Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136342e302f32332d3234203d3e20323632313636.roa
File: 3136382e3233342e3136342e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier: jhdP3ha8rgMnnXjOT73tGHQtdeuAhltYf0A9tewf0/Q=
Subject key identifier: CA:01:15:E7:CA:D3:36:DC:80:EE:49:70:0C:9D:1C:C5:54:E5:DE:2A
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 79CF95D6469E418ACAEF8184218597506BFF8B0A
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136342e302f32332d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:50 +0000
ROA not before: Tue 04 Feb 2025 17:54:50 +0000
ROA not after: Tue 03 Feb 2026 17:59:50 +0000
asID: 262166
IP address blocks: 168.234.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cf:95:d6:46:9e:41:8a:ca:ef:81:84:21:85:97:50:6b:ff:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:50 2025 GMT
Not After : Feb 3 17:59:50 2026 GMT
Subject: CN=CA0115E7CAD336DC80EE49700C9D1CC554E5DE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:24:7b:72:6a:bc:af:0f:6f:a8:d9:04:c2:
df:5f:08:f7:7f:e8:a4:de:8d:4f:42:83:c8:aa:f8:
25:15:52:c5:f1:b7:52:0d:ca:ee:e4:e3:9c:0a:62:
c9:d3:c8:75:d8:ca:da:86:1b:1d:c8:92:9e:32:22:
8b:f8:df:56:e8:3c:f3:38:5e:53:b0:ef:32:16:a1:
46:ba:6c:74:96:44:c8:32:8f:fe:e8:8e:ed:9f:aa:
04:5c:ff:82:2e:db:cd:ec:42:fa:c3:87:e6:6a:7d:
07:06:d9:aa:91:af:4f:be:bd:49:1a:6b:c7:b3:91:
5b:06:94:93:65:5c:57:db:24:93:25:bf:2f:d5:73:
fa:71:4d:8f:1b:67:e6:a4:de:87:4e:3d:23:03:80:
41:44:48:ed:7d:3d:d9:a1:6a:3e:95:9f:5b:71:f2:
da:36:1e:7f:19:db:42:42:f7:ba:1f:a6:ee:25:18:
69:cf:e7:62:75:44:7b:ff:f7:3b:91:b3:60:2e:15:
89:e4:08:40:9d:0a:cb:ca:77:fb:51:27:56:13:5b:
eb:ce:d7:67:4e:a7:ef:75:a0:e8:eb:d3:e2:ac:a2:
44:96:ac:7d:a3:f6:a3:56:85:a1:6b:db:73:4d:ac:
36:54:5a:6d:2a:78:da:c0:b4:b1:27:6b:be:5c:3b:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:15:E7:CA:D3:36:DC:80:EE:49:70:0C:9D:1C:C5:54:E5:DE:2A
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136342e302f32332d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.164.0/23
Signature Algorithm: sha256WithRSAEncryption
30:58:ed:3a:81:cb:fc:57:76:fd:8c:65:cd:ed:70:f0:ed:b6:
a6:07:44:f4:63:28:a9:9b:06:73:06:ff:dc:46:b2:1e:fc:7f:
fd:7f:6d:34:68:e7:0b:c0:07:62:6d:dd:17:5d:c1:1c:e3:6d:
bd:8f:4c:f7:79:f9:af:eb:6f:9e:bb:41:75:04:87:9d:fe:7c:
e2:4d:14:20:ec:1c:94:a1:0c:fa:19:a6:b1:d9:99:01:d9:37:
42:a4:d7:e5:93:29:51:91:74:99:62:f7:50:f4:d0:00:58:11:
01:95:fa:0d:3d:b2:1d:6f:9e:c0:6a:a9:04:f4:9d:a4:85:23:
23:c4:d8:f8:e8:c2:fd:b0:18:66:82:57:f5:d0:cd:cd:2e:e8:
0a:0b:33:97:93:b9:ad:79:b3:5e:57:bd:25:f4:47:81:18:29:
49:41:6e:77:54:7d:81:b1:d7:60:18:25:0e:79:08:46:d8:29:
4a:15:a6:80:7c:d9:41:37:1d:30:75:b6:a4:3d:72:40:75:60:
bf:9e:78:87:37:c5:7f:b7:d3:4c:67:35:3f:94:72:36:46:c2:
88:bb:55:52:f4:fd:78:e2:86:c5:7f:ea:8f:bb:2d:59:f7:b5:
cf:21:db:58:1b:4a:b3:f3:4c:2b:a3:57:bd:80:5c:8f:3e:6a:
dc:b9:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:09 2025 by rpki-client