Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32342d3234203d3e20323634373730.roa
File: 3137302e3235342e3231362e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier: 5OhJUTFgK6buPyDaVPQZGHqMg2qrLvdtrEDoIXlCGv4=
Subject key identifier: A1:B9:91:3C:FD:DF:77:46:83:7B:B5:00:B5:70:2B:57:43:C6:FC:8B
Certificate issuer: /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial: 7C2FC9F8EE5E3CBF3795070F2BB87F20802D40DA
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32342d3234203d3e20323634373730.roa
Signing time: Tue 04 Feb 2025 18:01:34 +0000
ROA not before: Tue 04 Feb 2025 17:56:34 +0000
ROA not after: Tue 03 Feb 2026 18:01:34 +0000
asID: 264770
IP address blocks: 170.254.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2f:c9:f8:ee:5e:3c:bf:37:95:07:0f:2b:b8:7f:20:80:2d:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Validity
Not Before: Feb 4 17:56:34 2025 GMT
Not After : Feb 3 18:01:34 2026 GMT
Subject: CN=A1B9913CFDDF7746837BB500B5702B5743C6FC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:cb:ed:8a:24:c5:f3:51:21:fc:cd:10:54:
46:bd:ac:7b:46:06:c1:f1:36:1f:d7:b6:93:ce:ef:
b6:4e:1c:b6:48:66:fb:96:0a:6e:fa:21:4f:d2:16:
99:f7:c3:07:cd:a3:46:ef:61:a8:33:81:3f:3a:f9:
7b:c6:f2:21:8e:52:4a:a4:d4:c0:e3:4a:0b:24:03:
01:82:5d:be:59:9b:b4:d9:3c:81:68:97:b5:7d:7c:
80:f4:09:bb:ae:eb:8d:c0:9e:e9:a6:80:18:36:08:
c2:79:3c:4a:04:bd:2d:8c:e9:ba:24:ac:db:5c:14:
b9:23:7b:4a:b0:d1:bc:f7:c0:c7:85:46:01:70:02:
92:a2:98:ea:66:16:f2:ee:71:61:1b:80:58:7c:2d:
38:cb:c7:ff:1a:70:98:fc:61:52:42:d4:39:f7:d3:
bf:de:45:f1:2f:56:bd:e5:cd:ce:08:74:db:a5:6d:
e9:d7:f2:fd:52:3b:b4:88:20:46:80:fc:12:58:b2:
e9:8e:e7:ce:2a:4f:a6:52:17:9e:0e:62:7a:19:14:
6d:0d:e9:7b:2b:72:c3:87:7e:65:bb:88:ec:68:7f:
ef:45:2c:29:2b:c3:e0:47:78:1a:64:75:c2:70:ef:
c9:3e:97:67:7e:4c:ee:68:b2:8a:76:cf:ec:e2:f5:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:91:3C:FD:DF:77:46:83:7B:B5:00:B5:70:2B:57:43:C6:FC:8B
X509v3 Authority Key Identifier:
keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32342d3234203d3e20323634373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.216.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4c:8f:76:e4:67:51:e0:f8:bb:64:7b:cf:e3:f8:4f:6c:78:
f5:25:53:97:90:cf:d2:ce:4e:0a:d6:47:52:c8:ab:05:07:31:
23:3b:fe:3d:60:05:e7:1c:27:4f:1b:56:8a:54:5b:a3:4d:39:
ef:b6:bb:0c:dd:76:d4:65:39:d0:dd:65:d9:2d:b4:aa:24:1f:
9b:30:b3:ab:0a:c8:b9:3f:e5:41:b9:64:d6:5c:43:d1:d7:32:
bf:7b:66:b3:2e:c8:4d:67:67:ba:5b:c1:be:15:2a:18:58:ec:
37:dc:5b:58:58:db:f1:d0:2d:89:94:a2:d5:5e:dd:a1:82:a7:
d6:d8:7b:5e:e9:d2:ae:d1:57:db:29:c4:06:2f:75:63:07:82:
1c:81:3d:b1:86:f2:9e:b6:11:8c:5e:21:c9:8b:3f:41:1e:6c:
b9:d6:42:b2:f6:a5:9d:49:d6:b1:ae:98:09:f8:99:00:7b:70:
92:21:43:bf:d6:a6:c2:4e:e6:26:54:d7:2d:4e:9c:3c:45:5b:
ed:e8:80:a9:50:c3:7a:3a:c5:d5:44:a6:07:a4:9b:c0:53:53:
2a:c2:e1:b8:cc:b6:ab:ac:40:e7:53:b5:b6:9d:91:51:63:90:
a8:0e:f6:9f:80:0a:fa:e3:39:a4:8b:60:9d:1f:da:0f:37:24:
92:8a:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:38 2025 by rpki-client