Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
File: 3136382e302e3232322e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier: sINzJ1GdZBHtewgRN+P98XS3OSOTHnPflYG2nW9O/Gs=
Subject key identifier: BC:AA:C8:92:2D:B0:A5:46:70:AA:55:F0:E4:F7:42:85:F2:76:D0:53
Certificate issuer: /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial: 3748CE72B959900480086831D2CD47B79046E948
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
Signing time: Tue 04 Feb 2025 18:27:37 +0000
ROA not before: Tue 04 Feb 2025 18:22:37 +0000
ROA not after: Tue 03 Feb 2026 18:27:37 +0000
asID: 265504
IP address blocks: 168.0.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:48:ce:72:b9:59:90:04:80:08:68:31:d2:cd:47:b7:90:46:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Validity
Not Before: Feb 4 18:22:37 2025 GMT
Not After : Feb 3 18:27:37 2026 GMT
Subject: CN=BCAAC8922DB0A54670AA55F0E4F74285F276D053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:ac:ef:17:d2:d7:86:a6:aa:d2:c2:1c:86:
26:c8:c0:de:73:24:92:3b:5f:3c:6e:65:07:13:75:
47:0c:6e:ab:d3:40:be:ba:99:f9:04:1c:b9:bf:93:
05:0e:ac:f1:f0:c3:7e:fa:d9:1e:cf:07:c8:d5:77:
2f:2c:55:28:71:61:50:e1:16:7d:3a:80:f8:6d:c4:
55:e7:ad:cf:8d:ac:5e:90:69:e7:8e:d5:83:65:85:
19:28:3b:ba:2f:d2:e1:45:33:1d:cc:23:03:30:08:
35:e9:a8:32:1c:00:e6:6b:41:89:f0:fb:33:bc:34:
de:ea:2c:b0:d7:28:f6:60:e2:8b:37:4b:bc:83:72:
ab:27:cd:4d:d6:dc:c2:45:c4:4f:31:e5:26:f6:c3:
3e:28:a2:f0:aa:5c:66:90:c6:64:2c:ce:ba:1f:18:
31:b3:86:12:3c:be:13:2c:ff:f7:5c:4e:49:40:de:
dd:58:3e:c8:28:88:1e:df:85:34:08:c8:12:c8:e4:
22:81:99:56:ba:9a:64:28:09:19:31:80:ce:f2:74:
3d:a0:9e:28:52:d6:88:13:45:1a:64:55:e3:70:17:
0a:5f:89:f6:94:48:7b:9c:fd:cc:7d:ff:95:bf:15:
92:1c:50:09:61:c1:09:7b:b6:8c:4e:4b:9d:7f:f3:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:C8:92:2D:B0:A5:46:70:AA:55:F0:E4:F7:42:85:F2:76:D0:53
X509v3 Authority Key Identifier:
keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.222.0/24
Signature Algorithm: sha256WithRSAEncryption
67:09:37:e1:8e:f1:13:11:83:4f:b9:39:8c:ec:15:a2:9f:8d:
68:7d:aa:88:fc:6b:ef:79:d6:a1:b2:1a:64:ff:80:e1:31:b0:
a8:00:e4:18:fd:0d:92:3e:82:7b:16:c9:5f:83:dd:f7:f9:52:
c7:47:b6:4b:ab:d2:5a:0b:62:5d:cd:b2:e3:51:70:60:8a:d8:
af:e7:79:06:7b:98:fb:da:dc:eb:2a:d2:c8:6e:5d:77:c4:27:
04:4c:99:49:3e:20:36:91:89:bf:64:68:6a:a8:70:24:d8:13:
75:db:89:48:7a:3d:75:7c:bb:06:e4:fa:e1:f3:03:7b:fa:58:
8f:85:f8:64:54:2d:5f:2c:f7:1c:61:e1:11:96:05:66:70:cf:
f0:4d:49:51:cc:3f:56:7e:b5:c7:99:8e:1b:1d:f3:d0:63:c6:
97:73:41:f0:6c:d9:f1:0b:86:00:a4:fd:73:3d:4a:f3:22:ec:
96:a2:6d:ed:d5:04:91:13:06:ec:6d:e7:22:69:ce:1a:ce:47:
81:d2:8f:12:9c:8e:8c:4e:4c:3b:8a:52:f8:ee:37:ca:76:fe:
e1:fb:e3:6b:43:d2:6a:72:30:82:aa:4c:22:05:45:84:99:c8:
c9:1a:4a:0b:f7:d1:23:b2:09:32:c0:2a:f0:2a:25:f2:9a:f8:
c8:a8:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client