Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa
File: 3137302e302e38342e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier: 5PbavwRMqL+gGbGULsZlDJJlOgeEUJLF4Ub7gA2mrHU=
Subject key identifier: 20:50:DA:C6:CC:5A:D3:39:B5:47:17:FF:57:32:E4:34:11:3D:7D:F2
Certificate issuer: /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial: 64D405C18F9736D458C18D6895B3275601C7AAF1
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa
Signing time: Tue 04 Feb 2025 18:12:35 +0000
ROA not before: Tue 04 Feb 2025 18:07:35 +0000
ROA not after: Tue 03 Feb 2026 18:12:35 +0000
asID: 264702
IP address blocks: 170.0.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d4:05:c1:8f:97:36:d4:58:c1:8d:68:95:b3:27:56:01:c7:aa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Validity
Not Before: Feb 4 18:07:35 2025 GMT
Not After : Feb 3 18:12:35 2026 GMT
Subject: CN=2050DAC6CC5AD339B54717FF5732E434113D7DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:bb:09:7a:6f:fd:3d:da:2f:5b:ca:09:ee:
c5:0c:1a:51:1c:c5:6c:02:ff:a1:49:f4:6c:97:10:
49:ec:19:f1:15:de:74:96:be:29:67:29:d1:0e:08:
86:f9:b1:c3:2c:5a:31:5b:0a:59:b9:ff:be:3f:74:
97:4c:a7:f7:6c:e5:64:36:5a:d7:fe:54:d9:82:79:
f6:d2:41:24:9d:e9:ae:e4:16:ab:27:d4:ce:d1:1a:
ab:96:3e:b9:a0:05:8e:ed:5f:83:1e:5b:5d:d6:68:
15:e9:7f:9b:01:25:66:f8:92:c0:48:24:9f:51:aa:
a0:5f:f3:9d:f5:15:dc:66:78:0a:f6:94:e3:a6:d7:
26:21:2a:42:cb:54:e5:f6:06:db:ab:c5:65:6e:3b:
07:18:56:10:0e:c3:ce:71:8f:85:79:56:32:58:de:
c0:f6:aa:9b:38:11:4b:0b:f9:7f:3b:9f:80:97:64:
23:f6:bf:38:ee:e5:3f:58:c5:10:30:0b:f6:d3:84:
59:98:32:d0:f9:11:93:08:18:9d:1d:74:db:91:18:
2c:94:c3:61:99:97:21:2a:b7:69:99:89:b6:2b:e1:
2c:ef:95:01:ef:4a:3c:ca:2d:d5:68:d6:81:5d:c2:
3f:41:e6:f2:df:34:5d:55:97:55:8e:75:6a:7e:40:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:DA:C6:CC:5A:D3:39:B5:47:17:FF:57:32:E4:34:11:3D:7D:F2
X509v3 Authority Key Identifier:
keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:68:45:c0:6c:f9:f8:b3:2a:d1:f9:58:66:0d:74:af:01:96:
84:92:a5:f0:8a:fb:83:90:13:59:97:fb:16:d8:09:54:15:13:
0a:43:5d:ab:07:dc:74:9d:62:49:e6:71:5f:aa:8c:75:03:91:
62:4d:67:8c:e2:03:06:d6:47:42:8a:fe:15:db:52:f7:d9:f8:
32:db:21:99:0b:94:65:f7:ac:25:cc:9b:8a:ad:cb:d6:cc:7c:
8a:0d:fd:12:81:a1:eb:9a:bc:26:06:1a:59:b3:11:dc:93:8c:
3c:80:d1:e8:5f:70:b7:8f:79:9f:23:28:2e:eb:9b:c7:b3:4e:
1c:69:bf:26:b6:47:32:1b:0f:e2:89:ee:41:8d:e4:83:4a:e4:
7f:c0:a7:91:63:ee:4d:25:70:5d:2c:b1:02:f1:ae:4a:9c:5c:
c6:2d:bc:b6:b5:a5:67:b3:b9:e3:68:95:67:27:ad:ef:0a:ae:
01:c0:fc:4f:88:c0:e5:c8:9f:97:5c:43:5c:ea:a0:f7:08:35:
44:d2:1a:14:91:54:6e:cf:bf:72:1e:ce:ba:76:e4:7b:f6:af:
98:eb:c6:3c:49:ca:4e:8b:0c:10:56:88:08:de:93:2b:d2:54:
fc:65:5e:b6:a3:8c:ff:e1:c8:45:e0:b0:bf:6d:48:2b:0e:86:
43:d4:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:55 2025 by rpki-client