Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3134332e3230322e3139362e302f32322d3234203d3e203237393332.roa
File: 3134332e3230322e3139362e302f32322d3234203d3e203237393332.roa (raw, json)
Hash identifier: WvpG/wTrEM7rLIuKtknxQircQ74FcuUh/x76cdqbrWY=
Subject key identifier: 48:13:38:E2:E8:7F:05:E6:15:ED:FA:84:79:B4:1B:23:01:01:AC:D0
Certificate issuer: /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial: 72E0FD6A3D4A6CD67064F6AF436C5F0834A5948D
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3134332e3230322e3139362e302f32322d3234203d3e203237393332.roa
Signing time: Tue 04 Feb 2025 18:09:06 +0000
ROA not before: Tue 04 Feb 2025 18:04:06 +0000
ROA not after: Tue 03 Feb 2026 18:09:06 +0000
asID: 27932
IP address blocks: 143.202.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e0:fd:6a:3d:4a:6c:d6:70:64:f6:af:43:6c:5f:08:34:a5:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Validity
Not Before: Feb 4 18:04:06 2025 GMT
Not After : Feb 3 18:09:06 2026 GMT
Subject: CN=481338E2E87F05E615EDFA8479B41B230101ACD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:50:15:ee:8f:4e:0c:4e:c4:f9:fa:dd:61:
1f:59:0e:3a:6b:45:86:e0:0b:62:15:ee:ed:91:cb:
3b:f0:12:d9:ce:1f:8b:d7:12:94:c5:15:d2:d9:d2:
8e:97:4b:a6:03:7f:af:c0:a3:ce:09:d4:a4:5a:6e:
ef:7b:c5:17:04:58:37:bf:ab:47:a5:18:cd:a1:c5:
d5:b6:a8:37:47:5b:a1:eb:59:4f:82:4f:b4:59:a3:
3b:e1:c4:87:3a:f1:3f:58:07:ed:67:f2:e3:cc:13:
9c:1d:f9:7d:96:51:47:59:d8:f1:30:13:cb:eb:b9:
7c:69:71:b2:ff:ac:22:d2:19:81:95:80:ec:21:ff:
ea:51:ee:a0:6d:1a:70:0f:3b:19:98:b9:a5:b3:ab:
19:21:13:28:c9:cf:0f:ab:2f:5a:4f:f6:9e:d8:83:
8d:c7:95:7e:6e:27:e2:52:75:85:98:fe:30:ab:95:
0b:26:d0:7f:b8:85:a4:f9:f9:fb:15:9c:3e:49:f0:
40:e3:68:ec:8a:ff:d0:fc:08:ac:60:4a:1f:ad:1b:
33:92:0a:52:81:02:dd:33:57:8b:44:8d:ba:92:73:
7a:fe:8a:b4:62:12:f9:b6:9e:17:9e:40:06:31:4c:
5e:55:17:76:ef:4a:fd:5c:e6:b2:bc:6b:20:b9:31:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:38:E2:E8:7F:05:E6:15:ED:FA:84:79:B4:1B:23:01:01:AC:D0
X509v3 Authority Key Identifier:
keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3134332e3230322e3139362e302f32322d3234203d3e203237393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.196.0/22
Signature Algorithm: sha256WithRSAEncryption
02:dc:2c:81:72:6c:b0:08:68:ac:16:cb:b8:81:8a:b0:b9:3c:
37:9a:05:98:c2:2e:1b:b7:17:b7:69:e1:d2:b2:da:5e:d5:e0:
a3:bb:7d:27:e6:03:2f:a1:30:60:7e:3d:66:5c:06:10:eb:0c:
7e:bf:9a:0d:a1:3f:94:a1:f2:b3:64:54:0f:6f:fc:0b:63:78:
f8:dd:cb:ed:56:6c:e0:53:26:80:18:b8:5c:01:fa:f9:dd:86:
3e:e6:8e:46:a2:3d:e5:fe:9f:59:f4:ff:e9:05:22:2c:b0:db:
44:5a:58:4c:43:d0:de:31:a7:26:93:2c:b6:f5:e3:88:d7:df:
3c:c4:23:9b:9c:1a:c0:e9:8b:b1:f0:03:1e:2a:0e:ac:15:61:
47:29:b0:b5:66:b0:6c:4d:ba:6b:a9:d8:67:31:5e:30:88:24:
52:9d:28:2e:93:f0:fe:f0:4d:39:7d:dc:9d:fc:26:58:11:ff:
5d:96:e0:13:d5:3f:3f:08:0c:38:e7:86:49:23:fe:b2:de:9e:
7e:78:f7:33:11:b8:20:4f:33:7f:7e:ed:b8:37:a0:4c:e2:f3:
50:d8:e9:7a:ea:c1:37:41:57:d0:db:db:42:3a:d2:3e:fa:79:
21:91:dd:de:20:e8:1e:41:e3:3f:ef:78:56:cf:1a:6c:0a:16:
e3:5b:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:35 2025 by rpki-client