Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa
File: 3137372e3132342e38342e302f32322d3232203d3e203238343332.roa (raw, json)
Hash identifier: FlVYzkL34mQ7qjfyCUio3x9mmpEUK/9lvAFevIK49uM=
Subject key identifier: AA:6B:72:95:F7:E0:A8:1E:14:2D:71:FB:B4:1E:F0:56:F4:45:5E:EF
Certificate issuer: /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial: 1E92E40D4248C30C73326171AB9DCF1EB5EF5971
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa
Signing time: Tue 04 Feb 2025 18:55:45 +0000
ROA not before: Tue 04 Feb 2025 18:50:45 +0000
ROA not after: Tue 03 Feb 2026 18:55:45 +0000
asID: 28432
IP address blocks: 177.124.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:92:e4:0d:42:48:c3:0c:73:32:61:71:ab:9d:cf:1e:b5:ef:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Validity
Not Before: Feb 4 18:50:45 2025 GMT
Not After : Feb 3 18:55:45 2026 GMT
Subject: CN=AA6B7295F7E0A81E142D71FBB41EF056F4455EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:27:d9:61:be:de:7a:92:ae:a6:8c:47:2a:
53:30:b1:1a:2b:00:8c:56:83:85:e5:0a:79:a2:b7:
4d:4d:39:22:8d:a7:01:a8:cd:c0:78:6c:ae:28:dd:
3c:e2:7c:15:f0:e8:e5:e1:89:be:d9:60:fc:17:df:
be:c6:68:e1:35:f8:3f:61:d5:36:6e:a3:6d:cf:8a:
10:5d:a7:3d:0c:0d:89:db:b8:5a:f7:67:9c:9c:39:
78:6a:c2:e3:4d:c6:ff:dc:dd:c6:e6:29:25:fc:17:
ba:6f:48:ec:a8:b4:cd:3e:1b:64:e9:ba:d6:9c:a1:
71:c7:e2:ef:13:a1:70:89:85:6e:e3:12:04:99:f5:
a4:4d:3d:97:77:99:41:4a:7c:86:0c:ec:83:5a:d8:
31:ad:9e:d4:c7:d2:ae:85:63:99:9f:2d:55:95:ac:
a5:5c:de:e3:f8:05:20:2b:ac:0f:05:ae:a9:06:6b:
d2:d4:13:85:d2:1e:3b:36:ef:00:58:e2:70:09:af:
70:2b:12:ea:40:94:22:8f:e2:c2:52:56:0a:b8:0a:
d2:af:b0:2d:77:93:1b:e4:25:e8:c6:f1:77:5f:cc:
21:ae:70:3a:e6:38:41:73:61:6f:56:b7:f6:34:85:
48:81:dc:3e:0e:64:99:a0:c7:5e:50:9e:a0:36:4d:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:72:95:F7:E0:A8:1E:14:2D:71:FB:B4:1E:F0:56:F4:45:5E:EF
X509v3 Authority Key Identifier:
keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:7e:90:9a:49:cb:50:49:76:bf:b5:5e:e5:8d:64:99:04:75:
c0:11:f0:23:a1:c5:5a:66:7f:7c:fb:5d:0e:fc:19:41:f6:7b:
7d:35:ff:8a:fb:fc:a6:90:17:ef:de:09:c9:ad:a4:2e:ef:79:
7b:8d:c3:3d:eb:d7:7b:c9:7b:54:d5:ba:00:75:49:25:01:95:
f4:09:9a:8d:de:ef:ab:67:80:2e:34:81:ac:82:1d:f3:a7:b0:
c7:bb:e9:3e:50:d5:43:ef:a2:69:ca:d2:fa:5c:28:f4:2d:c1:
61:65:7e:f5:1f:41:11:e6:5b:55:bd:da:58:cd:4f:5a:f7:62:
41:48:6c:8f:c1:e5:52:b0:99:23:f1:c3:4b:42:8b:58:fc:a2:
d3:ec:d0:7c:e6:14:8e:7f:04:af:cd:79:53:5d:07:63:83:95:
ea:e4:b5:95:d4:1b:cc:3f:03:4f:c6:61:82:06:3f:d3:d2:81:
24:7e:8e:0f:78:36:e7:04:6b:56:44:45:83:aa:bd:e2:da:2a:
d1:d6:60:fc:77:0d:15:14:9d:5f:81:35:93:a0:62:dc:bc:77:
79:ac:08:37:42:71:59:8b:3e:90:68:1d:ab:dc:f3:ec:68:e0:
06:cf:fb:ec:26:bd:7c:a4:5a:a5:40:6d:6a:69:d6:0a:92:56:
70:66:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:41 2025 by rpki-client