Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
File: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier: /7pZ8zUImkAM4T1mDmg+z6jx19LLlSGEh58i2IVG0eg=
Subject key identifier: 9D:37:90:38:18:FA:86:25:E2:93:5C:CC:0C:EB:FB:19:F2:38:5D:5F
Certificate issuer: /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial: 74E29ED3A12FC2C2CC6D6589FBDBFEB19D1CD301
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
Signing time: Tue 05 Mar 2024 18:01:57 +0000
ROA not before: Tue 05 Mar 2024 17:56:57 +0000
ROA not after: Tue 04 Mar 2025 18:01:57 +0000
asID: 270149
IP address blocks: 159.16.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:9e:d3:a1:2f:c2:c2:cc:6d:65:89:fb:db:fe:b1:9d:1c:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Validity
Not Before: Mar 5 17:56:57 2024 GMT
Not After : Mar 4 18:01:57 2025 GMT
Subject: CN=9D37903818FA8625E2935CCC0CEBFB19F2385D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0a:aa:87:d4:7d:7a:6e:b5:86:20:da:4b:a8:
10:5f:e8:c0:4f:3d:12:52:6e:8d:8f:86:0a:41:f4:
b6:2d:f5:eb:e2:6d:94:87:a8:1b:b9:34:e2:6e:ea:
21:10:19:e3:75:8f:8a:32:ab:88:72:04:31:87:c1:
1e:a5:10:b3:cc:55:a4:19:5d:b9:30:20:ae:f5:d3:
d4:f2:b6:da:76:d1:f8:ac:d3:cb:7c:80:eb:c2:3e:
37:cf:4a:c0:99:72:8a:b9:39:83:bb:39:33:ff:60:
bb:c5:25:d6:8c:1e:4b:05:ce:5f:08:76:e5:97:c4:
01:83:e8:0d:0b:ec:38:55:0e:78:83:d6:1b:a4:d3:
3e:7d:c0:eb:ee:fb:07:f2:2e:04:73:d7:30:61:92:
21:35:de:ed:58:8a:f8:82:70:12:a7:93:1a:8f:42:
14:e9:21:82:6f:d3:7d:6b:13:4a:64:2a:c4:57:01:
1a:fd:75:de:57:97:1a:79:db:95:51:1b:79:f0:4d:
d1:82:f5:d4:56:8c:a4:8e:d6:fe:34:ed:a5:c6:59:
b6:01:99:47:3c:cb:0c:23:86:cb:18:56:09:cf:13:
63:6b:dd:29:3b:5f:55:cf:1c:af:7d:37:64:78:04:
63:bc:2b:01:27:cf:90:4a:d6:58:45:df:7b:a1:68:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:90:38:18:FA:86:25:E2:93:5C:CC:0C:EB:FB:19:F2:38:5D:5F
X509v3 Authority Key Identifier:
keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.16.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:93:0d:14:8a:66:ea:18:89:76:60:e3:b4:84:94:73:d0:a1:
eb:5b:f2:19:38:f7:33:ae:bf:8b:67:89:1e:59:d8:fc:87:1c:
8f:5d:11:8d:53:e7:c0:2f:53:56:c8:a5:fc:5a:cf:59:2d:f6:
bf:1a:2f:37:6b:23:3d:4e:7b:8d:e9:46:1e:ef:09:9a:72:01:
3d:b6:56:d8:5d:f7:8d:12:1d:b1:f9:30:6a:82:7f:27:2f:ce:
fe:f0:28:03:cb:89:d4:f4:e0:1d:9f:bb:90:bc:d7:03:48:3c:
86:fa:c7:81:7e:99:68:73:9b:83:32:80:42:9e:96:c7:b4:76:
54:04:40:16:8b:b4:15:8c:28:58:75:9f:36:64:c4:e9:d9:43:
0b:67:70:e6:7e:c7:5a:90:a7:82:ee:5d:8b:e6:44:70:57:88:
a5:cc:43:fd:68:29:94:95:27:fc:2f:5d:78:b4:af:5f:43:40:
9f:89:46:a1:08:f2:5d:47:86:a2:4e:af:5d:e9:2f:6e:e7:1d:
90:8b:e5:03:28:b9:2f:1f:9b:a7:b7:08:41:c0:78:2f:66:6d:
19:68:b6:ed:b6:eb:d9:b7:d9:2c:fe:e5:fc:a2:f0:ac:5b:86:
10:1a:d8:f2:d0:26:ff:23:f8:49:a4:dc:a8:a1:7e:f6:92:59:
b4:36:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:17 2025 by rpki-client