Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132392e302f32342d3234203d3e20323731393539.roa
File: 3230342e3132362e3132392e302f32342d3234203d3e20323731393539.roa (raw, json)
Hash identifier: +V5LQfydl6L9wNLuPFYKxPPR3yiZpM8J5Jq+ixGHILs=
Subject key identifier: 1F:EC:3B:06:EA:B3:3F:AF:17:4F:8A:91:30:0D:F6:5E:0C:AD:5E:6E
Certificate issuer: /CN=BE3603614732C3CEFB73F594A7007FB8D849F555
Certificate serial: 24977B4CF4BA8BD0B1FD4FD48AC9AEE5D4025007
Authority key identifier: BE:36:03:61:47:32:C3:CE:FB:73:F5:94:A7:00:7F:B8:D8:49:F5:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE3603614732C3CEFB73F594A7007FB8D849F555.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132392e302f32342d3234203d3e20323731393539.roa
Signing time: Tue 04 Feb 2025 18:07:57 +0000
ROA not before: Tue 04 Feb 2025 18:02:57 +0000
ROA not after: Tue 03 Feb 2026 18:07:57 +0000
asID: 271959
IP address blocks: 204.126.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:97:7b:4c:f4:ba:8b:d0:b1:fd:4f:d4:8a:c9:ae:e5:d4:02:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3603614732C3CEFB73F594A7007FB8D849F555
Validity
Not Before: Feb 4 18:02:57 2025 GMT
Not After : Feb 3 18:07:57 2026 GMT
Subject: CN=1FEC3B06EAB33FAF174F8A91300DF65E0CAD5E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:ef:61:a1:25:f3:de:dc:76:55:59:20:74:
d2:6b:d1:d0:03:f3:c8:6f:e9:4a:e3:da:e9:19:90:
ab:fc:1a:e8:f1:84:90:22:36:33:d6:fd:dc:2e:77:
a3:01:a1:77:13:18:94:72:a2:94:95:38:9d:a8:cb:
41:04:40:f1:ce:3c:8e:ee:da:9c:b7:f9:9d:6c:b2:
6d:a0:83:5b:ad:08:d0:f2:98:5f:6c:80:f2:4a:af:
e0:4b:a3:27:15:8e:5e:94:13:04:0a:d5:a4:10:87:
65:9b:41:82:94:8e:f9:e3:0e:99:d3:fb:35:f4:11:
47:41:5d:ba:13:dc:c4:42:15:47:a7:c0:d9:a6:15:
9c:e0:62:e2:f6:a5:e0:88:22:b7:0c:7f:c2:10:f3:
a5:9b:19:75:33:a5:6c:4a:d3:8e:d9:2d:b1:7a:ef:
ad:81:6e:d6:57:5b:ac:3f:dd:fc:ad:90:19:10:10:
d4:ee:91:43:0c:14:8e:f5:f6:ed:29:21:cd:9b:b2:
a6:ae:fc:3b:28:ad:ed:5f:97:84:78:89:ff:ab:2c:
8f:42:16:99:1f:68:eb:4e:92:be:0f:ce:dd:04:9d:
65:6d:22:63:00:16:24:06:24:44:51:51:50:94:84:
9e:09:e5:1a:63:b3:3d:4f:a1:c5:73:86:ec:76:e4:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:3B:06:EA:B3:3F:AF:17:4F:8A:91:30:0D:F6:5E:0C:AD:5E:6E
X509v3 Authority Key Identifier:
keyid:BE:36:03:61:47:32:C3:CE:FB:73:F5:94:A7:00:7F:B8:D8:49:F5:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/BE3603614732C3CEFB73F594A7007FB8D849F555.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE3603614732C3CEFB73F594A7007FB8D849F555.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132392e302f32342d3234203d3e20323731393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.126.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:38:fe:85:64:a2:53:22:b4:6e:8b:96:2b:fa:92:53:3e:3c:
77:87:a0:8c:a3:ca:64:78:ce:52:33:9c:c2:bd:c9:95:6b:36:
f1:1d:e7:74:30:f7:45:74:c0:81:5c:5e:a3:21:1a:16:03:c9:
50:b8:68:53:a3:01:bb:77:c4:22:f4:12:bb:b3:8e:58:d6:5a:
ea:3c:68:41:9e:81:62:ce:62:60:c9:b3:ce:9e:88:dc:94:06:
a9:97:91:dd:85:62:37:ab:2c:b0:a3:ab:68:d9:79:56:ec:c6:
ef:6a:94:ab:b7:c5:a2:93:dd:03:ad:2e:4c:2f:24:a2:7b:b4:
42:a6:6d:df:99:8d:2f:b4:e2:00:08:4c:6c:8a:9e:70:6d:2d:
9f:19:49:6e:ed:b0:20:cf:28:02:bf:86:50:0c:71:9b:6c:76:
4c:10:3f:01:70:b6:01:77:bd:3a:05:e8:5e:3f:c7:c2:b3:d9:
50:34:0c:02:12:1e:98:d3:be:7a:5a:f4:49:a8:45:1e:14:a6:
62:83:2d:a4:ed:b5:73:35:78:5d:e3:73:79:92:d9:de:9f:bb:
c8:93:73:94:09:47:c7:67:ac:a6:88:d9:1d:be:35:84:46:ff:
e1:74:01:05:73:ff:99:c4:93:0d:16:16:f5:16:09:1e:5c:3e:
4a:60:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:07 2025 by rpki-client