Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa
File: 3136382e3139362e33322e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier: jqAGI3fEXzkoSkmdifMxUO8XZwH6Ukvc8pyjaHHUQHQ=
Subject key identifier: 06:F5:8E:D6:E4:C9:6B:69:6E:4F:34:51:00:42:85:20:F5:64:06:51
Certificate issuer: /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial: 02A9E0A37E632AC6AACEE6EC13D92FE15805A0AA
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa
Signing time: Tue 05 Mar 2024 18:00:13 +0000
ROA not before: Tue 05 Mar 2024 17:55:13 +0000
ROA not after: Tue 04 Mar 2025 18:00:13 +0000
asID: 52436
IP address blocks: 168.196.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a9:e0:a3:7e:63:2a:c6:aa:ce:e6:ec:13:d9:2f:e1:58:05:a0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
Validity
Not Before: Mar 5 17:55:13 2024 GMT
Not After : Mar 4 18:00:13 2025 GMT
Subject: CN=06F58ED6E4C96B696E4F345100428520F5640651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:90:46:fc:8a:3f:ae:30:cc:8d:a8:42:49:
81:3c:0c:18:e7:79:fe:6d:7a:fa:9a:38:3e:0a:3b:
59:46:4b:7b:f1:37:33:a7:cc:3b:e5:77:f5:6e:03:
2f:62:e1:e0:93:00:1a:fa:17:08:0b:26:8e:7e:0a:
4f:bb:19:7c:37:06:e2:72:4f:9c:0f:4f:99:3d:be:
30:3c:e5:fa:0c:7f:b6:90:f1:39:01:28:45:99:2d:
b6:cf:8b:48:2a:d2:57:7e:14:4d:b7:6b:d2:bf:2d:
30:32:3f:1a:95:df:2e:df:1c:c9:04:d6:5b:1f:5f:
07:6f:5c:ec:87:08:f6:59:2d:3a:88:a9:5c:51:d5:
b8:66:27:31:e5:f0:ba:bf:3d:5c:8b:56:b2:62:36:
4d:d0:7f:b1:04:31:97:39:58:6b:64:f1:79:12:31:
dc:0d:22:1b:5b:6f:c7:1c:a1:ac:6d:fb:e3:d4:19:
53:ec:4f:7a:19:4c:a9:5a:a6:20:5b:e0:d8:5a:22:
f0:a8:04:ab:62:ff:a1:e9:96:90:dd:26:b3:11:50:
fb:bb:8c:be:73:12:1e:b6:42:ef:05:5b:4c:f3:fe:
5d:90:c4:0c:2c:c9:f0:ad:60:05:76:06:16:9e:89:
85:f3:08:8e:ee:6a:04:21:88:5d:de:01:b2:88:a3:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:8E:D6:E4:C9:6B:69:6E:4F:34:51:00:42:85:20:F5:64:06:51
X509v3 Authority Key Identifier:
keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
36:69:29:17:fd:10:15:72:ad:e6:47:f1:44:63:99:ca:28:23:
07:9a:25:ac:95:4f:b5:4a:b7:27:a9:fa:15:ac:be:7c:85:e0:
8d:55:1e:d1:05:2f:e8:22:cf:ec:1b:e5:45:6d:da:a7:bf:8f:
52:f7:76:65:63:75:00:ed:8a:51:13:37:62:a0:70:ea:45:c2:
1b:8c:90:ca:0a:08:c9:1e:60:f4:25:f2:03:23:b0:cf:d6:6e:
a9:fa:51:97:0f:ca:81:81:28:99:dd:6a:93:a9:a8:f7:43:0d:
ad:6e:a7:c9:16:f2:50:f4:f4:21:32:a0:87:47:72:d2:5b:7d:
4c:e9:de:5f:e8:15:a7:58:5c:b9:9f:dc:c4:10:77:19:08:71:
10:29:d5:cc:1b:d9:d6:dd:ab:c1:e1:58:25:dd:b5:1d:39:f7:
58:51:d4:e9:3d:fe:1d:13:dc:d4:cd:96:9b:19:e3:ac:39:7c:
54:05:c5:29:60:95:68:7c:2d:d2:84:8d:15:1e:a2:7c:05:a1:
b7:c4:5b:96:44:ab:53:dd:a6:5a:fa:c7:03:93:28:44:80:d4:
ea:61:54:64:3d:ae:2a:bf:f2:53:d1:8a:a0:63:e9:b1:c0:4c:
dc:18:b2:5c:cd:c0:6a:dc:67:3b:2d:5b:b7:0c:4e:df:75:00:
cc:ed:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:31:48 2025 by rpki-client