Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa
File: 3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa (raw, json)
Hash identifier: AM7KyPJDA9yVPLzckSlDVBpVqWM4/U1/ZtIn1DO3ipw=
Subject key identifier: 66:54:AB:E4:80:40:4B:8A:93:1D:17:C8:5E:9F:43:A6:4C:21:68:38
Certificate issuer: /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial: 383B322824109C497488A3BFAAB4765C77E56BBE
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa
Signing time: Tue 04 Feb 2025 20:06:32 +0000
ROA not before: Tue 04 Feb 2025 20:01:32 +0000
ROA not after: Tue 03 Feb 2026 20:06:32 +0000
asID: 265659
IP address blocks: 170.247.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3b:32:28:24:10:9c:49:74:88:a3:bf:aa:b4:76:5c:77:e5:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
Validity
Not Before: Feb 4 20:01:32 2025 GMT
Not After : Feb 3 20:06:32 2026 GMT
Subject: CN=6654ABE480404B8A931D17C85E9F43A64C216838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:3b:7d:bd:c7:39:e7:c9:28:50:99:e1:4c:
50:81:53:9c:8a:4a:53:c2:0f:d0:e4:36:a7:43:e6:
11:37:28:50:0c:43:a5:15:69:39:bc:c4:8a:e5:e2:
f1:e9:d4:cc:05:fe:f9:b4:63:d0:14:49:f0:32:25:
5c:13:41:4e:23:36:e9:40:71:82:e4:2c:50:8d:e9:
71:51:4e:47:92:88:3b:6e:a3:f4:4d:4d:6e:8f:91:
14:89:7c:79:d3:00:ff:fb:cd:35:c5:d2:a8:d6:0b:
d9:30:91:5d:b2:e4:b1:d8:4c:5f:4a:56:48:f9:ce:
9a:19:6c:45:1a:43:ea:ec:94:84:30:6a:31:a4:eb:
b9:84:57:e9:39:2c:77:80:44:31:c2:93:c2:db:43:
6f:9e:8c:3b:05:f0:91:a0:9b:6c:da:6b:8e:be:08:
e0:49:c0:55:b4:38:47:09:66:a0:91:db:5a:57:5d:
02:0d:3a:5b:6d:a9:e4:e8:97:61:b0:95:37:8a:2a:
b4:5a:c4:6d:49:0e:1f:72:09:60:b3:6d:53:aa:50:
ef:fb:f0:35:cc:ed:24:ab:8a:ba:f2:4f:55:18:7c:
a7:2c:55:be:aa:16:cb:80:af:ba:72:3e:5f:0c:c4:
0a:29:e5:c7:32:98:2e:67:0e:83:1c:ea:ea:35:de:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:AB:E4:80:40:4B:8A:93:1D:17:C8:5E:9F:43:A6:4C:21:68:38
X509v3 Authority Key Identifier:
keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.96.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ba:64:4e:57:54:3b:64:91:b3:c4:8a:58:12:68:a3:66:9e:
79:2f:76:e7:75:a3:d6:8f:cd:3b:b6:f9:27:da:80:56:ea:16:
77:15:af:c3:7b:b9:3f:bc:29:d3:07:bc:20:1b:73:58:95:64:
92:bc:46:1b:52:7d:a2:96:d1:63:d1:1b:52:90:b3:d1:b1:6c:
25:4e:79:df:91:0d:8c:e7:99:25:15:d4:41:01:cc:6e:b5:6b:
19:a1:5a:28:e9:5b:bd:a2:b4:3a:80:8c:46:93:42:c5:09:8b:
42:5d:71:b0:c3:0b:ca:7f:3f:78:a2:c2:d5:14:bb:68:18:23:
df:2f:0d:54:d0:af:ad:5e:9b:c8:db:56:c6:81:26:71:d0:2d:
6c:09:e7:73:d8:2b:ce:a8:4d:43:31:c7:90:81:7f:48:62:06:
54:41:a3:1b:a9:6f:a0:08:55:04:2f:01:21:ef:98:05:32:98:
84:60:a2:96:36:d1:40:1f:73:f2:5f:ec:12:97:06:71:ca:56:
83:f4:88:3c:9e:1d:52:f2:50:f7:a1:18:19:b4:88:ca:b2:50:
65:28:03:d2:76:41:ea:1c:99:87:17:ee:8b:08:1c:2f:e8:97:
9a:ff:99:29:79:a5:b5:03:69:ec:9b:a6:9d:2d:17:aa:e1:c3:
91:c0:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:05 2025 by rpki-client