Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa
File: 3230302e38322e3132382e302f31372d3234203d3e203231383236.roa (raw, json)
Hash identifier: VevxHx8ODBDQOtwjRu7+vZEifANsyiUxqfZHL+05o2A=
Subject key identifier: 8A:F0:CD:20:0A:80:34:5B:25:E0:33:8D:07:CE:CD:BC:67:D4:5D:18
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 094E57A75DE250DF3348DB449419BD961FBFBAD2
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa
Signing time: Tue 05 Mar 2024 17:49:42 +0000
ROA not before: Tue 05 Mar 2024 17:44:42 +0000
ROA not after: Tue 04 Mar 2025 17:49:42 +0000
asID: 21826
IP address blocks: 200.82.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4e:57:a7:5d:e2:50:df:33:48:db:44:94:19:bd:96:1f:bf:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Mar 5 17:44:42 2024 GMT
Not After : Mar 4 17:49:42 2025 GMT
Subject: CN=8AF0CD200A80345B25E0338D07CECDBC67D45D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:4c:37:b7:d4:8d:a6:e1:f1:e8:66:6b:59:
87:c3:fc:21:68:d6:7c:e0:b8:04:c7:8e:8e:c1:39:
91:0f:56:d0:75:c2:f8:39:d8:e3:cb:68:4b:f3:49:
b6:ef:f9:e0:e0:52:86:c5:1f:3e:f0:44:30:41:12:
d3:43:66:f3:3b:30:ad:50:57:08:8b:d1:f3:dd:4a:
e7:ef:37:66:c5:86:13:54:4a:44:f9:cb:f7:a4:aa:
bb:9c:df:3e:c3:34:cf:8c:27:0b:c4:63:84:12:5f:
36:1d:dc:9f:67:a2:78:aa:44:43:9c:cf:24:10:9e:
ee:c7:c3:d9:f7:40:40:be:24:04:7a:12:f3:df:40:
b4:db:dd:c2:cb:dc:c1:b0:2b:1a:9a:31:6b:99:53:
b1:43:82:70:8b:5f:d3:36:5e:17:5b:55:c6:82:ab:
ec:cd:0d:2d:5a:2e:96:51:54:b6:7f:a1:4d:bf:64:
a8:00:1d:f6:b7:49:47:6c:2d:38:2a:88:72:07:98:
5f:31:d7:8a:42:89:d7:11:1d:8a:1b:db:38:f0:89:
54:1c:08:6c:fe:84:bd:6b:c2:9a:1b:9e:3b:70:8b:
84:44:20:a5:cb:51:d9:89:33:40:01:bd:b0:99:b3:
05:da:77:81:76:62:07:ad:74:64:4f:8e:c8:41:53:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:CD:20:0A:80:34:5B:25:E0:33:8D:07:CE:CD:BC:67:D4:5D:18
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
76:c7:43:6a:ab:0d:44:78:76:2b:f2:96:9b:90:0d:bb:e4:57:
0c:51:9e:05:54:ab:75:33:b5:3e:79:e5:24:db:68:32:c6:8b:
95:2b:65:98:d8:b1:e8:db:66:20:aa:2c:64:7d:69:8d:f6:c1:
8d:a2:de:e2:81:0a:b7:a3:bc:78:d9:7e:de:cb:ef:41:44:13:
a3:45:92:f1:2c:9d:59:5e:f1:bb:f3:b8:ea:06:e5:36:f3:68:
a1:56:75:5a:67:03:31:dc:51:71:c8:3b:a3:0b:af:6e:d5:73:
f8:8a:36:9a:cd:0f:b8:21:fe:d5:36:bb:1f:13:4b:34:88:dc:
0a:23:91:b7:b4:19:3c:7f:e1:e0:b6:22:4d:66:fb:8d:5a:b6:
45:5d:11:b5:7c:c6:c6:f7:bc:c1:e8:bf:93:b0:a0:e0:12:98:
6f:b9:57:a0:90:49:e0:12:5f:25:c8:62:04:f3:a4:89:55:c8:
c3:70:30:94:07:89:de:bb:aa:7b:b5:d8:fe:70:48:4c:33:38:
e4:a8:40:f8:ad:8e:a9:cb:9f:c8:6f:c8:9e:a7:7c:b3:61:f7:
dc:e6:cc:44:2f:e8:3d:39:00:f1:50:3b:64:25:6c:a1:9e:97:
3b:61:f6:91:6b:73:25:50:f6:03:27:e0:b9:88:75:58:50:93:
80:03:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:49:15 2025 by rpki-client