Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa
File: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (raw, json)
Hash identifier: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=
Subject key identifier: 05:46:09:AC:48:4C:18:B5:95:55:20:7A:94:3F:42:DE:CD:ED:CF:68
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 660CD3F830C9F8D8B03738820C44D9E4FCC1AA4D
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa
Signing time: Tue 25 Feb 2025 19:45:01 +0000
ROA not before: Tue 25 Feb 2025 19:40:01 +0000
ROA not after: Tue 24 Feb 2026 19:45:01 +0000
asID: 61451
IP address blocks: 148.222.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0c:d3:f8:30:c9:f8:d8:b0:37:38:82:0c:44:d9:e4:fc:c1:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Feb 25 19:40:01 2025 GMT
Not After : Feb 24 19:45:01 2026 GMT
Subject: CN=054609AC484C18B59555207A943F42DECDEDCF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:51:a2:4f:f9:7d:ee:a8:49:de:70:b3:49:
a5:fe:de:08:b5:9b:49:cc:58:73:77:90:af:65:12:
34:41:1d:8b:1b:fc:df:71:bf:e6:0b:e1:ad:8b:57:
b3:14:4b:a4:c5:da:89:81:a2:19:24:69:9e:67:76:
4b:67:69:15:19:d0:ea:e8:90:63:84:9f:12:2c:d6:
a3:7e:1f:55:d3:91:8d:99:dd:4c:3c:2a:57:f5:9e:
f6:a7:23:08:2a:75:b3:6e:c1:a0:02:5e:52:01:23:
d1:a9:81:aa:c9:bc:42:53:8d:db:8a:6a:81:1b:6a:
ea:ea:f2:e3:00:38:88:2f:3d:46:c4:16:96:ad:1d:
0a:ad:ef:8a:06:13:cd:16:88:de:c0:38:e6:af:d4:
06:c7:6d:95:77:bf:75:1e:8d:dc:5b:9a:8a:f7:42:
13:39:66:2c:36:a9:b6:cd:8b:36:da:7a:ac:66:f8:
fe:2e:53:10:13:7e:c9:38:86:61:3d:d1:0b:c5:d2:
f2:03:ec:0a:32:5b:cb:ab:16:01:b1:2f:9a:e3:80:
e7:12:a5:fc:6f:b3:10:6e:c0:c9:f9:d5:3d:56:8c:
24:ea:0d:60:51:d3:f8:fb:1a:a3:71:f0:28:86:0a:
2a:a0:87:39:46:ec:cf:8c:ca:f8:aa:95:74:36:83:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:09:AC:48:4C:18:B5:95:55:20:7A:94:3F:42:DE:CD:ED:CF:68
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.144.0/21
Signature Algorithm: sha256WithRSAEncryption
64:95:78:68:8f:7f:1c:bd:ea:1c:b8:8e:61:e3:9a:8c:05:71:
ab:fe:9c:78:89:07:05:13:d6:16:50:d5:f2:e8:96:1c:42:64:
28:50:53:ce:c9:02:a2:4f:8b:c4:69:18:6b:f9:17:3b:72:2b:
5b:26:da:f9:e8:83:a0:7b:56:e0:3d:03:14:28:35:1f:4e:c7:
37:6e:08:c4:34:90:64:32:6e:d5:87:a7:ae:1e:e9:1f:13:35:
e0:f0:2b:d4:2a:fe:d6:59:c3:1a:d4:de:01:f4:34:ae:6b:9b:
f4:e3:9c:6e:8a:82:a1:46:5b:a4:ab:c8:6a:13:37:29:0c:b3:
4e:ee:a0:3b:a4:f1:55:5a:91:34:9c:1c:57:76:cd:23:9b:62:
90:1d:b2:d8:60:95:70:21:8f:5f:5f:29:7e:57:bd:cc:df:94:
98:c8:06:4d:c7:66:1d:87:6f:ea:5e:d8:db:45:f8:36:27:42:
09:6e:d1:7f:21:2f:23:10:94:e6:ed:85:e7:ea:68:99:a1:ed:
11:1e:52:98:cf:17:99:54:ce:9c:04:10:73:3c:56:76:87:6d:
5b:78:62:df:50:fe:5b:43:29:fe:e2:87:c4:5a:83:8a:52:80:
ff:6f:10:88:52:2e:c9:1d:7b:9e:7f:4a:cf:56:f0:76:74:7f:
6c:ac:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client