Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa
File: 3138312e3233332e34382e302f32322d3234203d3e203233303331.roa (raw, json)
Hash identifier: biB5DVYzU2RsYDGkNjShllVZj2toguMCEY9JGrqwOmA=
Subject key identifier: 29:EE:61:BE:49:C3:CA:63:61:60:13:3D:7C:95:9F:50:00:82:36:B4
Certificate issuer: /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial: 3A2ED048028F82076D81DBE0F967A064D28DA407
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa
Signing time: Tue 04 Feb 2025 18:02:21 +0000
ROA not before: Tue 04 Feb 2025 17:57:21 +0000
ROA not after: Tue 03 Feb 2026 18:02:21 +0000
asID: 23031
IP address blocks: 181.233.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2e:d0:48:02:8f:82:07:6d:81:db:e0:f9:67:a0:64:d2:8d:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
Validity
Not Before: Feb 4 17:57:21 2025 GMT
Not After : Feb 3 18:02:21 2026 GMT
Subject: CN=29EE61BE49C3CA636160133D7C959F50008236B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:44:89:24:7c:24:dd:0a:4d:fe:5a:f7:42:66:
75:e6:25:8b:a1:fc:19:ac:a4:b6:23:71:54:cc:41:
c3:3d:89:3d:0b:f4:bd:04:97:48:d3:a6:87:b4:5e:
d3:f9:73:e3:c1:6d:f7:c0:ec:34:c7:79:14:ec:8d:
d7:8d:26:51:ac:c1:84:73:d3:09:a9:f7:24:dc:c8:
96:64:b4:2c:cc:da:c6:d6:c4:e0:f8:05:a4:24:ac:
45:ec:01:46:40:a1:14:c7:ae:2d:5c:f8:a0:d4:98:
d4:50:56:6c:c6:18:05:4d:c8:8a:1e:5b:5e:2d:86:
ab:b2:0f:a6:b5:a6:31:f0:2b:ae:a7:17:eb:ea:d6:
1f:ca:3d:98:e8:44:3d:ff:91:f1:3b:2d:c3:66:58:
90:e3:18:5f:af:9f:de:05:2e:3e:ae:b2:b5:01:f1:
9b:72:52:69:f1:90:7c:e5:f2:c6:f5:2c:06:bd:2d:
b8:7c:80:f0:5f:c1:68:2c:7e:c3:67:4a:63:6f:dc:
91:a7:08:fb:c8:13:78:1b:be:6f:25:da:c9:c2:c7:
83:22:5e:cd:81:c8:02:76:5f:71:86:a5:8d:9a:df:
f8:5a:9a:b4:0d:c5:06:49:cf:4b:39:f5:68:7d:3c:
60:73:6f:96:66:5f:a0:2a:a5:9c:f8:56:31:4b:a4:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:61:BE:49:C3:CA:63:61:60:13:3D:7C:95:9F:50:00:82:36:B4
X509v3 Authority Key Identifier:
keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1d:a7:ca:7c:fe:ed:e9:70:4f:04:50:cf:28:64:66:eb:1b:
cc:4e:57:04:0e:6a:21:ef:6c:be:26:8c:35:7a:b7:34:19:e7:
1f:43:e7:ae:ec:24:19:bd:55:4b:4a:55:9c:a8:6d:aa:d6:b2:
49:42:e2:2d:40:37:66:18:36:a6:6c:3a:e0:2b:75:b0:49:f8:
28:9d:b4:96:e1:41:b1:3d:dd:58:b7:5b:29:1d:74:13:79:ab:
b1:25:0a:c7:5e:db:ad:7d:bb:02:6e:be:7d:ec:e7:1d:1f:4f:
94:f3:e9:3f:50:2f:66:78:c9:c0:ad:8c:d9:7f:d1:26:ad:51:
db:62:1c:c1:16:09:12:d8:4c:8b:36:53:ba:7a:c3:ad:c7:bc:
a0:ba:53:f1:69:bc:5d:55:19:03:6f:95:ba:d7:8d:e5:ea:79:
e7:39:df:f3:e2:7b:5a:e0:80:c7:eb:a1:27:2b:c6:b1:9b:b9:
74:78:fa:ad:d1:f0:fc:2d:e8:15:05:84:ae:ee:4e:4d:b8:4b:
fa:c6:fc:34:ab:4d:33:fb:6d:a7:37:bf:e5:c7:de:1d:31:85:
7f:75:5e:e1:d2:fe:e0:c5:0d:b7:38:9b:70:cb:de:bc:0e:53:
2d:c6:05:1c:a4:02:d8:c9:c9:3f:b4:56:65:3d:08:75:8d:e2:
1a:84:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:52:10 2025 by rpki-client