Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
File: 3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa (raw, json)
Hash identifier: GRfZlWkfaWP2x1210vODEgU9t600zb8Al3DkPbtB/+4=
Subject key identifier: F1:E6:DA:2E:21:67:34:3E:42:05:5D:82:5A:33:FF:FD:08:08:E7:16
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 1A2B141D581161B397E3742DABCD2E390A2AE792
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
Signing time: Tue 05 Mar 2024 18:22:53 +0000
ROA not before: Tue 05 Mar 2024 18:17:53 +0000
ROA not after: Tue 04 Mar 2025 18:22:53 +0000
asID: 265700
IP address blocks: 170.210.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2b:14:1d:58:11:61:b3:97:e3:74:2d:ab:cd:2e:39:0a:2a:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Mar 5 18:17:53 2024 GMT
Not After : Mar 4 18:22:53 2025 GMT
Subject: CN=F1E6DA2E2167343E42055D825A33FFFD0808E716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:1c:77:aa:81:8a:1a:51:23:f6:76:f3:50:
a4:f1:19:33:66:11:88:2d:ea:bd:cf:89:ec:30:45:
af:6b:aa:1c:49:1e:73:16:9b:e1:39:e8:8d:63:e5:
d6:73:ae:54:a9:f5:d4:4d:c5:9e:2c:f9:92:fd:34:
01:58:8a:b9:61:89:31:3e:48:ba:6b:1b:f3:48:d9:
fb:03:4d:ee:4e:c4:54:38:3d:25:24:10:12:b7:76:
7b:42:44:67:7d:82:9b:74:48:f5:d1:e2:87:99:dd:
af:e5:6b:51:77:42:e8:8c:ff:cf:47:31:ca:c6:b3:
f8:bd:20:91:91:03:41:17:a9:6b:11:f1:4d:15:8e:
51:3f:7e:96:c8:eb:7c:21:60:64:29:97:8f:c5:a3:
6d:72:85:99:20:ef:48:5b:83:b4:4e:86:92:78:6b:
21:3b:ee:46:78:7f:77:e8:44:3a:e3:d8:38:14:a5:
71:fb:f6:c0:3e:70:f8:49:fe:0c:e3:4d:1f:21:78:
c0:df:68:2b:c1:fb:f7:e1:95:16:f9:4e:6c:22:fc:
7f:01:dd:16:75:6c:4d:7f:ad:e5:93:83:94:6b:5b:
34:9a:42:44:6d:ad:df:4c:84:f0:81:25:12:7f:b4:
4e:e3:4d:18:5a:aa:b0:02:db:0d:1e:df:53:ab:56:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:DA:2E:21:67:34:3E:42:05:5D:82:5A:33:FF:FD:08:08:E7:16
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:58:dd:75:7f:63:35:fe:b4:6f:6d:6e:89:0c:ac:ff:d9:12:
9a:28:48:51:fa:f8:57:41:bc:f4:d8:22:f9:71:1c:0e:fe:c8:
67:dc:ee:ff:c5:c8:ff:c3:8f:5f:38:14:92:9c:ae:69:47:8d:
2f:6e:44:2c:e6:9d:c3:90:d4:a2:ec:25:71:3f:82:bd:81:1b:
03:b4:49:c2:f0:be:b8:a9:0d:5a:15:5d:da:71:53:84:3a:27:
2c:2d:32:b5:20:da:7c:2a:01:b7:7c:df:2a:02:2f:01:02:0e:
1a:70:3f:ab:d1:e9:5c:4b:73:22:b6:7e:84:ae:c5:54:cf:dc:
62:96:bb:39:c9:09:ab:2b:38:43:34:83:56:c2:ef:71:a1:6e:
2c:ee:d7:71:d1:db:30:97:f4:5f:6e:cf:41:11:65:45:7c:b5:
be:18:cb:69:d2:72:59:8f:02:a5:bb:57:7a:26:3a:44:db:ae:
78:a9:d0:6a:c5:54:f8:7c:49:93:c7:d7:ac:18:44:6c:f2:6c:
ab:2f:96:26:49:b2:fa:90:ca:e6:48:91:cb:83:49:7f:94:8a:
32:48:ff:88:1d:f1:b8:7c:67:a8:5b:50:a4:db:1c:d3:8d:1e:
3e:e7:57:a5:29:da:39:03:39:8e:3a:ba:a7:a6:f3:a1:57:e8:
12:fb:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:45:53 2025 by rpki-client