Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e38322e32342e302f32322d3234203d3e20323634373530.roa
File: 3137302e38322e32342e302f32322d3234203d3e20323634373530.roa (raw, json)
Hash identifier: GbBEhPG5i14r4LZO5ANUK5H7k5XITBu4y0KZ/lna6Pg=
Subject key identifier: 4E:AC:D4:06:99:87:E3:CD:59:DC:B3:AB:BC:9F:D4:28:F5:61:C7:76
Certificate issuer: /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial: 41E6885BD286483D8C9F0D03616748E9AEDC0D21
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e38322e32342e302f32322d3234203d3e20323634373530.roa
Signing time: Tue 04 Feb 2025 18:09:25 +0000
ROA not before: Tue 04 Feb 2025 18:04:25 +0000
ROA not after: Tue 03 Feb 2026 18:09:25 +0000
asID: 264750
IP address blocks: 170.82.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e6:88:5b:d2:86:48:3d:8c:9f:0d:03:61:67:48:e9:ae:dc:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Validity
Not Before: Feb 4 18:04:25 2025 GMT
Not After : Feb 3 18:09:25 2026 GMT
Subject: CN=4EACD4069987E3CD59DCB3ABBC9FD428F561C776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:43:82:6a:5a:c6:90:4b:56:c2:0d:c2:a0:
72:a5:0f:ac:5c:5f:cb:94:ff:b7:93:c4:03:b5:3a:
6a:05:05:52:58:20:bb:47:c9:d9:b4:1d:33:8d:d0:
ff:5c:ef:64:d8:b0:41:56:43:a1:02:51:e5:eb:76:
34:c0:b9:50:bd:1d:4f:78:7d:40:49:da:68:9e:04:
7d:11:0c:b6:db:28:ac:e9:1d:5a:65:1e:4d:de:d3:
6c:e1:67:76:ae:db:5c:1f:4f:12:89:8f:02:c7:b7:
d1:b7:c4:bc:4a:64:06:1c:26:4a:7a:97:4c:16:ec:
59:75:12:55:f5:25:4e:a3:00:74:02:49:db:10:ed:
86:b6:3b:29:2a:a1:4e:e4:09:ff:10:d2:54:bd:00:
56:c8:bf:49:84:bf:83:bb:42:8d:e1:77:fc:60:98:
7a:ca:cf:58:4f:3d:0c:ed:c5:26:bf:15:eb:15:db:
3b:23:d8:ae:c6:db:15:c0:cc:4d:d4:90:1d:dc:a8:
6b:aa:1d:09:dd:2e:8d:49:c0:f2:c2:e9:4f:8a:c6:
b8:d3:53:f9:aa:49:a5:94:3f:a7:65:01:b9:c6:9c:
e5:03:3a:4d:d7:d6:fb:ab:ce:66:14:b3:19:65:c9:
f2:83:0e:3e:ef:40:53:03:ac:6b:5a:35:9e:02:db:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:D4:06:99:87:E3:CD:59:DC:B3:AB:BC:9F:D4:28:F5:61:C7:76
X509v3 Authority Key Identifier:
keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e38322e32342e302f32322d3234203d3e20323634373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.24.0/22
Signature Algorithm: sha256WithRSAEncryption
18:a3:83:3c:6a:4e:25:e3:73:89:5f:65:89:2b:3e:7f:2a:9b:
62:aa:18:b0:0d:d5:c1:c8:77:ae:99:23:c6:db:01:98:6e:a7:
fa:f1:fe:5c:c7:84:a9:d8:11:3d:fc:33:b6:d3:f9:bf:b0:e1:
05:9f:08:2c:d2:6d:f2:ac:61:75:08:a3:aa:c2:3a:95:1a:ba:
f5:df:ed:13:b7:30:3b:74:fd:9a:94:de:bc:6f:47:16:5b:71:
a8:0e:ef:b8:16:b1:03:31:d2:ed:ef:d0:34:6c:b8:6f:32:29:
7e:30:81:3a:95:b8:2b:b0:44:cc:26:63:86:cf:f4:99:f7:08:
cc:74:5a:24:3a:b1:74:76:ca:49:7a:be:cb:14:4c:db:7c:af:
32:82:2b:4f:2a:ad:59:ab:fb:00:73:00:c7:18:e5:ea:b8:fb:
e7:5b:0d:83:ea:82:0f:97:39:b9:a6:8e:32:69:b9:84:bb:78:
18:63:8b:04:e4:d4:8b:83:a5:b4:05:40:fd:8a:a0:0a:36:0e:
f2:10:e8:27:2b:2f:53:5d:37:6f:e7:e8:81:2c:c7:60:23:a1:
6e:7e:dc:5b:8d:2e:1d:27:78:49:1d:21:d1:2b:fa:c5:ab:21:
dc:26:ac:d8:36:99:2b:46:42:05:cc:0d:ba:93:f3:99:5e:6f:
79:81:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:32 2025 by rpki-client