Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203139383633.roa
File: 3136382e3132312e38342e302f32322d3234203d3e203139383633.roa (raw, json)
Hash identifier: fRAklrL1ckxcTa6UDh0U/1UvBKHPKwsaIGy5SKB+ZCI=
Subject key identifier: BD:22:AB:94:CD:06:F0:E7:ED:A5:97:C0:40:89:7D:4F:DE:22:77:B1
Certificate issuer: /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial: 7E4E420B6FD73CB7D53ECB026DC620686DF5E6FE
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203139383633.roa
Signing time: Tue 04 Feb 2025 18:06:58 +0000
ROA not before: Tue 04 Feb 2025 18:01:58 +0000
ROA not after: Tue 03 Feb 2026 18:06:58 +0000
asID: 19863
IP address blocks: 168.121.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4e:42:0b:6f:d7:3c:b7:d5:3e:cb:02:6d:c6:20:68:6d:f5:e6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
Validity
Not Before: Feb 4 18:01:58 2025 GMT
Not After : Feb 3 18:06:58 2026 GMT
Subject: CN=BD22AB94CD06F0E7EDA597C040897D4FDE2277B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:9c:e4:e8:18:02:17:5e:fb:32:01:5c:c2:
96:9c:56:bf:9f:ed:ac:8b:17:ac:e8:2c:ac:91:a2:
3e:12:30:3a:bc:56:53:88:e0:63:33:9a:64:b8:54:
05:75:c8:f7:ff:ef:dc:f3:83:02:ad:8e:b8:c3:c4:
b7:2f:82:a7:45:a1:44:66:48:dd:54:67:f6:11:7e:
d2:a6:21:2a:e7:21:b2:3a:45:66:a1:b1:53:3a:eb:
1e:f1:22:83:1f:42:e3:d7:5c:0a:e6:d6:45:4a:bd:
81:e3:60:24:26:b3:2a:fa:23:da:33:a0:b8:18:12:
32:2e:77:23:11:25:62:83:42:5c:c2:cf:ae:90:d6:
b7:d9:74:be:f2:7c:ca:68:50:43:a5:c5:bb:e7:a7:
05:0c:3f:d2:9f:68:b4:59:a2:38:95:80:29:d2:83:
bf:5b:43:dc:b7:11:d0:9c:ba:fb:8a:0e:2d:4f:7d:
d3:6c:50:c6:f9:d0:05:89:8f:d0:a1:c8:d6:5d:0c:
a4:57:41:9d:63:68:7c:0f:bf:56:a8:8e:ab:7d:6c:
b4:ce:74:36:89:b4:a5:d8:70:aa:d7:3e:32:ee:a8:
b9:d4:9e:8d:7c:58:68:a1:2a:71:fd:1c:3d:a9:05:
98:28:a3:3b:30:2d:c3:56:45:e5:93:fc:ae:c6:28:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:AB:94:CD:06:F0:E7:ED:A5:97:C0:40:89:7D:4F:DE:22:77:B1
X509v3 Authority Key Identifier:
keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203139383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
Signature Algorithm: sha256WithRSAEncryption
12:27:72:57:dd:5b:52:18:d6:66:36:46:ba:a7:46:49:5b:32:
08:67:8e:27:4a:be:32:0e:fc:c6:e7:4d:b3:29:55:42:dd:41:
a4:e9:d1:cf:42:d6:c9:03:91:3b:c0:ed:72:95:09:e9:46:bb:
ab:3c:21:51:5f:de:a8:47:ce:72:c4:d9:01:82:d6:49:0c:3f:
bf:7b:89:5d:ab:c2:1c:37:39:44:f3:84:7d:fc:5a:73:6d:bf:
1a:41:88:28:b4:17:f2:72:99:6e:ed:0d:06:43:7b:bb:84:37:
4e:74:a8:e3:e5:78:71:ed:bc:7a:f7:93:e5:d2:2c:e5:11:4f:
24:59:3b:a5:41:12:ff:4d:ab:61:cd:92:fc:42:ec:f7:09:45:
a0:13:f1:82:25:62:80:f6:46:16:de:e4:7f:08:de:75:26:c1:
74:e4:0c:54:4d:bb:25:8d:c8:ce:aa:86:dd:86:cf:27:07:7c:
e8:a0:87:79:83:c6:68:68:dc:47:64:d2:47:80:e7:68:7b:7d:
e0:4d:eb:94:38:5a:2a:fb:b1:55:cb:c0:e4:f2:64:52:fc:65:
79:65:df:a5:f0:aa:7a:d7:90:42:2a:c8:41:a9:2d:49:83:f6:
7e:d4:df:8f:8c:4e:1f:69:0d:90:ea:d2:44:98:ad:49:63:bc:
ea:09:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:16 2025 by rpki-client