Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa
File: 3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa (raw, json)
Hash identifier: 048MFy0Q2wbZNp5UtbnWq5Qxgf7/j3KTv7E6UiCPtd8=
Subject key identifier: D9:99:C6:DB:78:95:87:B3:47:F1:54:F2:4F:96:96:AE:6A:D1:B5:2F
Certificate issuer: /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial: 198230D3FE53BB0944E9990C3362D542C818F1F6
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa
Signing time: Tue 05 Mar 2024 17:42:19 +0000
ROA not before: Tue 05 Mar 2024 17:37:19 +0000
ROA not after: Tue 04 Mar 2025 17:42:19 +0000
asID: 264754
IP address blocks: 168.194.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:82:30:d3:fe:53:bb:09:44:e9:99:0c:33:62:d5:42:c8:18:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Validity
Not Before: Mar 5 17:37:19 2024 GMT
Not After : Mar 4 17:42:19 2025 GMT
Subject: CN=D999C6DB789587B347F154F24F9696AE6AD1B52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:10:65:a6:1a:3d:29:9a:78:d8:cb:9f:5c:
b0:dc:f8:ca:05:bc:0a:a9:ed:f7:26:f8:95:a4:62:
91:28:38:e2:35:97:57:28:54:6c:fc:e2:25:0f:e3:
ec:b4:6b:e7:bc:4f:a2:a9:d6:6a:90:2c:9b:4f:7e:
3d:ae:28:98:4c:5f:cc:1e:fc:7d:07:4b:c1:cd:a4:
af:88:3f:b7:3c:e6:17:fe:b6:0e:67:79:0c:06:f3:
23:14:8e:94:2a:a2:6d:8e:40:96:c2:0c:47:3a:c7:
f4:bd:62:cc:9d:cc:a4:8c:3a:08:5c:7f:31:eb:79:
15:c9:a3:76:6b:b5:72:1c:ba:b5:63:ec:8d:42:5a:
a2:d1:b8:e0:53:64:3f:54:5b:75:2e:55:05:72:35:
39:dd:92:03:6a:89:51:5f:76:56:77:19:68:6a:1c:
d9:6a:8d:8f:01:44:d6:f6:41:46:62:f5:77:21:5f:
83:7c:3a:92:71:4f:87:14:92:3e:0b:8b:64:75:3c:
c0:f2:2a:b0:1e:9b:7d:42:5a:c8:c1:62:db:62:20:
b8:8f:54:22:ca:0d:1d:ce:52:cb:2d:3e:59:0d:0b:
34:bc:11:ea:11:1b:69:70:d3:aa:32:aa:9a:08:43:
33:7d:20:5d:ce:3a:1e:02:df:42:94:90:6e:c6:33:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:C6:DB:78:95:87:B3:47:F1:54:F2:4F:96:96:AE:6A:D1:B5:2F
X509v3 Authority Key Identifier:
keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1c:9b:b2:41:fe:4c:8f:68:c0:d3:e2:7a:b5:9d:10:5e:38:
08:58:5b:23:33:8b:33:b8:a6:dc:57:42:54:90:69:d8:33:d9:
22:87:48:13:2a:b3:e4:b9:bb:04:93:56:68:06:7b:28:21:d5:
59:ce:f8:45:50:e0:5c:ef:10:d1:d8:2b:cc:4e:04:e8:3d:ad:
f3:b5:6b:89:e9:b1:de:74:5f:a7:77:e1:69:9b:9a:d4:08:ad:
0d:d0:45:72:6a:28:5a:4c:64:cf:29:81:2e:a1:62:d3:7f:a6:
27:6d:6d:42:4d:d8:d9:bc:28:a8:37:06:f6:f9:3c:75:a5:5c:
1b:ac:c4:11:1f:da:7a:9c:82:18:f1:bc:0a:e4:4c:7a:e2:39:
74:28:64:7c:0c:ce:3f:43:3d:1f:2a:2e:94:4b:3f:ae:4c:53:
58:c4:58:c8:de:39:5f:71:65:4a:dc:8e:b1:f5:03:13:10:35:
ef:2f:fb:dc:8b:92:4f:43:9d:6c:ce:ce:16:37:6f:c4:f9:75:
33:a6:74:35:62:5c:3f:7c:57:d8:61:2b:21:0c:7b:c8:69:29:
05:d2:33:98:4e:f1:93:34:d8:89:6a:23:86:84:91:98:01:ea:
95:54:16:45:49:a3:9f:e1:88:4d:8e:8f:43:21:fd:d0:fa:c2:
10:1a:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:11:31 2025 by rpki-client