Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa
File: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (raw, json)
Hash identifier: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=
Subject key identifier: BB:C0:B4:7B:BC:19:C7:C5:08:B9:BD:DC:4F:C3:12:71:9A:28:3A:F9
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 2E4F517478BA467C091242355750BB8D4FA86DC0
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa
Signing time: Tue 04 Feb 2025 18:44:17 +0000
ROA not before: Tue 04 Feb 2025 18:39:17 +0000
ROA not after: Tue 03 Feb 2026 18:44:17 +0000
asID: 272366
IP address blocks: 201.158.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4f:51:74:78:ba:46:7c:09:12:42:35:57:50:bb:8d:4f:a8:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Feb 4 18:39:17 2025 GMT
Not After : Feb 3 18:44:17 2026 GMT
Subject: CN=BBC0B47BBC19C7C508B9BDDC4FC312719A283AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:2c:37:82:81:17:c9:c3:52:83:ab:19:64:
54:6e:0a:15:e6:92:12:4c:ef:23:3b:b0:1f:f6:03:
f4:bc:0f:6c:85:67:6a:d6:a9:a1:80:0a:d2:6f:24:
a1:a8:9f:96:26:82:95:32:87:81:7c:3d:8d:4c:87:
5a:ae:b5:23:4f:cc:e0:c5:ec:98:d9:df:32:f3:98:
77:4e:5b:bf:00:d2:fc:c2:38:3c:32:b4:f1:01:14:
72:8a:5e:dd:eb:1f:bf:21:95:83:41:56:71:66:8d:
29:e3:77:c2:ab:65:e4:3e:80:bc:5b:13:d5:4f:af:
79:2d:6a:fd:34:34:4a:c6:14:fd:d0:0b:61:1e:88:
30:a9:70:38:3f:91:5f:9a:35:19:8c:2f:2f:65:4e:
5c:c0:96:5e:4d:69:87:24:ec:bc:a3:8b:0c:2e:cc:
a2:55:3b:55:1a:f2:a2:e4:24:0b:24:57:8d:0b:14:
31:ea:18:66:fe:7a:da:5f:9d:f9:6e:86:e9:f2:aa:
75:d7:f7:e2:5f:2e:34:ac:21:27:b5:29:7e:fd:69:
fa:cf:b4:10:9f:2c:7c:bb:7c:e4:ef:5a:fd:cc:d0:
76:20:db:87:6c:38:5e:17:a2:f4:3f:69:50:41:e6:
ed:4b:25:f4:8a:c0:7b:5f:56:b4:f1:e0:f0:51:0a:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:B4:7B:BC:19:C7:C5:08:B9:BD:DC:4F:C3:12:71:9A:28:3A:F9
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ef:f2:d6:58:c2:bc:10:18:95:ae:88:62:9e:20:08:1f:87:
d1:3e:8e:10:9a:db:6a:22:03:36:74:73:c3:8f:87:ee:84:85:
b7:b2:43:a0:f5:3b:ee:a9:ec:52:f2:3e:09:13:a6:c3:ca:e0:
5e:70:93:44:07:1c:69:42:a8:37:32:bb:e2:8b:b6:c8:8a:e0:
b2:aa:bb:e6:c7:f5:9a:f3:09:e2:ad:27:fd:2e:ac:a8:df:dc:
44:a8:e5:95:0e:d5:d3:70:89:f6:3e:83:fe:ca:ab:3e:ff:56:
17:6d:94:b1:36:68:50:cc:52:42:07:94:89:35:56:73:09:3e:
e2:80:0f:af:d3:b5:21:73:88:9c:9a:95:4e:db:32:de:8c:d9:
4a:60:d9:71:ef:e5:48:d7:c5:5d:3a:02:f6:60:54:6b:df:64:
52:9f:bd:84:d5:47:52:c1:69:19:75:1a:c0:b7:f0:65:97:26:
e4:ee:65:f3:af:c8:0b:ec:38:ef:65:fb:8c:17:a7:3f:79:20:
33:6a:f4:42:aa:bf:0f:e6:9b:cf:df:e0:6d:16:79:02:a5:cb:
37:04:fb:37:0d:e1:34:6e:45:07:3e:0d:30:69:29:b8:b7:4e:
a5:97:96:a1:c4:0c:59:ed:dc:05:e1:a6:0b:47:00:da:2e:d4:
07:c2:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:28 2025 by rpki-client