Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa
File: 3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa (raw, json)
Hash identifier: 9uIEE79mITniw/kX43NvXKEN/aIDP88xyhmsuprzToQ=
Subject key identifier: 03:E0:C8:5E:B8:93:5F:D1:66:DF:64:71:39:52:68:75:79:55:4D:33
Certificate issuer: /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial: 4041D2A75A68663107E5CDA53EB0D27BF85149E8
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa
Signing time: Fri 28 Feb 2025 22:30:00 +0000
ROA not before: Fri 28 Feb 2025 22:25:00 +0000
ROA not after: Fri 27 Feb 2026 22:30:00 +0000
asID: 11830
IP address blocks: 143.202.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:41:d2:a7:5a:68:66:31:07:e5:cd:a5:3e:b0:d2:7b:f8:51:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Validity
Not Before: Feb 28 22:25:00 2025 GMT
Not After : Feb 27 22:30:00 2026 GMT
Subject: CN=03E0C85EB8935FD166DF64713952687579554D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:e9:52:c9:0f:8d:ae:79:6e:57:35:40:e7:
cb:4a:84:d2:d8:d3:73:58:f2:ba:71:70:3a:34:2a:
51:8e:6a:05:a6:e1:54:2e:f0:98:f0:22:f0:ff:b9:
e3:b9:90:14:e2:23:b4:ae:41:5b:1d:3e:40:f3:bc:
7b:bf:38:35:34:e5:cc:e4:89:bb:b0:37:08:f1:fd:
61:2c:17:b6:27:c8:75:2a:72:56:33:e4:5f:f4:03:
5e:98:ac:8b:65:1b:4f:88:e4:af:62:7f:d6:51:ff:
2e:e7:dd:31:11:a9:96:dd:7a:c5:62:fc:00:17:a7:
21:15:bb:32:c6:ab:41:64:7b:bd:2d:df:02:a0:b9:
0b:61:e1:1b:22:45:66:8a:49:82:d3:91:b6:75:a7:
51:fd:da:39:c0:8a:cb:c0:2d:d4:c7:15:9d:70:88:
2b:20:58:e6:87:07:e3:cb:44:21:55:21:65:f9:67:
14:9e:51:36:5f:3a:80:8d:eb:41:2a:1b:bd:4e:2a:
8f:41:72:83:09:5b:1e:02:04:2a:cc:9f:a0:87:98:
c8:e0:4d:9c:e5:2b:0f:1c:14:9f:f1:09:b7:a0:27:
bf:a8:ce:93:99:c3:aa:24:a8:e1:64:4f:b9:71:29:
5e:50:8a:18:53:d5:61:90:42:03:38:2f:59:78:0f:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:C8:5E:B8:93:5F:D1:66:DF:64:71:39:52:68:75:79:55:4D:33
X509v3 Authority Key Identifier:
keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.252.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a1:e5:37:de:62:c4:7a:be:01:55:c4:44:23:cb:a4:2f:61:
16:7e:46:a2:20:8b:9e:55:19:8c:49:32:7d:93:6c:66:53:ae:
f8:9b:08:5c:9a:2e:20:d2:33:84:1b:e3:66:8b:87:cd:4c:8d:
bb:2d:06:e1:e0:71:2c:9a:84:1e:46:9f:69:e0:0f:63:8f:81:
63:dc:93:a4:34:dd:eb:4f:5b:02:9f:f9:8e:b5:60:ac:97:f9:
fa:a2:8c:82:8f:a7:8a:53:77:b2:71:5c:84:26:50:0f:07:1b:
85:4a:51:fe:7b:05:3f:0f:d5:b8:0a:f0:a1:88:6f:dd:d5:ea:
4b:8e:50:0e:c9:9c:0d:f3:95:b5:0d:de:69:8d:a3:7f:96:4f:
9e:0e:52:a2:b3:a9:0e:74:d4:3a:ff:ad:73:33:de:fb:2a:c8:
1c:7a:c9:0f:52:62:3b:38:0d:a6:09:7d:81:f9:8e:37:43:80:
a0:bb:90:b6:a1:45:68:f3:3c:aa:e7:26:b5:62:88:70:fa:b7:
55:f4:99:a8:9b:ce:9e:d3:71:76:c8:57:85:47:b3:7b:00:6e:
43:10:91:88:5b:9d:37:b9:ee:d7:7d:82:79:af:15:98:11:9e:
b4:4c:19:c9:75:60:c9:b9:d3:2b:6f:4c:87:30:11:95:d1:50:
fc:c5:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:09 2025 by rpki-client