Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
File: 3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa (raw, json)
Hash identifier: rIjmCU70T43g9YBmzRouwRIY2PleZjtXLiPcyJxg7hc=
Subject key identifier: 0B:23:2E:D9:A0:DA:12:64:94:19:EE:2F:9B:44:2F:16:E6:0F:AB:DB
Certificate issuer: /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial: 732078F22EAF91514CFED179A1C35F33DBAA269C
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
Signing time: Tue 04 Feb 2025 20:03:44 +0000
ROA not before: Tue 04 Feb 2025 19:58:44 +0000
ROA not after: Tue 03 Feb 2026 20:03:44 +0000
asID: 262932
IP address blocks: 170.150.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:20:78:f2:2e:af:91:51:4c:fe:d1:79:a1:c3:5f:33:db:aa:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Validity
Not Before: Feb 4 19:58:44 2025 GMT
Not After : Feb 3 20:03:44 2026 GMT
Subject: CN=0B232ED9A0DA12649419EE2F9B442F16E60FABDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:17:9d:5f:77:6c:82:2f:af:3f:ca:43:54:
04:ea:64:ff:84:f4:68:67:2f:e9:22:9e:5c:54:10:
5f:17:30:30:31:46:6f:d1:37:93:16:5b:f4:42:fd:
14:33:71:1f:13:0b:39:6a:68:3c:f3:8c:11:b8:4a:
c1:7e:b0:1c:90:88:9f:6c:91:fb:9f:8f:76:7a:64:
c4:54:bc:35:58:22:7c:95:8f:fa:59:cc:c3:93:60:
38:1b:6a:9f:95:23:4b:cd:d0:93:f6:d8:0d:8f:ac:
3d:55:57:e4:02:1c:1c:40:eb:d5:00:33:e7:b0:71:
b1:3c:0c:1d:b4:66:c6:0c:5f:03:cf:fb:ea:b3:b7:
ce:24:75:2d:f7:39:1a:a1:17:36:42:d0:4a:9c:ab:
12:90:27:f9:a3:16:cb:88:28:35:98:46:3a:e5:bd:
5b:18:a6:61:8e:93:e0:6c:c7:46:5d:e7:77:d9:2d:
a7:c7:51:e7:6c:24:34:73:78:8c:e7:18:dc:0e:03:
33:ad:2c:09:19:38:75:55:52:b1:1e:2d:9f:3e:81:
32:7d:6d:7e:6a:27:35:a2:73:39:d5:74:65:c3:55:
b8:c2:43:3b:15:0e:64:70:2d:19:72:10:1e:93:1e:
80:17:e1:22:0e:9d:c2:de:a7:cc:47:12:2e:60:46:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:2E:D9:A0:DA:12:64:94:19:EE:2F:9B:44:2F:16:E6:0F:AB:DB
X509v3 Authority Key Identifier:
keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:52:49:af:c3:99:b3:ba:62:09:ef:31:9b:2a:ba:e8:c1:a6:
32:dc:3a:4d:cc:98:d1:bf:d8:6e:ff:a5:09:97:08:d4:6c:95:
10:c1:3d:ee:9e:d8:15:6c:9c:b5:97:d2:ac:d7:05:f4:8f:da:
b2:06:42:f2:0d:68:ae:d1:59:20:e1:39:a0:29:93:9e:3b:fb:
cc:41:26:fd:b6:24:87:29:5f:e8:f5:76:e4:fe:a5:a4:0f:5a:
2f:f6:d5:ff:18:08:25:85:46:b3:90:90:ab:88:50:59:4f:af:
0c:73:97:c2:09:3b:3d:0f:a8:fe:ba:2b:a7:f4:06:8b:21:f3:
d4:51:a9:02:03:98:20:4c:a1:9e:71:e8:66:0b:69:13:6b:97:
08:0c:d1:88:8d:58:94:1c:be:93:9b:06:e7:a3:68:8f:ea:19:
1d:5e:9e:16:41:c3:f2:a0:a0:5b:3e:1e:aa:00:36:78:0b:6a:
5e:32:46:0b:53:98:f4:0b:f2:7e:27:83:7b:1b:fb:2d:06:5d:
dc:aa:aa:d0:61:fd:50:7f:cb:de:89:ba:dd:bd:18:3c:6a:63:
5b:88:dd:4f:d1:d0:36:01:31:b8:cb:31:7d:fe:93:d8:67:0f:
04:5c:9f:4a:c2:6a:75:6b:16:60:5f:5c:13:7b:e1:e4:6f:4f:
0e:6b:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:08 2025 by rpki-client