Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa
File: 3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa (raw, json)
Hash identifier: /ili//UcxQsWNmonyCPtJoxVsLC7ysf1iRkS1MJrVbE=
Subject key identifier: ED:61:8F:C5:2D:BD:1F:52:EF:24:FF:2D:9A:F7:0E:74:B2:EA:B9:18
Certificate issuer: /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
Certificate serial: 0A357EA78783B74FFF7F7383AB0D21F5DF282B4D
Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa
Signing time: Tue 05 Mar 2024 18:16:12 +0000
ROA not before: Tue 05 Mar 2024 18:11:12 +0000
ROA not after: Tue 04 Mar 2025 18:16:12 +0000
asID: 269924
IP address blocks: 207.191.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:35:7e:a7:87:83:b7:4f:ff:7f:73:83:ab:0d:21:f5:df:28:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
Validity
Not Before: Mar 5 18:11:12 2024 GMT
Not After : Mar 4 18:16:12 2025 GMT
Subject: CN=ED618FC52DBD1F52EF24FF2D9AF70E74B2EAB918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:31:f1:8e:5a:0a:65:ad:48:b3:e4:4c:2a:
3f:06:78:7a:fd:50:ff:d0:20:67:be:50:da:6f:a7:
9a:f0:d6:31:f7:8e:54:2e:16:b3:a2:f6:8a:39:a1:
f2:ff:f3:16:68:21:f0:b8:0d:00:cc:97:98:ca:ed:
fa:33:0a:5e:84:f1:6c:59:d2:c6:36:af:4b:9d:05:
6c:a1:84:04:55:1c:17:37:4d:91:ed:26:dd:b1:fd:
d1:05:57:89:3d:a7:3a:77:c2:43:d9:67:b7:45:ec:
5c:04:85:35:67:87:76:60:99:a3:63:2e:02:8c:fd:
b1:06:a2:40:3e:ef:3b:fe:49:76:72:eb:96:9d:51:
59:14:ea:d4:b3:27:03:55:ae:5e:05:c7:b9:df:3e:
14:01:a1:27:be:12:9f:06:07:9d:14:74:80:f0:49:
4f:3f:39:84:03:f4:1e:21:97:92:3f:b6:43:80:0e:
ea:d7:86:95:05:25:e9:f6:ed:d5:49:c7:55:f3:77:
42:63:96:af:3d:35:f6:9f:83:af:7b:1a:2a:a3:d0:
7e:d5:c9:d6:c1:6a:78:e5:8f:6c:a3:cb:bc:d3:d9:
f2:6b:8b:bd:90:3a:91:83:12:8c:ca:8c:aa:c0:f6:
b9:9e:2d:1e:33:ae:a9:43:80:5d:4e:5b:de:64:23:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:8F:C5:2D:BD:1F:52:EF:24:FF:2D:9A:F7:0E:74:B2:EA:B9:18
X509v3 Authority Key Identifier:
keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.191.164.0/22
Signature Algorithm: sha256WithRSAEncryption
40:da:e0:b0:27:51:cf:82:72:60:89:e8:3a:de:2e:24:06:11:
9e:8d:41:91:2e:72:4a:75:b7:e6:d1:c9:50:f9:a0:0b:d7:be:
1b:66:55:ba:33:01:22:50:41:4e:b2:3d:75:e0:19:aa:d0:91:
76:80:51:53:52:a5:3d:87:31:28:09:d6:54:9e:ca:df:1a:fb:
8c:1d:a2:74:f6:d6:21:f7:95:9b:a0:62:66:50:0d:95:12:c1:
ba:4f:a2:b5:c4:a3:8f:66:42:3a:f1:44:2b:9c:7a:36:cd:53:
21:13:8e:1b:6e:d4:d8:cb:b5:80:85:83:f4:05:10:26:51:df:
b6:70:ee:df:09:0e:d4:0f:f6:6f:5e:99:4e:4e:36:6d:e3:2c:
1d:a9:0f:44:f2:06:50:a4:a2:ac:4e:27:13:b8:a1:6b:ac:30:
15:98:26:a9:b7:bb:82:b6:e8:f2:a5:4f:bd:92:7c:39:c3:3f:
7f:c4:3d:45:d8:e7:51:1c:d5:71:43:f1:d9:b4:a8:2a:cf:5a:
78:7c:ae:31:a8:d7:f3:7f:27:3e:60:8f:1b:4d:db:77:c0:b5:
22:b2:7a:c7:ee:08:d8:8b:f9:27:9f:7c:ae:4d:a2:3c:f5:45:
ad:3e:c5:42:ea:d0:36:92:a1:09:f7:83:18:22:38:8a:16:99:
50:40:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:34:34 2025 by rpki-client