Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
File: 3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa (raw, json)
Hash identifier: kkiUYKoLwqsqJ9tvINbxhPViXGmFtfEc8PCmddm+no0=
Subject key identifier: 48:1C:1A:7B:5A:8E:C9:40:34:79:EC:E0:6D:3C:2D:D3:F3:3A:6F:05
Certificate issuer: /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
Certificate serial: 44B81ED7D4AC8D3CC08B9FE828365162B4D1A9D7
Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
Signing time: Tue 15 Oct 2024 18:50:00 +0000
ROA not before: Tue 15 Oct 2024 18:45:00 +0000
ROA not after: Tue 14 Oct 2025 18:50:00 +0000
asID: 263695
IP address blocks: 201.131.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b8:1e:d7:d4:ac:8d:3c:c0:8b:9f:e8:28:36:51:62:b4:d1:a9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
Validity
Not Before: Oct 15 18:45:00 2024 GMT
Not After : Oct 14 18:50:00 2025 GMT
Subject: CN=481C1A7B5A8EC9403479ECE06D3C2DD3F33A6F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:d6:8b:9a:2a:21:5e:6e:cf:f1:9d:06:cb:
e8:ac:ff:1a:f3:a3:f2:0a:4b:58:0d:9f:67:19:c1:
7f:3e:78:66:60:4a:ec:e5:14:f1:7a:c3:1f:36:dd:
4c:1a:a6:46:c7:56:16:c7:5c:16:15:86:7a:db:ec:
67:ef:49:34:00:a8:4d:0a:a0:ed:3f:89:df:50:62:
9a:b5:a0:e5:79:fa:79:dc:57:a2:3d:17:b3:fb:29:
e2:a5:70:79:9e:e5:df:b8:12:81:53:84:ec:1b:d2:
b7:3d:40:7b:3d:f9:c0:ff:66:bb:87:36:5f:17:53:
6e:ec:6e:15:09:67:21:62:41:1a:fb:ae:71:c8:6a:
b1:b1:33:ef:9c:78:80:c3:77:ed:71:f9:7a:0d:50:
e5:52:16:5b:d3:91:a8:b3:26:0c:0e:8c:f5:59:1c:
fe:1a:c4:bb:be:8a:be:c8:0e:91:9f:cd:65:0d:fb:
61:c6:56:55:32:11:c6:99:fc:30:84:ff:e1:f7:ac:
70:11:22:8e:f2:ee:5d:f0:03:63:93:0b:71:f6:e4:
59:05:76:25:d0:f1:a7:63:ef:6f:c3:59:8e:fb:dd:
50:ad:95:40:37:e2:a9:95:c8:83:be:83:d9:6a:4a:
4d:cf:cc:61:5a:87:43:fd:89:c3:02:4c:b0:dc:a1:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:1A:7B:5A:8E:C9:40:34:79:EC:E0:6D:3C:2D:D3:F3:3A:6F:05
X509v3 Authority Key Identifier:
keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f9:1b:14:be:0b:6d:f0:ad:3c:ae:a4:d6:80:7b:3e:56:84:
c3:95:5b:50:ae:a7:f9:22:a5:8c:5f:d5:39:88:a6:65:ca:83:
e1:a7:b2:fc:d0:24:6e:f0:72:f9:b7:45:c1:3b:7a:80:cb:5e:
13:98:1b:35:c7:67:e4:17:78:4a:f5:c2:e1:89:cb:3b:29:56:
43:73:58:fc:c1:65:54:24:4d:d3:ed:4a:cf:3e:f6:7d:a8:b6:
7b:ae:67:1e:6b:a7:22:02:62:b7:77:10:da:75:4f:36:50:d1:
7c:af:f2:fd:71:ea:7e:b0:34:08:ab:b9:10:77:82:51:fa:88:
2f:64:1b:70:04:7c:ee:8f:b3:4d:90:c1:c8:cc:3c:35:17:9f:
2c:af:16:1c:c8:37:30:a9:7b:13:cd:a0:d8:1a:34:2d:04:02:
f3:de:b6:7a:13:19:76:4e:6a:81:84:57:b8:4b:3f:6e:5e:47:
58:87:a3:5b:fa:22:b3:16:42:3e:7a:ba:82:5d:32:5f:59:3a:
ff:d3:b1:1e:0e:03:38:30:3e:7b:8f:bf:08:6d:01:69:8f:be:
9f:92:a1:77:48:6f:27:ee:52:59:70:f5:42:94:0d:e0:8a:64:
8e:53:bb:bc:92:91:aa:18:30:72:8f:dd:88:5e:ae:6d:4e:fa:
7a:18:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:47:49 2025 by rpki-client