Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa
File: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (raw, json)
Hash identifier: I1spZtmjli5MIwwNOJwdw/M5IEaUcgYj0x1Wd2NiQeY=
Subject key identifier: D7:7E:BD:4D:9A:4C:BF:97:B9:45:60:24:A2:51:29:56:E6:8E:DC:14
Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial: 021B73FC4D5F86330463A079A3C70EB255E17A63
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa
Signing time: Tue 04 Feb 2025 18:47:38 +0000
ROA not before: Tue 04 Feb 2025 18:42:38 +0000
ROA not after: Tue 03 Feb 2026 18:47:38 +0000
asID: 263157
IP address blocks: 170.0.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1b:73:fc:4d:5f:86:33:04:63:a0:79:a3:c7:0e:b2:55:e1:7a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Validity
Not Before: Feb 4 18:42:38 2025 GMT
Not After : Feb 3 18:47:38 2026 GMT
Subject: CN=D77EBD4D9A4CBF97B9456024A2512956E68EDC14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:d6:d9:ce:b1:6a:91:2a:e7:17:5b:99:60:
8b:25:fd:40:6d:e0:bd:a8:e3:90:c4:94:2c:2b:77:
c5:0b:08:85:04:db:40:6b:04:19:ab:24:18:60:73:
65:5c:1d:11:f2:7a:b0:1b:b6:3b:45:a7:64:06:47:
27:0b:74:ae:4f:71:3f:cd:c3:51:12:51:25:aa:f2:
b3:e9:56:6d:18:03:39:fe:f0:b8:d5:0a:e4:bb:0b:
54:8d:ca:99:9e:06:e7:7f:c8:ed:e3:33:1e:f0:ff:
9a:9f:e9:c6:ba:3c:7c:e4:d5:20:88:30:6c:e6:9b:
d9:cf:50:68:36:e7:8b:c2:ed:50:78:68:94:2d:c0:
c5:aa:36:5a:40:58:21:97:32:83:b9:6d:a1:b1:38:
b0:bc:3e:ba:9d:1f:5d:be:f6:14:b0:82:f9:84:ba:
f0:99:d4:5d:09:82:a1:34:24:02:52:ee:ee:61:76:
06:d5:a5:cc:3e:6a:43:9e:c0:18:c8:3e:e2:40:b7:
e7:f3:57:15:33:68:0e:1d:b0:3b:fa:1c:f4:6e:b1:
49:ac:18:b3:63:2d:0f:33:6f:ca:7a:d5:15:3b:44:
b1:50:3e:a0:24:72:65:a3:61:c3:ea:1e:7a:a9:95:
c6:72:d4:d1:4b:10:00:01:f1:11:0b:b1:b9:97:af:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:BD:4D:9A:4C:BF:97:B9:45:60:24:A2:51:29:56:E6:8E:DC:14
X509v3 Authority Key Identifier:
keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:19:7a:23:c2:e8:b6:2c:30:b6:58:d6:a6:8c:10:5f:26:76:
2d:15:82:ae:e8:89:f9:da:38:67:8f:5a:5b:54:d5:e2:00:db:
b5:1b:50:93:ea:60:0e:d6:17:6b:91:d1:cb:0d:41:43:3d:c7:
dc:b8:dc:8a:4e:3b:cb:c8:49:af:16:21:6b:c6:db:77:8c:1a:
00:60:a1:50:bd:99:c2:1f:4f:f6:c7:fd:39:94:59:a3:35:73:
d7:45:f2:fa:22:25:4d:c6:b1:8a:05:c6:aa:63:10:cf:b5:87:
3a:1c:df:0d:46:28:dd:21:e7:73:7e:dd:95:79:5e:79:65:13:
78:79:6c:e7:7b:b5:3a:0f:e6:e7:be:3b:26:a8:fc:e7:90:f9:
21:9c:34:74:4f:ba:8d:33:15:18:2d:53:99:eb:d9:09:33:65:
d6:6d:eb:92:80:37:3f:86:67:8b:ee:17:44:73:1c:93:8f:2e:
bf:66:e1:39:09:61:f0:72:e3:e9:ed:5c:27:1a:81:ff:d9:ce:
eb:bd:43:10:67:b6:10:4e:ca:af:b8:3c:6a:c8:38:e3:cd:b0:
47:d4:46:44:34:ce:52:59:c4:3a:8f:9b:74:4d:36:fe:5f:d1:
b1:f7:f1:f2:fb:1f:bd:cc:2d:e2:16:eb:15:07:c9:90:cd:04:
42:42:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:34 2025 by rpki-client