Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203237373735.roa
File: 3136382e3132312e38342e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier: kqVCdX0IZFPCOrJP7TLXg7ez7hrIiFiC8An26LrYKx8=
Subject key identifier: D1:DB:0D:04:ED:98:6F:1F:5F:FF:4D:17:23:C5:27:11:F2:DF:65:8B
Certificate issuer: /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial: 5F6B5AF9DCA4D5185B4892E36E03FFBB979E769C
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203237373735.roa
Signing time: Tue 04 Feb 2025 18:06:59 +0000
ROA not before: Tue 04 Feb 2025 18:01:59 +0000
ROA not after: Tue 03 Feb 2026 18:06:59 +0000
asID: 27775
IP address blocks: 168.121.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6b:5a:f9:dc:a4:d5:18:5b:48:92:e3:6e:03:ff:bb:97:9e:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
Validity
Not Before: Feb 4 18:01:59 2025 GMT
Not After : Feb 3 18:06:59 2026 GMT
Subject: CN=D1DB0D04ED986F1F5FFF4D1723C52711F2DF658B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:80:8b:a7:10:cc:9d:d1:85:1c:b3:bf:75:
89:b9:21:ff:fc:4a:33:76:f3:7d:d1:dd:9a:f6:df:
0e:5b:3d:33:91:a9:ff:0c:1b:cb:8e:1b:9b:bc:62:
68:2f:d7:fa:ee:da:72:08:91:01:71:0a:91:dd:c8:
34:7f:30:84:35:22:c3:d8:db:3f:5d:af:b4:d4:18:
a5:0e:22:8f:a0:11:57:3d:2b:0e:5d:91:ca:a4:12:
aa:25:e2:dd:cc:ef:dd:df:b2:f4:a8:5c:99:c5:b7:
70:dd:a3:e6:77:9c:76:75:fb:dc:f6:66:6d:2b:ad:
73:b9:25:d6:f4:20:ce:24:8e:10:d8:2d:86:43:59:
02:e1:2e:50:c0:cd:88:0d:f9:d8:a4:e6:64:77:c2:
17:34:a8:bc:10:40:3c:25:02:21:ba:98:38:c1:e8:
77:e5:e9:db:61:b2:38:81:11:c8:c5:f1:3c:be:ef:
95:f4:5a:e0:02:71:d2:85:88:2b:c6:0f:77:3f:60:
21:5d:c1:38:21:a1:be:57:de:62:b1:27:ae:42:83:
fa:af:ed:bf:30:e6:7d:6a:cd:10:b2:84:a0:ce:a8:
09:8f:dd:d2:df:0e:06:27:e7:b4:34:02:27:30:44:
53:6c:9f:a5:27:84:59:46:4e:c0:23:4a:54:27:89:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:0D:04:ED:98:6F:1F:5F:FF:4D:17:23:C5:27:11:F2:DF:65:8B
X509v3 Authority Key Identifier:
keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203237373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:07:d2:de:9f:e1:a0:5a:19:f7:75:73:4e:60:1c:93:39:e7:
bf:f4:b9:dd:49:c6:85:ae:35:73:28:4b:d8:3f:7a:2f:2f:b6:
24:20:46:df:f9:f2:be:e5:29:4a:83:ac:27:c6:5d:1f:9d:e9:
7a:02:63:6e:01:71:81:73:62:a1:79:8f:9b:14:4d:dc:da:bf:
5e:3d:0a:7e:da:37:30:88:52:41:ae:23:d5:0d:82:59:66:7a:
6a:8a:82:90:5f:76:6d:88:2f:bd:ec:bd:55:73:4b:db:6e:7d:
b7:c7:8e:87:db:13:5f:0b:bd:1d:a0:fc:3e:e5:6c:ce:db:e2:
54:f8:a2:ab:46:4e:a1:e0:9b:42:ae:15:fe:a7:5b:79:a4:67:
2e:8c:67:bc:7e:60:b6:b7:db:85:eb:23:4f:98:d9:57:c4:60:
11:5e:e3:1b:11:69:18:4f:2e:bf:f0:02:a6:3e:89:45:dc:c8:
46:bb:ba:b9:9b:10:77:ec:7c:c9:7c:8d:2d:8b:01:15:e5:92:
c7:66:cf:65:35:b1:6b:84:b5:3f:50:d8:1c:19:d0:33:3e:1c:
d9:62:b8:1c:58:4e:cf:0a:79:72:ef:fe:ef:67:6d:f8:d9:dd:
aa:4a:13:33:6a:a9:c8:42:ff:27:fb:aa:99:6a:10:b4:46:22:
12:84:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:58 2025 by rpki-client