Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
File: 36362e3233312e37322e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier: /ptaPIRIbqWCxrNTOZp4TPUyyho7Eg2wZTEVqaRwQDI=
Subject key identifier: 6F:D7:3D:C4:71:14:4B:20:E3:18:F5:5D:11:8D:6D:35:E8:96:85:AB
Certificate issuer: /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial: 0139F0107E0B31A8CFFBCD47B52E42D1B27607D0
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
Signing time: Tue 05 Mar 2024 18:06:20 +0000
ROA not before: Tue 05 Mar 2024 18:01:20 +0000
ROA not after: Tue 04 Mar 2025 18:06:20 +0000
asID: 270049
IP address blocks: 66.231.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:39:f0:10:7e:0b:31:a8:cf:fb:cd:47:b5:2e:42:d1:b2:76:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Validity
Not Before: Mar 5 18:01:20 2024 GMT
Not After : Mar 4 18:06:20 2025 GMT
Subject: CN=6FD73DC471144B20E318F55D118D6D35E89685AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:23:b1:23:87:71:d3:ec:a7:36:14:57:ef:
cc:e8:c6:d6:9f:a8:a4:fb:2b:72:c2:54:a4:ba:28:
f2:8c:20:d6:90:a7:ba:33:07:4b:44:cd:ad:c1:c6:
99:20:28:77:c8:99:79:b8:46:a9:dd:da:eb:c3:db:
0e:a5:f3:cb:67:c2:b1:97:a2:32:14:6b:ff:f4:94:
24:3c:7d:e4:b9:58:64:7a:11:56:c0:e8:42:e2:de:
e1:92:b0:5a:2b:ca:a4:61:b5:1e:60:20:66:0b:fe:
86:32:52:9f:1d:27:1a:36:45:66:45:aa:1b:6e:2e:
91:0d:78:c7:46:65:89:90:20:31:62:a4:b8:a9:4d:
5e:a7:f8:c0:30:e5:fb:ac:9f:23:6e:ed:03:1d:2e:
68:f8:90:b8:18:69:86:89:3a:6e:44:91:bd:2c:f3:
61:ed:86:b7:f2:19:3f:5a:75:21:02:57:cc:f0:83:
f8:6b:24:86:72:c8:c1:8b:8f:a1:98:f4:d0:b1:30:
e9:ce:ea:6c:7e:91:04:9b:3d:ed:80:1f:b4:d9:b5:
a8:9a:13:9b:4b:86:e6:0f:d9:ac:4f:98:72:92:59:
5d:8f:6e:cf:64:95:80:a5:b0:2f:f0:0e:78:68:be:
0e:b0:92:c1:78:02:fb:fa:4f:4e:31:47:97:c1:c2:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:3D:C4:71:14:4B:20:E3:18:F5:5D:11:8D:6D:35:E8:96:85:AB
X509v3 Authority Key Identifier:
keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:04:c0:60:c4:8f:b9:2f:4f:6c:26:df:ae:ed:af:5c:f0:
bb:80:e0:4e:4b:1b:d1:4f:74:40:46:7b:94:07:25:ee:91:60:
ee:94:ba:dc:79:bc:58:30:fd:e9:ed:57:48:37:20:ed:65:2a:
6c:c3:ee:a3:e1:df:1b:14:be:91:b6:e6:0a:7e:7b:2c:3b:4f:
8d:5e:3f:55:bd:c7:35:ce:57:da:f5:06:15:b0:66:1b:36:c5:
36:c6:69:36:e9:f0:e6:5b:0f:13:04:ee:15:28:7c:be:5b:dc:
51:cf:5d:37:c7:7f:ba:6f:60:81:71:70:b3:eb:50:b3:80:00:
96:ad:5e:24:73:d9:70:60:62:e6:ce:44:30:a7:c1:d2:02:11:
d1:13:c1:0f:54:09:3b:46:a6:4a:30:5d:f3:ff:60:95:c3:48:
31:63:0a:dd:bf:9b:32:ac:d3:e6:19:6a:54:d1:98:3b:02:21:
76:48:f3:9f:5d:52:e7:ea:cd:61:71:f0:bf:a2:de:04:b9:fd:
b1:32:1f:c3:5e:f0:d6:5d:05:54:86:76:fb:49:ea:09:4c:2e:
78:09:4c:f4:4c:61:78:41:03:17:61:55:18:fc:85:cd:5c:6b:
ec:95:7c:e7:52:19:1f:e1:e1:57:c8:6e:60:6c:64:5d:74:a7:
b9:e2:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:38:34 2025 by rpki-client