Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa
File: 3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa (raw, json)
Hash identifier: 4YP8tK6CAxrx6e17n5R5ysXks5A7kYPz2q7i/I/Ig3o=
Subject key identifier: 53:10:D0:CC:20:D7:7A:A3:EA:17:59:74:3B:81:90:86:C7:D7:D3:3B
Certificate issuer: /CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Certificate serial: 74D6CBABF6B6204172530D3082302692FB7DCD75
Authority key identifier: D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa
Signing time: Tue 04 Feb 2025 18:03:23 +0000
ROA not before: Tue 04 Feb 2025 17:58:23 +0000
ROA not after: Tue 03 Feb 2026 18:03:23 +0000
asID: 264608
IP address blocks: 143.202.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d6:cb:ab:f6:b6:20:41:72:53:0d:30:82:30:26:92:fb:7d:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Validity
Not Before: Feb 4 17:58:23 2025 GMT
Not After : Feb 3 18:03:23 2026 GMT
Subject: CN=5310D0CC20D77AA3EA1759743B819086C7D7D33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:f0:83:1a:c6:58:93:2b:9e:70:0d:b8:3c:
1c:71:cb:2e:2a:d6:74:75:4a:a9:5e:cd:e9:cf:30:
6d:bb:34:94:d2:82:83:66:d1:59:9b:82:f1:57:69:
00:6a:ae:ed:14:81:9d:18:b8:4e:72:3a:4f:04:24:
cc:a2:72:77:4f:e3:a6:8f:ab:cc:02:a4:ec:0f:a3:
46:67:e7:3f:05:72:b6:70:12:3b:50:b9:76:ec:d3:
a0:24:5e:79:29:c4:74:9f:44:14:1c:f3:05:6b:04:
7e:a9:31:be:0b:54:20:e5:3a:b9:c5:25:6b:41:14:
47:ba:dd:d3:7f:13:b5:9c:5a:9c:87:90:90:b0:2a:
75:6b:5d:34:e6:72:bb:c6:3e:a3:87:86:60:9f:a5:
d4:e7:95:a0:bd:02:0e:b9:02:5b:7d:0f:21:2d:47:
88:15:de:c3:32:9b:93:cd:44:99:e6:c0:fc:20:45:
f5:c2:ff:a1:46:20:c6:98:84:de:4f:a0:9d:9e:40:
93:ad:92:73:5a:17:af:b2:58:7c:7b:1d:e9:06:2c:
41:13:97:db:63:aa:98:32:bb:34:84:55:f3:1a:b8:
50:bd:bb:94:a8:7d:0a:8e:4a:6f:eb:e9:03:e8:02:
8f:05:83:80:17:1a:7e:1c:eb:a1:4d:68:85:1e:3e:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:D0:CC:20:D7:7A:A3:EA:17:59:74:3B:81:90:86:C7:D7:D3:3B
X509v3 Authority Key Identifier:
keyid:D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e7:6f:a9:92:10:c0:c0:b2:ee:d6:ed:f0:71:98:39:81:61:
d5:64:aa:b1:16:73:06:9d:4f:0a:af:9f:53:82:15:03:9b:a5:
15:7d:e9:d6:36:4a:55:28:42:ac:7d:0e:72:e8:14:fb:54:d1:
2d:e4:d0:23:4c:5c:f1:dc:c8:0a:ca:28:df:31:3d:60:01:33:
2b:6b:86:ec:88:b9:96:12:26:3e:12:49:5a:47:ff:9b:7a:31:
79:d9:3f:7e:b2:84:c2:d3:28:f6:6f:73:6f:02:a0:e7:5d:76:
0b:ad:72:42:4f:cb:23:40:fa:95:61:d0:a4:5f:42:45:b6:b6:
48:6c:c2:65:33:20:22:19:70:56:33:2b:61:67:32:b7:1d:d8:
5e:a2:dc:79:6c:45:67:87:df:95:2c:ba:3c:99:53:7e:63:6c:
1a:2c:2d:46:d1:6c:45:73:61:5c:81:14:54:16:c9:c7:15:f7:
ac:8b:d4:05:d7:a8:54:56:34:bb:fc:b8:3a:a8:c6:bd:d6:32:
c9:e0:41:be:3d:7d:e5:18:38:86:62:34:01:21:11:38:62:49:
59:30:33:57:f1:a7:4f:2e:00:b3:99:bd:72:98:1f:52:8c:17:
c5:e5:61:0d:cf:98:47:c3:e8:4c:e2:99:6e:b4:91:b4:e5:9e:
7c:1d:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:40 2025 by rpki-client