Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa
File: 3230312e3135382e35322e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier: kQ52GjcAaKmmiq31kByRWlp9qjVc7T6bGJszZ5f4zt4=
Subject key identifier: 25:11:87:98:57:47:03:4A:CB:12:80:EE:7B:57:D1:E6:85:42:CA:93
Certificate issuer: /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial: 3982593537822234D69F01BAB56FF6B9CA7797C4
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa
Signing time: Tue 05 Mar 2024 18:06:27 +0000
ROA not before: Tue 05 Mar 2024 18:01:27 +0000
ROA not after: Tue 04 Mar 2025 18:06:27 +0000
asID: 32034
IP address blocks: 201.158.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:82:59:35:37:82:22:34:d6:9f:01:ba:b5:6f:f6:b9:ca:77:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
Validity
Not Before: Mar 5 18:01:27 2024 GMT
Not After : Mar 4 18:06:27 2025 GMT
Subject: CN=251187985747034ACB1280EE7B57D1E68542CA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:a4:6d:99:8d:68:06:90:1c:a6:24:ee:84:
7f:df:de:6d:78:6b:c9:17:f3:c4:f3:6f:ae:bc:dc:
7d:14:fc:6d:6e:82:63:8f:65:1b:db:93:1b:3e:07:
f3:38:dd:0f:13:9f:d4:a6:60:26:d6:2e:e6:bf:41:
5d:e0:f2:c5:08:2f:63:d1:8f:1b:5a:fe:12:4c:2e:
29:e7:b2:5c:53:f3:59:6c:f6:60:76:7c:51:32:cb:
ed:a4:2d:04:65:48:8f:ca:1b:83:61:af:dd:71:09:
de:b2:2b:45:eb:97:86:d9:ab:21:08:9e:95:3f:28:
55:fb:42:25:b7:25:f8:3d:c9:9c:96:a0:c4:2f:02:
b5:a8:37:60:7e:f8:57:42:8f:43:d7:7e:c1:a6:aa:
cb:a6:f5:bc:6e:cb:a1:1d:1a:37:a3:02:f1:af:37:
04:c5:32:54:bf:0c:80:cf:bd:f3:72:fa:ee:e2:94:
b5:8e:a7:22:7c:3c:7e:91:a0:46:fe:d5:68:54:94:
01:53:1e:38:91:9a:07:93:e0:a3:ad:75:8d:43:49:
82:27:ad:65:9d:97:26:67:8d:16:a5:12:e9:c4:b3:
24:7f:5f:c1:fb:25:a5:53:70:2c:2c:79:88:1e:ef:
01:18:93:17:bf:63:a0:2b:73:14:61:6b:51:08:06:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:11:87:98:57:47:03:4A:CB:12:80:EE:7B:57:D1:E6:85:42:CA:93
X509v3 Authority Key Identifier:
keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.52.0/22
Signature Algorithm: sha256WithRSAEncryption
96:30:45:57:34:a2:6a:93:37:f2:07:20:e1:2a:e9:31:a0:73:
d5:29:0c:e5:c7:b0:04:31:8b:a0:94:c6:2f:ab:7e:53:da:da:
2a:93:b2:5c:4d:60:9d:b3:26:81:df:93:1a:1c:71:5a:64:14:
c0:fd:03:fe:4d:e0:d8:12:ba:b7:ea:c8:23:91:79:81:af:9f:
35:d4:67:aa:61:3e:97:1b:10:50:95:06:1e:82:3e:e6:2f:c1:
bf:25:df:79:64:34:19:e4:a1:09:31:64:72:d5:4d:c1:40:42:
8f:f6:bc:95:c4:12:d7:c8:a0:4e:61:2e:d4:54:f9:f0:e2:e3:
be:2f:ea:09:7d:b6:66:d4:5b:ad:68:d3:5e:30:b0:07:6e:ea:
c9:8a:b8:b6:67:bf:3e:aa:92:8c:e2:25:bb:92:d3:60:62:f5:
37:75:e5:96:24:9f:5b:cd:e1:d6:59:6e:70:ae:0b:a0:8b:d9:
fe:4a:98:93:08:c9:d1:2f:f3:55:2e:f0:48:44:6e:52:8f:a2:
c3:7e:f7:bc:cb:a1:78:c3:cd:7e:db:c7:56:9c:07:43:d8:83:
fc:99:b2:8f:1f:25:11:b3:bd:e2:4d:a1:2a:8e:48:aa:fa:9e:
9c:06:0c:aa:21:48:c5:d0:ea:6e:b8:1f:09:6a:fe:40:2d:e3:
15:99:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:53 2025 by rpki-client