Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136322e302f32332d3234203d3e203134353933.roa
File: 3134392e31392e3136322e302f32332d3234203d3e203134353933.roa (raw, json)
Hash identifier: ndsqfx3PEcF3MAHfM/brmpXwO95Ll1cqnTCxXpjZmbw=
Subject key identifier: 3C:DB:24:D9:92:F5:98:60:50:A3:A2:EA:70:96:D1:DB:A8:24:45:9B
Certificate issuer: /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial: 6657C72EA07FEF7E12A80A6B8C63941839F827FC
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136322e302f32332d3234203d3e203134353933.roa
Signing time: Tue 04 Feb 2025 18:14:01 +0000
ROA not before: Tue 04 Feb 2025 18:09:01 +0000
ROA not after: Tue 03 Feb 2026 18:14:01 +0000
asID: 14593
IP address blocks: 149.19.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:57:c7:2e:a0:7f:ef:7e:12:a8:0a:6b:8c:63:94:18:39:f8:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Validity
Not Before: Feb 4 18:09:01 2025 GMT
Not After : Feb 3 18:14:01 2026 GMT
Subject: CN=3CDB24D992F5986050A3A2EA7096D1DBA824459B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:30:98:ae:7c:51:26:62:fc:c8:c9:f1:30:
1e:68:21:94:3c:1e:c3:c0:94:aa:49:20:58:64:62:
4d:a2:94:02:15:b1:96:99:e0:eb:22:c7:60:b9:98:
af:20:84:1d:93:54:3c:58:3b:1e:39:e7:88:8c:49:
32:08:eb:05:59:f0:3b:f3:ea:d4:c2:13:40:37:8f:
b6:ea:7b:16:a6:eb:68:9d:4a:5c:1c:71:05:93:c2:
a5:d9:4e:ee:6e:4b:bd:1c:5f:9e:30:17:a1:e8:bd:
4d:4b:b8:13:3f:d2:35:c5:2e:f3:75:94:fe:da:ca:
43:94:66:c3:8e:c6:a7:24:db:d6:59:8d:00:a3:e4:
be:f3:02:c4:b5:f6:2c:07:50:1e:32:bd:9e:97:e8:
bf:d8:87:b6:8d:df:8c:42:32:12:c0:49:e1:8f:7b:
71:3a:55:c5:02:c6:54:03:e1:38:ba:37:5c:73:c9:
77:ef:1b:20:8f:56:97:57:49:01:6d:8b:d3:30:07:
de:08:1b:8a:d8:1e:d9:b1:e4:29:21:7c:f4:a7:92:
bc:73:5b:47:1a:6f:71:a0:f1:78:98:9a:22:16:5c:
8e:8c:21:6a:45:17:a4:d3:6b:04:26:23:27:e4:e8:
b8:ab:b0:f9:50:a1:8f:57:89:39:50:00:81:74:ca:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:24:D9:92:F5:98:60:50:A3:A2:EA:70:96:D1:DB:A8:24:45:9B
X509v3 Authority Key Identifier:
keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136322e302f32332d3234203d3e203134353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.19.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:32:50:1d:55:18:b3:49:87:06:c6:38:5c:a3:4e:6b:e9:fd:
cc:be:20:d9:2f:72:32:f4:fa:40:32:a5:1d:fa:70:58:9b:73:
83:75:dd:c3:06:b9:80:b7:a9:69:d0:e2:a2:03:b5:54:6d:4b:
14:18:19:a7:92:a1:32:8e:6e:23:60:49:0f:e1:74:bc:27:19:
3d:42:a9:d2:83:d0:be:50:e1:69:f2:b8:ed:30:56:5c:fe:19:
2d:a4:15:47:b9:f4:fe:05:ee:bc:21:2b:26:35:f2:2f:f3:05:
88:37:05:29:f9:2f:23:9a:66:3e:68:39:f2:22:42:4a:e1:75:
89:d0:3b:df:cd:07:d3:74:4b:9c:f7:e3:99:2d:ad:a3:62:fc:
24:d1:62:64:ce:93:67:9e:36:62:c2:13:87:5e:73:bf:ad:b4:
8f:7e:7e:57:5d:0d:e3:f2:05:0b:7e:40:2d:7c:26:f6:ce:4c:
1c:d2:df:a2:91:ba:c5:20:0f:cd:bf:f2:be:dd:ce:54:41:72:
df:61:39:f5:d6:68:93:87:08:e0:fd:5d:f0:74:e2:71:69:c8:
1a:1e:31:b1:5b:26:52:f4:05:57:9b:b9:2f:24:6c:6d:7a:0a:
63:9d:0e:77:8a:5e:aa:6e:49:a6:9d:4c:48:1f:b0:85:c5:f9:
fb:89:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:09 2025 by rpki-client