Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/32342e3135322e35322e302f32322d3234203d3e20323639393634.roa
File: 32342e3135322e35322e302f32322d3234203d3e20323639393634.roa (raw, json)
Hash identifier: ihuIJ35Fos7e7zDLq1cEy1KMnMqKfaeKXdYE3nROfc4=
Subject key identifier: 49:23:98:A3:58:9A:46:29:A3:21:59:B2:21:EB:16:44:86:C7:0A:E6
Certificate issuer: /CN=FBACE9633492B2B0C61ABC360A228142C2F3AE72
Certificate serial: 0E51139B4581F4E892D1B268093DBF24DF93B205
Authority key identifier: FB:AC:E9:63:34:92:B2:B0:C6:1A:BC:36:0A:22:81:42:C2:F3:AE:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/32342e3135322e35322e302f32322d3234203d3e20323639393634.roa
Signing time: Tue 04 Feb 2025 18:36:58 +0000
ROA not before: Tue 04 Feb 2025 18:31:58 +0000
ROA not after: Tue 03 Feb 2026 18:36:58 +0000
asID: 269964
IP address blocks: 24.152.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:51:13:9b:45:81:f4:e8:92:d1:b2:68:09:3d:bf:24:df:93:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBACE9633492B2B0C61ABC360A228142C2F3AE72
Validity
Not Before: Feb 4 18:31:58 2025 GMT
Not After : Feb 3 18:36:58 2026 GMT
Subject: CN=492398A3589A4629A32159B221EB164486C70AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:f6:5a:b3:b1:6e:54:b2:f6:c4:29:64:cb:
6e:1c:c4:07:b3:d1:ac:2c:bf:b8:02:1a:46:36:e7:
4f:f7:10:f1:12:62:e8:af:90:bf:5b:ec:94:5f:e4:
f6:f3:e8:b8:3d:6d:eb:77:1b:04:e3:8d:31:c1:85:
58:7f:ed:61:9d:05:c7:3e:44:26:31:bc:17:29:85:
c9:9f:02:37:0a:b3:bc:d2:23:5e:40:2d:24:41:10:
8b:4d:57:03:a9:d0:14:b8:b0:03:f9:d3:8b:c2:ec:
79:89:4f:e3:cc:02:6d:d5:ce:a3:db:60:3a:ad:de:
fc:98:22:e8:57:d5:cf:bf:86:f9:96:09:d7:b0:cd:
96:ff:e9:1f:da:39:83:91:5c:7d:9c:23:a0:48:2b:
31:09:99:1f:01:01:bc:14:4e:ea:d5:93:e8:ce:64:
3f:2e:00:e5:f8:76:91:f0:87:a2:d4:1a:21:ec:f2:
9e:7d:63:5c:b2:93:b9:87:4e:67:a3:b6:0b:03:87:
ee:7c:61:8a:02:73:12:bc:09:8d:d2:79:c8:e8:34:
77:b7:4b:ed:a4:ef:7b:43:3f:d7:03:f3:0a:c3:93:
46:53:69:3d:30:be:a2:1e:ac:9e:fd:07:40:2b:a0:
b7:01:5d:ea:bb:7f:62:4b:0e:47:58:15:4e:2b:5c:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:98:A3:58:9A:46:29:A3:21:59:B2:21:EB:16:44:86:C7:0A:E6
X509v3 Authority Key Identifier:
keyid:FB:AC:E9:63:34:92:B2:B0:C6:1A:BC:36:0A:22:81:42:C2:F3:AE:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/32342e3135322e35322e302f32322d3234203d3e20323639393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.52.0/22
Signature Algorithm: sha256WithRSAEncryption
46:d6:ff:d1:b6:60:2f:a9:93:61:d1:b5:ab:89:84:f4:8e:0f:
4c:cc:24:4a:0d:0e:17:29:c0:14:62:eb:da:9f:78:b6:b7:51:
c2:b0:01:92:58:2f:b3:9d:ab:c6:fa:7b:84:74:3e:e9:c4:a4:
ee:39:4e:1d:14:f2:dc:54:ff:d7:99:78:38:2f:65:28:f3:b0:
c6:45:89:75:88:1d:82:f2:5c:a0:ac:ca:c8:e3:9b:96:92:6e:
20:31:cf:a9:53:d2:f0:c2:65:c2:fc:ea:11:20:77:82:ba:bd:
fc:61:c9:f3:c3:46:eb:bd:8f:4c:46:3c:b4:5d:36:5e:df:7b:
7d:e3:e3:a1:62:2a:64:ce:99:e1:38:f1:fa:36:68:44:b0:c2:
a1:19:c0:dc:35:47:13:ab:f1:4a:0c:84:5c:c0:cf:5d:e7:c3:
1f:f9:bb:af:ab:48:bd:74:87:1c:4b:92:8f:8b:32:05:e7:c1:
7b:0b:dd:f3:1a:f1:83:a2:b4:87:e3:52:88:e2:2e:f5:78:e7:
e9:d6:12:f6:e3:6d:91:c2:d3:8d:b6:46:d6:b5:e9:eb:a7:a4:
b0:dd:0f:b1:87:11:49:32:a1:d6:c7:a8:39:06:ef:88:8a:d3:
ac:d7:f9:3f:32:d4:6e:fd:a7:97:21:de:b6:3f:bc:b5:68:20:
46:87:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:52 2025 by rpki-client