Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
File: 3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa (raw, json)
Hash identifier: h0wmEkluVuNQAY/b5t0M2T0gtRoHFm5QRmOMLmHxQmI=
Subject key identifier: AB:9F:EE:9D:AF:17:5D:01:9F:E3:6D:D7:B9:0C:4D:96:1A:84:EC:71
Certificate issuer: /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial: 318538401A89043FB946420CC8606EA6B9178B11
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
Signing time: Tue 04 Feb 2025 18:23:58 +0000
ROA not before: Tue 04 Feb 2025 18:18:58 +0000
ROA not after: Tue 03 Feb 2026 18:23:58 +0000
asID: 28023
IP address blocks: 170.238.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:85:38:40:1a:89:04:3f:b9:46:42:0c:c8:60:6e:a6:b9:17:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
Validity
Not Before: Feb 4 18:18:58 2025 GMT
Not After : Feb 3 18:23:58 2026 GMT
Subject: CN=AB9FEE9DAF175D019FE36DD7B90C4D961A84EC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:f0:b0:47:06:53:5e:99:f0:23:cd:65:5e:
07:d1:7e:0a:9e:97:8a:87:a0:73:2e:b6:96:af:95:
a1:8e:b7:9d:32:cc:7f:b5:aa:05:3d:58:c4:d7:fb:
a9:6f:b6:2a:ea:f8:7e:fb:b7:43:e7:72:a0:5c:de:
07:38:f3:b2:65:1f:b0:b3:d8:56:d0:73:15:a8:02:
15:7c:9b:19:ea:53:e8:cd:0d:f9:97:42:a4:33:c1:
bc:26:82:46:bd:2e:d5:ef:66:09:eb:e8:93:69:d1:
a3:8d:24:9a:5b:3a:23:5c:e3:ec:6e:71:65:bf:00:
5e:69:f9:43:5c:ef:67:ea:ef:a4:16:e6:65:90:ee:
9a:e8:36:9d:c4:27:77:21:d8:17:28:d4:6a:cf:a7:
3f:97:7c:c1:bc:4f:d6:35:70:20:f0:fc:08:75:35:
ce:6e:5a:e7:44:58:0f:57:50:6a:a9:1d:22:88:0a:
af:99:ed:fc:da:a5:89:80:af:73:71:40:99:12:71:
d9:4e:e8:dc:d7:06:91:fb:bd:46:df:c6:0f:bb:e6:
fe:28:32:8b:59:9d:9d:ca:80:fa:d5:49:e0:b2:f2:
95:e6:3c:f6:33:cf:c3:86:be:77:c0:4f:8b:28:88:
dc:51:7c:5c:20:3c:c8:0f:99:2e:a8:fc:24:c4:ff:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:EE:9D:AF:17:5D:01:9F:E3:6D:D7:B9:0C:4D:96:1A:84:EC:71
X509v3 Authority Key Identifier:
keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.244.0/22
Signature Algorithm: sha256WithRSAEncryption
69:70:99:c6:14:39:79:6f:58:45:9b:4f:96:ca:07:ea:d7:08:
12:b8:ee:0e:ea:45:c9:45:db:21:60:54:7e:9b:ce:da:e1:d0:
71:1c:89:76:dc:f1:77:21:d5:d2:5c:3f:b1:ee:df:7c:dc:e9:
38:97:ce:a9:a9:e7:30:88:cb:85:4e:2c:f1:f2:eb:40:81:0c:
6d:14:bf:0f:ce:60:87:50:f3:ca:0c:52:4b:d6:56:8e:7c:99:
8a:0f:9f:6a:36:eb:65:a3:8d:85:4c:97:72:1e:bb:fd:26:b7:
21:01:0b:60:ea:56:43:88:ec:64:12:f1:54:be:84:4e:9a:60:
45:12:26:20:fc:11:37:cc:b4:ee:53:e1:e1:93:7a:dd:83:36:
ed:a9:21:8d:95:e9:7f:37:e9:26:43:d7:1b:86:86:10:dc:19:
ad:88:89:7e:37:61:d3:94:83:ec:90:ca:68:20:39:ec:5e:bd:
d8:4f:16:a3:d2:28:87:b9:cb:73:e3:49:0f:9a:ce:39:59:87:
af:97:ca:35:e7:b5:6b:b2:ff:c0:86:20:61:6d:9b:b5:e4:7e:
5b:6b:a1:e3:00:d3:71:f5:23:4e:21:6d:6a:7c:8c:8e:65:46:
eb:e8:2f:0c:bf:08:ed:7e:52:29:8f:48:1f:d1:4d:a0:73:ce:
82:0e:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:10 2025 by rpki-client