Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa
File: 3137392e35302e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier: 80Wj0fxWpaqZ8APa3ARAKriPEFkqwYvLrziRJpdRQxw=
Subject key identifier: 85:A3:BC:7A:36:04:0A:DC:04:E9:85:C7:AF:5A:B7:89:61:C3:EE:58
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 6AF42692DF04FBC1322ACAA8AD9A76D42E7BEACE
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa
Signing time: Tue 04 Feb 2025 18:01:51 +0000
ROA not before: Tue 04 Feb 2025 17:56:51 +0000
ROA not after: Tue 03 Feb 2026 18:01:51 +0000
asID: 52228
IP address blocks: 179.50.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f4:26:92:df:04:fb:c1:32:2a:ca:a8:ad:9a:76:d4:2e:7b:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Feb 4 17:56:51 2025 GMT
Not After : Feb 3 18:01:51 2026 GMT
Subject: CN=85A3BC7A36040ADC04E985C7AF5AB78961C3EE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:72:34:51:af:9d:fa:75:da:e8:cd:8e:44:
b1:a6:6c:20:70:c7:09:2d:43:0e:47:ad:33:75:c1:
66:32:1e:db:66:55:ed:e1:17:ac:24:01:9c:8b:e3:
b7:fa:96:10:8a:06:f3:a0:a6:b0:92:8d:5b:d5:65:
0d:c9:3c:bb:41:35:81:61:bf:cf:a3:e9:d1:75:a2:
3c:9f:fb:1a:a5:e2:86:23:1f:b4:b4:c4:bc:b2:5a:
78:00:72:8d:1a:bb:56:f3:5f:73:d0:ad:06:85:8e:
71:25:09:ae:30:ab:b5:d9:0a:ac:08:40:2d:16:7d:
99:da:56:ea:af:a4:fb:bd:87:f0:b5:f8:f4:56:1a:
bf:9a:a1:6b:23:44:ee:75:60:03:45:69:c1:42:44:
45:9a:c9:94:10:d0:97:fa:e6:10:1c:01:5a:dd:9e:
09:21:a3:7d:65:eb:43:ab:e8:25:30:4f:e4:e2:b6:
29:32:09:d4:1a:a3:9b:5c:a8:60:5b:f5:06:95:bd:
90:ca:a4:53:08:f5:49:17:0e:0f:cf:57:22:ca:de:
e9:50:99:8d:af:fe:22:81:53:e3:80:87:34:a6:74:
4a:8c:80:c2:b3:c3:11:40:b7:a9:14:b6:5c:80:be:
2c:01:5d:ed:33:f0:66:d8:c9:65:b0:a0:54:2b:ea:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:BC:7A:36:04:0A:DC:04:E9:85:C7:AF:5A:B7:89:61:C3:EE:58
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.50.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:47:7a:74:2a:6d:03:3e:78:97:71:f0:c4:d7:e1:72:20:e5:
77:c8:5d:93:6a:82:a7:df:9d:99:c6:e1:cc:00:8d:9a:bb:54:
bf:94:20:c7:85:55:a4:79:cb:01:28:e8:fe:f0:5b:7f:6d:b5:
58:2e:3a:97:8a:f1:f8:8e:13:df:03:03:db:2d:a4:04:ae:6e:
7e:99:48:ad:d1:5a:b6:71:fb:97:53:b5:bf:f8:22:c1:a5:50:
00:3f:fe:6e:91:a3:b8:00:c1:4a:e7:53:79:9b:cb:7a:64:9e:
05:57:cd:70:b2:50:86:6e:53:38:57:c8:85:40:ad:df:43:62:
ff:9a:48:31:5b:b1:ee:14:15:5f:47:39:0e:c3:b7:07:d7:b1:
dd:98:b6:0c:7b:9a:1d:be:89:96:42:20:fc:04:b6:a5:d2:0f:
bf:b4:ab:46:76:09:da:95:09:d4:70:a5:eb:b3:e3:b6:b4:3e:
53:03:e6:1b:17:8f:c0:4b:fa:64:04:85:9f:1d:a8:a7:b3:66:
f6:74:7f:12:28:31:f4:46:7b:dd:1b:61:0c:37:be:26:17:03:
a7:91:c5:39:a8:4b:2e:5e:54:2d:73:6c:01:bc:3a:03:a1:08:
d3:29:0f:39:82:e7:f4:02:14:8d:c4:73:6c:f9:bb:d0:7f:4b:
83:a5:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:38 2025 by rpki-client