Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa
File: 3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier: bJYtVAGCjgpwIj+VctSuLHameFILsjnHuOjYOfSrAgk=
Subject key identifier: C8:BE:1F:96:87:DA:39:37:ED:21:6F:FA:EF:AB:F8:89:65:45:42:63
Certificate issuer: /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial: 31A826D9A2DCBFD851FAB2800321FA2CDBE78144
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa
Signing time: Tue 04 Feb 2025 18:09:25 +0000
ROA not before: Tue 04 Feb 2025 18:04:25 +0000
ROA not after: Tue 03 Feb 2026 18:09:25 +0000
asID: 264750
IP address blocks: 143.137.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a8:26:d9:a2:dc:bf:d8:51:fa:b2:80:03:21:fa:2c:db:e7:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Validity
Not Before: Feb 4 18:04:25 2025 GMT
Not After : Feb 3 18:09:25 2026 GMT
Subject: CN=C8BE1F9687DA3937ED216FFAEFABF88965454263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:6e:9b:ab:9f:a5:40:c0:cd:c2:03:cd:7e:
e2:68:d3:18:94:17:04:f4:97:ba:90:60:fa:80:c1:
71:54:e7:62:e6:ad:70:24:69:b1:e5:0b:ed:28:e0:
35:72:0c:ac:fe:ea:cf:41:01:42:1e:0e:80:1a:f4:
02:6f:b2:55:70:44:b7:a2:9b:19:35:ec:09:19:7a:
dd:8b:7c:a3:88:c1:3d:e0:46:57:77:18:e3:66:94:
b6:e1:a8:1f:c5:7c:33:20:43:ab:cb:5b:c1:63:27:
cf:76:d6:2c:c6:9d:c5:dd:cd:b8:21:52:26:8f:d1:
be:50:d9:0a:15:66:0a:2f:1d:a1:8e:ec:e6:62:77:
a6:35:b8:73:26:60:9e:22:d7:88:73:12:1f:69:38:
90:d2:ee:9e:4d:24:37:e5:ba:44:6b:1c:0d:91:b4:
4d:b3:d2:29:7e:42:db:14:b2:30:59:41:1d:1d:f4:
cc:d8:98:9e:94:61:46:9a:68:a8:2e:0b:48:58:79:
60:28:01:24:3a:3b:4c:3d:14:9b:0f:ed:f8:1c:91:
88:75:d7:ad:03:3a:36:ce:58:8f:72:5d:12:f2:70:
b4:e5:75:8d:14:b0:0a:43:34:61:3d:bb:ea:47:f2:
00:f6:92:f1:27:5e:bd:f0:1f:09:1e:81:58:65:ca:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:1F:96:87:DA:39:37:ED:21:6F:FA:EF:AB:F8:89:65:45:42:63
X509v3 Authority Key Identifier:
keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.80.0/22
Signature Algorithm: sha256WithRSAEncryption
20:80:fd:73:e0:36:51:59:01:9f:f3:0e:b3:74:66:6b:67:57:
21:88:8b:03:b0:01:cd:23:ff:c9:e2:30:c4:5c:45:f3:89:d2:
10:1a:66:93:9a:1a:8f:18:dc:7b:c6:a2:16:ef:0d:7b:fb:b5:
eb:38:91:c0:8b:b1:4d:b7:91:0e:95:01:3d:0f:c6:30:89:92:
33:35:00:fd:c3:be:3c:48:e3:6a:e6:d1:6e:a8:12:1e:8b:ff:
f6:dd:a1:ec:94:cb:e2:65:ec:50:64:17:d0:c5:a3:e1:6c:e1:
66:da:b4:60:87:f3:49:fd:78:1a:d4:b7:26:89:33:a1:79:fc:
7b:7a:a0:76:9c:07:a8:18:ff:b0:e5:da:0e:1e:1c:a5:86:16:
24:11:15:02:e1:e0:a6:d1:0d:d0:88:e2:33:da:02:8a:2e:be:
11:c0:5b:0b:6d:cc:9a:5c:0b:74:e3:14:6b:55:94:4a:95:30:
06:95:e3:63:bd:e1:d9:f8:3f:5b:89:a0:5b:64:45:54:8f:fb:
34:c0:2e:9e:09:fd:82:a8:17:f3:b9:cb:d2:78:f6:84:2d:8c:
92:ae:c0:e7:89:a2:7b:03:43:6e:20:a2:d6:6b:cf:4d:25:9c:
e1:7f:40:e7:b6:c4:08:de:5a:5c:59:b3:52:2b:2e:c1:7e:a6:
1f:c0:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:49 2025 by rpki-client