Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
File: 3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa (raw, json)
Hash identifier: PW5WPWQdBSVkKy5FTTRLUl7Dm3nuHao43xX1z5AVAHs=
Subject key identifier: 9D:C4:B1:D5:DA:79:58:E4:56:02:4B:55:BE:AE:25:D2:2B:29:6A:61
Certificate issuer: /CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Certificate serial: 14FDF27AE0C1FED2215685EBBD22D5D0E44D1902
Authority key identifier: 59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
Signing time: Tue 05 Mar 2024 18:17:20 +0000
ROA not before: Tue 05 Mar 2024 18:12:20 +0000
ROA not after: Tue 04 Mar 2025 18:17:20 +0000
asID: 264635
IP address blocks: 167.249.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fd:f2:7a:e0:c1:fe:d2:21:56:85:eb:bd:22:d5:d0:e4:4d:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Validity
Not Before: Mar 5 18:12:20 2024 GMT
Not After : Mar 4 18:17:20 2025 GMT
Subject: CN=9DC4B1D5DA7958E456024B55BEAE25D22B296A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:fb:fc:fd:d9:e6:79:b0:8c:c6:57:44:f2:
cc:48:bb:ea:82:87:d6:fe:45:98:6c:90:01:cf:4b:
81:42:f7:ed:67:ed:b5:f8:b8:0c:5c:28:43:91:e7:
73:31:d9:ea:60:bf:62:39:50:a1:34:41:74:94:b5:
7e:22:29:94:36:92:68:b2:4f:1e:98:dc:47:4e:ea:
ff:da:50:5b:af:e5:2e:77:3b:18:82:bb:d6:36:02:
2c:45:70:1a:93:9c:45:bf:4f:1a:c3:c8:9a:1e:1c:
95:40:05:72:5c:1e:b0:6d:5a:ab:29:6a:9c:4f:c4:
db:d0:4b:37:78:fd:15:5b:39:77:86:51:01:54:50:
d2:fb:89:7d:58:08:78:74:b5:e2:04:63:7c:c8:d4:
77:e1:7a:b1:0c:99:48:f9:89:40:63:b3:55:41:9b:
72:0b:f2:a2:36:8d:01:02:d8:db:6e:7e:48:f8:bf:
60:9e:d8:e8:79:90:0f:81:6c:43:72:da:00:bc:8d:
cc:98:fa:14:82:bb:42:e5:5c:e9:20:ca:84:e5:8e:
80:92:f7:22:90:88:94:b3:ec:54:f2:60:a1:7e:26:
72:39:e1:dd:37:87:fc:52:98:75:32:07:30:80:2b:
f5:52:c6:80:b8:bd:4e:7b:e0:a3:c2:5e:95:c1:b2:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:B1:D5:DA:79:58:E4:56:02:4B:55:BE:AE:25:D2:2B:29:6A:61
X509v3 Authority Key Identifier:
keyid:59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:af:d3:e5:cc:90:04:70:13:5e:51:ec:c5:bd:c9:e1:6f:a5:
dd:0b:b1:87:9d:72:b1:4b:6d:32:56:60:d7:32:19:73:ad:d4:
01:df:79:d5:98:fd:0d:f7:51:a5:65:4a:4b:91:56:a7:38:4f:
11:17:f6:03:4e:5a:8f:6e:05:9c:b4:bd:b5:f6:16:b6:2b:63:
b8:7e:02:bb:6e:79:bb:30:4e:2f:89:a2:ab:92:70:4a:78:32:
97:f8:b0:f8:d2:1d:f1:6b:91:ee:83:b3:3e:a6:c9:63:2a:26:
c4:21:8e:75:b8:0a:d1:9d:bc:b0:fd:13:56:a9:4f:d9:10:42:
2c:ce:97:e7:27:62:06:04:0a:2a:09:ef:48:02:23:b2:14:cc:
32:22:5e:03:ae:34:cb:97:97:6a:bb:fa:b6:8c:77:d0:7b:af:
7a:31:cd:b6:b6:de:2b:ac:b4:ca:4a:18:29:2b:74:db:44:82:
87:67:fe:d2:ee:e2:f2:b6:8d:d2:e7:60:36:76:73:a8:8a:1c:
00:9b:18:1e:f4:f4:d6:02:e8:ef:8f:29:c0:a4:0e:4b:dd:e1:
2b:00:2c:2c:fe:35:98:5d:b5:50:05:15:0b:51:34:7b:60:c6:
24:2c:c5:b9:b2:d2:d9:f8:3b:c5:0b:f0:c8:28:35:2a:63:bb:
cb:c6:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:35:02 2025 by rpki-client