Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/32342e3135322e34382e302f32322d3234203d3e20323639393635.roa
File: 32342e3135322e34382e302f32322d3234203d3e20323639393635.roa (raw, json)
Hash identifier: mhHnPtLoyqnE8yfvo5TNenwKsk3WrpLksVCYDYg0WEI=
Subject key identifier: C3:C3:0C:C6:D0:2C:AD:26:16:0A:AB:C8:84:B3:32:43:5D:90:7B:36
Certificate issuer: /CN=99BECAD3E90AEC116082C64DF45C1FBBBFCFA585
Certificate serial: 1A95B140A413A15A26C960B21C396951698375F7
Authority key identifier: 99:BE:CA:D3:E9:0A:EC:11:60:82:C6:4D:F4:5C:1F:BB:BF:CF:A5:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/32342e3135322e34382e302f32322d3234203d3e20323639393635.roa
Signing time: Tue 04 Feb 2025 18:22:01 +0000
ROA not before: Tue 04 Feb 2025 18:17:01 +0000
ROA not after: Tue 03 Feb 2026 18:22:01 +0000
asID: 269965
IP address blocks: 24.152.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:95:b1:40:a4:13:a1:5a:26:c9:60:b2:1c:39:69:51:69:83:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99BECAD3E90AEC116082C64DF45C1FBBBFCFA585
Validity
Not Before: Feb 4 18:17:01 2025 GMT
Not After : Feb 3 18:22:01 2026 GMT
Subject: CN=C3C30CC6D02CAD26160AABC884B332435D907B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:33:50:c4:b1:43:7e:54:49:92:17:58:eb:
78:c6:d2:ce:86:2c:aa:99:a6:40:4f:9b:d2:37:62:
24:ce:58:29:70:32:2b:d4:c4:fa:18:a4:98:aa:23:
64:f4:9a:c8:cb:2b:7b:5e:9a:ca:88:ad:f8:bd:97:
79:41:de:eb:b3:09:9a:bc:df:6f:59:68:1e:7a:c9:
58:a9:3d:05:15:31:21:91:db:f9:33:46:4d:56:8d:
fa:ea:f5:b7:2c:fa:aa:60:ed:e2:0f:fa:cc:38:49:
03:75:a2:c6:bf:b6:e7:3a:82:ff:c8:8f:8e:8a:79:
c1:40:df:55:63:8a:68:84:de:13:c8:b5:84:f4:57:
92:32:06:27:64:5b:2c:fc:eb:28:54:f5:97:4c:26:
31:ce:2f:16:4e:3a:3e:c1:6f:fe:ee:3e:21:bb:f4:
65:aa:4a:bd:5e:1a:f2:3a:ea:a4:87:ea:d5:2b:f8:
d7:83:81:69:c1:6c:0a:cd:b5:d5:ad:95:bf:54:2f:
1c:bc:80:16:39:fa:ed:80:3c:71:28:5a:17:7b:52:
90:06:d1:84:97:77:39:e2:8d:e9:04:9c:4c:b2:25:
39:98:3b:92:f9:2f:a7:39:92:3e:59:d9:6f:06:bb:
cc:eb:d1:c5:d8:c0:43:6a:e1:a7:fa:bb:1d:c2:e0:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:0C:C6:D0:2C:AD:26:16:0A:AB:C8:84:B3:32:43:5D:90:7B:36
X509v3 Authority Key Identifier:
keyid:99:BE:CA:D3:E9:0A:EC:11:60:82:C6:4D:F4:5C:1F:BB:BF:CF:A5:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/32342e3135322e34382e302f32322d3234203d3e20323639393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.48.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b7:54:6d:a5:63:97:99:04:5f:30:e3:76:9d:f5:ef:49:3a:
bd:9e:31:7c:89:94:23:da:19:68:a7:2b:f6:a0:b2:fb:02:42:
0a:c5:e3:06:1a:e8:94:b8:c1:95:ba:6a:2c:b0:dd:16:00:a1:
c2:0d:4c:75:ed:4e:47:e2:dd:09:3c:d9:cb:19:b8:e5:bf:11:
27:09:c7:22:11:54:f0:46:a4:e8:87:a7:76:57:c5:97:ab:aa:
98:53:4e:b9:d9:31:a2:5e:7d:a9:38:0d:9a:af:99:de:43:ae:
87:ee:b3:8f:14:d7:19:45:17:9f:32:67:4e:77:04:29:c9:d4:
1e:f1:0b:bf:fa:3e:4e:24:51:b9:60:3a:fd:e8:39:6e:1b:c8:
46:0b:20:fc:44:fe:6c:6c:95:1b:bd:ad:cf:ec:d3:e4:de:e3:
1b:6e:d1:37:4a:a6:8f:d9:d2:3e:30:63:42:6b:31:9a:86:da:
0f:a1:3a:1e:15:ed:0d:7d:32:00:37:b6:ad:8c:5f:71:af:01:
28:c2:f4:78:1a:4a:14:ec:cb:b3:4e:0d:34:d9:07:f5:59:7b:
f1:57:d3:8b:90:d0:d6:de:ab:96:c2:72:6e:39:89:76:9a:f2:
5c:ca:1f:8d:3d:07:fe:7f:f8:14:2a:00:86:8a:72:24:3e:10:
ff:9e:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:46 2025 by rpki-client