tue 05 Mar 2024 18:22:53 +0000
ROA not before: Tue 05 Mar 2024 18:17:53 +0000
ROA not after: Tue 04 Mar 2025 18:22:53 +0000
asID: 27790
IP address blocks: 170.210.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:a2:d1:49:0a:a8:3d:0f:da:a5:24:e0:8b:c8:82:2c:91:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Mar 5 18:17:53 2024 GMT
Not After : Mar 4 18:22:53 2025 GMT
Subject: CN=3C4B959BE64B9599ED1684823C083B243416AA68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:e3:31:68:45:1d:8d:9f:88:d0:80:d4:ba:
71:f6:99:a1:5a:cf:d3:92:04:96:0c:29:d4:3f:55:
7f:67:77:51:01:bc:c8:71:e3:9d:75:d9:c5:6c:cd:
13:0d:72:4e:5b:d2:55:3c:6a:15:a8:6a:45:37:72:
5f:12:d2:f9:4b:48:b4:de:c7:42:c9:5e:ca:90:b9:
7a:ff:10:85:33:ac:d5:90:1d:bb:94:8e:10:a8:5c:
f0:65:50:11:d2:f7:c3:8a:98:c0:4f:74:a8:5d:01:
fe:c0:61:c0:bf:d7:21:72:da:15:6a:f4:f2:02:ce:
97:17:fa:07:13:3b:1c:df:77:50:8d:2f:97:fd:05:
86:fd:f4:81:f6:43:81:28:6f:fb:81:f2:2c:46:fd:
60:64:91:d3:d2:3d:76:f1:f0:ee:63:6c:df:d5:be:
26:37:d2:cb:d4:b1:b9:ff:fb:94:ff:9e:07:db:18:
5d:cd:1c:d3:f2:d7:dc:5b:54:f1:4d:ff:10:95:d9:
88:65:1f:2a:7a:0d:77:cb:a8:67:74:e1:a6:5b:f0:
37:a3:2b:d8:eb:02:e3:09:4f:e4:d4:ae:e5:6a:9d:
07:5f:87:42:e3:e6:a7:52:4f:1d:5b:99:e5:99:37:
22:6d:42:e0:9e:58:c5:ed:57:71:ba:45:e0:bf:ed:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:95:9B:E6:4B:95:99:ED:16:84:82:3C:08:3B:24:34:16:AA:68
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.248.0/21
Signature Algorithm: sha256WithRSAEncryption
29:79:c8:9b:05:aa:6e:f2:39:eb:aa:54:88:4a:0c:f2:2f:cf:
9e:4a:ed:c2:45:f1:f5:a1:64:95:07:8e:2a:1c:9c:bd:59:df:
db:3d:bb:8d:ae:62:bd:d2:00:9a:2e:92:c6:49:34:bd:60:b4:
92:dd:5b:4a:a2:66:65:fc:12:28:33:8f:7a:e6:3d:58:84:b4:
7d:e0:11:65:3a:93:0f:f9:3c:16:df:1b:22:0c:e5:c8:d0:28:
93:ec:74:70:fd:23:6f:83:05:a9:a4:4d:ce:af:57:2e:b2:b1:
10:ae:aa:46:f3:b6:da:f8:de:96:d6:dd:67:05:9d:f8:e1:8e:
91:e8:dd:1a:6d:89:d6:de:44:6d:6c:6f:48:a0:71:ac:9e:b5:
a5:39:e3:46:a1:b2:95:1f:30:9f:d5:f4:7f:5e:be:0c:28:52:
17:a6:f1:88:99:a7:d6:a0:87:a9:bd:1c:c0:b5:60:09:61:09:
b5:37:07:a2:a8:a0:4e:36:e9:c6:bd:52:db:ae:7e:52:bf:a0:
d0:12:ff:56:57:a9:4d:76:55:51:94:b4:63:7c:f4:83:af:f5:
bb:79:7b:92:b7:30:84:04:76:88:d6:f6:45:1d:d1:a9:3a:ab:
1d:84:82:f5:0f:8c:04:c1:a9:64:2a:51:08:78:4e:a1:55:2d:
e4:5f:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:35:27 2025 by rpki-client